This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File:                     wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier:          NhTcveX5Li9jQF7yFN5uDlLJqSPIfu1KuV7RPVOIhEY=
Subject key identifier:   ED:A2:A1:8A:6C:D1:50:16:BC:7D:2D:09:D4:26:F2:94:A4:25:48:C4
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer:       /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial:       019C4358B5AE79C7689900CBB0929971E3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number:          06A1
Signing time:             Mon 09 Feb 2026 17:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:12 +0000
Files and hashes:         1: KGrdlGc_X6Hki0LeSOU3SUEjdJY.roa (hash: xgbr933ze/YCtvnJPl14XndSL5VHe/+W5p0SIc3yhsI=)
                          2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: fd6BMLfdxdmG5du5nSi8Wi7dFMydn5h5qpVsLLkDUu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:b5:ae:79:c7:68:99:00:cb:b0:92:99:71:e3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
        Validity
            Not Before: Feb  9 17:00:12 2026 GMT
            Not After : Feb 10 17:00:12 2026 GMT
        Subject: CN=eda2a18a6cd15016bc7d2d09d426f294a42548c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fa:0d:27:29:99:11:82:ff:bf:45:f8:e4:45:
                    e0:39:bc:4c:7c:eb:fb:7a:37:ad:8c:ed:80:78:8f:
                    44:30:15:0d:4b:92:c5:8a:49:db:bb:f8:43:78:1d:
                    b4:ce:df:1b:ab:f5:21:d1:96:05:b9:68:06:d1:22:
                    5e:cd:74:9a:2b:22:16:b9:ac:ac:b9:17:09:17:5f:
                    38:0f:38:5e:64:0d:93:6c:af:ec:a5:b5:8c:9d:90:
                    50:41:0e:f8:ac:3e:8f:95:3d:c5:84:29:a3:c1:2e:
                    5d:8f:fd:38:40:9d:91:44:d7:19:d4:5e:f0:01:60:
                    84:33:b3:a5:22:46:32:fc:4e:57:53:1f:ad:a1:c9:
                    77:13:b3:fe:1d:4c:9f:93:16:1f:5f:72:49:99:b9:
                    4c:a6:4d:83:11:c2:7d:89:63:23:71:2b:95:f6:73:
                    60:17:09:47:8a:f9:24:eb:8a:a8:38:ae:da:e5:9e:
                    55:ef:fa:a5:d1:ee:6f:38:e6:54:fc:e9:8e:1d:79:
                    2d:06:19:5c:a7:3e:3b:b0:e1:fc:71:60:d7:8e:ad:
                    e1:7d:ed:ac:a4:1e:79:17:e9:34:17:e8:8e:af:97:
                    20:ad:58:8a:91:2a:53:99:d4:a0:4a:57:a3:ec:5f:
                    c0:a5:52:6b:33:d2:6d:4b:69:2a:27:97:a3:39:3a:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A2:A1:8A:6C:D1:50:16:BC:7D:2D:09:D4:26:F2:94:A4:25:48:C4
            X509v3 Authority Key Identifier:
                keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:a5:ee:df:05:f6:8c:34:c8:a7:79:b9:93:d5:a9:82:0e:
         59:5c:5d:41:89:74:ae:fe:cf:88:77:84:92:d7:ae:ee:e3:f4:
         ba:c4:2a:7c:42:f8:3b:5e:18:ae:b9:e0:0d:73:10:c3:6b:c8:
         33:e0:a5:84:6f:ff:1b:0a:eb:92:c0:ce:85:67:95:b2:b7:e7:
         95:e3:91:53:e7:ae:f6:c2:5b:63:56:4e:2e:4f:05:d8:99:03:
         71:d2:fa:78:f7:10:88:01:0e:65:f3:8d:e7:ff:0f:ea:a8:58:
         c9:92:3e:1f:25:4e:74:7a:fc:14:84:8a:32:1d:7e:2d:64:b5:
         b3:f9:aa:fb:ba:0b:bb:07:12:f9:f7:c0:59:bf:ff:99:e9:c9:
         c0:8d:d7:8e:de:e9:52:c7:dd:60:56:3f:d2:3c:4f:e7:60:34:
         64:ba:c1:a3:94:a5:17:49:22:09:08:6c:ef:ea:77:56:ed:0d:
         40:a0:1f:df:ab:2f:0e:0d:aa:4c:be:80:c8:f7:96:89:37:fa:
         45:63:b4:de:e1:a7:53:e1:9a:ab:93:4e:75:4b:48:c3:12:bd:
         01:5a:b5:67:c6:a5:81:5a:17:89:13:5e:05:4b:1f:e4:4e:60:
         86:23:7a:43:b4:dd:f8:59:ca:36:20:66:d0:43:97:d7:2b:a4:
         2f:28:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:38 2026 by rpki-client