This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File:                     wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier:          tb/9ukXyNCEISmggNe4CUt78taUcz3tv2+paGPDS6Q4=
Subject key identifier:   EB:97:F5:5F:B9:8A:2B:B5:60:63:C9:34:35:52:78:A6:01:8D:DB:EB
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer:       /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial:       019C44347CE9B8BBF7E7A61809079DA77999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 21:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:16 +0000
Files and hashes:         1: WrB_6nEScPqneHKwQCA6QB4d4QA.roa (hash: 85wjB4Jt2bkwpAvi6/jsQd4XiX94VRI5UhSDcmPSSb0=)
                          2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: af8/4w8NgmbhhH/rSKaQ679LZdT8L58nS2D+Z5HpUOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:7c:e9:b8:bb:f7:e7:a6:18:09:07:9d:a7:79:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
        Validity
            Not Before: Feb  9 21:00:16 2026 GMT
            Not After : Feb 10 21:00:16 2026 GMT
        Subject: CN=eb97f55fb98a2bb56063c934355278a6018ddbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:b3:48:d1:aa:01:3d:f1:1f:f5:e7:ba:b5:
                    b1:a8:03:b7:f9:06:1f:3e:c3:36:6d:4f:7a:f9:db:
                    c8:81:e9:81:59:8b:38:8b:6c:76:b6:8c:66:66:dc:
                    5d:30:a2:ea:ca:c3:11:2e:a9:51:f8:7c:20:1c:b8:
                    d8:70:f4:be:bf:ae:59:c3:5f:31:54:4e:9d:a3:0f:
                    ac:62:c7:37:62:1d:e1:12:e5:98:6a:9b:5a:98:b6:
                    5c:33:b2:3c:c1:48:d8:e4:75:6f:09:2d:c3:35:07:
                    a1:e8:7d:81:08:1f:1e:61:58:c0:6a:7f:8d:d5:bb:
                    f3:23:99:05:6f:36:e0:a5:29:64:ba:e5:d0:18:92:
                    45:d3:64:c9:c2:12:ec:6c:d1:08:ee:f4:fd:b7:de:
                    d1:f7:ae:e4:a7:f2:d0:63:22:19:4e:06:ec:03:cc:
                    75:cf:ae:9c:81:57:2e:05:33:47:b7:46:e0:3c:67:
                    ea:b2:4b:5e:cf:6e:23:e5:57:3f:71:93:4e:2d:35:
                    15:e8:b8:fc:cf:6a:6f:34:34:19:d7:e0:22:df:be:
                    63:e9:ca:72:b7:ef:c0:a5:e0:37:47:03:ed:ea:f6:
                    a3:18:09:d2:8f:24:d1:e9:99:8d:5f:fe:c4:bf:af:
                    53:ca:67:cc:d3:e9:51:ac:4a:2e:27:55:53:97:ca:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:F5:5F:B9:8A:2B:B5:60:63:C9:34:35:52:78:A6:01:8D:DB:EB
            X509v3 Authority Key Identifier:
                keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:35:b8:c2:c5:3a:97:cc:8f:61:6b:0b:b8:22:b2:4b:55:31:
         a3:d5:0b:8d:8f:6e:3c:7f:a9:f9:0f:f8:03:4b:a3:04:88:ed:
         fa:fd:ac:4d:e3:e1:8b:68:41:9e:61:b0:9f:16:2c:74:5f:d2:
         e0:81:04:0c:e8:2d:df:57:c9:f5:07:64:aa:dd:4a:65:78:35:
         df:8d:e4:1e:0e:91:54:58:fd:1b:86:35:4f:13:32:f3:d7:c4:
         6b:7c:8d:86:76:cd:55:d4:e8:11:eb:29:ca:23:a9:0e:a5:1c:
         29:d7:10:87:0d:ce:b0:7a:de:cf:fe:60:8f:1c:37:0b:62:95:
         7c:8e:fd:aa:23:25:57:33:ca:ee:12:0d:46:00:be:9a:79:13:
         87:2c:cf:c0:4e:d3:23:7a:e5:2d:0c:e0:b3:aa:58:66:22:f3:
         32:4b:d2:5e:7e:d4:8d:b9:05:5c:a8:57:87:fb:e1:70:d3:7f:
         18:03:a1:71:bd:ba:f9:bf:34:e5:72:6d:99:30:34:da:0c:37:
         26:d1:90:30:8b:30:3d:58:ea:4c:8d:61:4d:c2:a4:6c:44:d2:
         88:c1:ee:8f:d6:f7:63:fe:02:18:7e:53:17:00:3e:d5:98:46:
         d4:7a:0d:75:a7:1a:aa:01:bb:95:ae:7a:a8:c0:10:97:a8:0b:
         d6:09:01:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENHzpuLv356YYCQedp3mZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWM1ODMzN2NkNGQ3NGNkOTIxOWQ4Nzc4ZGVlNWIyOWYw
OGE0NjEwHhcNMjYwMjA5MjEwMDE2WhcNMjYwMjEwMjEwMDE2WjAzMTEwLwYDVQQD
EyhlYjk3ZjU1ZmI5OGEyYmI1NjA2M2M5MzQzNTUyNzhhNjAxOGRkYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G6zSNGqAT3xH/XnurWxqAO3+QYf
PsM2bU96+dvIgemBWYs4i2x2toxmZtxdMKLqysMRLqlR+HwgHLjYcPS+v65Zw18x
VE6dow+sYsc3Yh3hEuWYaptamLZcM7I8wUjY5HVvCS3DNQeh6H2BCB8eYVjAan+N
1bvzI5kFbzbgpSlkuuXQGJJF02TJwhLsbNEI7vT9t97R967kp/LQYyIZTgbsA8x1
z66cgVcuBTNHt0bgPGfqsktez24j5Vc/cZNOLTUV6Lj8z2pvNDQZ1+Ai375j6cpy
t+/ApeA3RwPt6vajGAnSjyTR6ZmNX/7Ev69TymfM0+lRrEouJ1VTl8qitwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuX9V+5iiu1YGPJNDVSeKYBjdvrMB8GA1UdIwQY
MBaAFMEcWDN81NdM2SGdh3je5bKfCKRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTIt
YzM5NDU0MWY3NzBlLzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTItYzM5NDU0MWY3NzBl
LzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzW4wsU6
l8yPYWsLuCKyS1Uxo9ULjY9uPH+p+Q/4A0ujBIjt+v2sTePhi2hBnmGwnxYsdF/S
4IEEDOgt31fJ9Qdkqt1KZXg1343kHg6RVFj9G4Y1TxMy89fEa3yNhnbNVdToEesp
yiOpDqUcKdcQhw3OsHrez/5gjxw3C2KVfI79qiMlVzPK7hINRgC+mnkThyzPwE7T
I3rlLQzgs6pYZiLzMkvSXn7UjbkFXKhXh/vhcNN/GAOhcb26+b805XJtmTA02gw3
JtGQMIswPVjqTI1hTcKkbETSiMHuj9b3Y/4CGH5TFwA+1ZhG1HoNdacaqgG7la56
qMAQl6gL1gkBYA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:13 2026 by rpki-client