This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          GEUSzjgduHrAMBr8GY4D7tJD5rAxrRJcbMLiXD2YOrs=
Subject key identifier:   0A:7B:E5:84:B0:0B:B1:2D:B4:95:91:F6:82:A1:AA:C4:3E:1E:50:F5
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       019C43C69A4389D62838068FB99E163F4614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 19:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:14 +0000
Files and hashes:         1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: xgdJQ9DS66WVhgQ43lDc0wJapHuoxcuWHIWIrilV14g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:9a:43:89:d6:28:38:06:8f:b9:9e:16:3f:46:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Feb  9 19:00:14 2026 GMT
            Not After : Feb 10 19:00:14 2026 GMT
        Subject: CN=0a7be584b00bb12db49591f682a1aac43e1e50f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:70:65:0a:b1:33:11:93:60:24:bb:ae:80:
                    cd:a1:18:83:d7:7e:6c:3f:97:57:47:bc:4a:02:ed:
                    99:53:76:d8:87:71:9f:27:52:21:72:cd:ee:d4:18:
                    3c:3f:2f:6b:61:c9:36:22:a0:e9:88:9a:65:e5:23:
                    98:a5:c7:ed:cd:c3:bf:a4:41:03:71:06:66:62:d8:
                    7d:10:a6:49:dd:e1:32:17:6a:23:85:ed:fd:0c:bd:
                    d2:75:6f:d7:8c:d1:96:32:0a:6b:48:d6:35:e7:68:
                    3c:fa:8f:a1:be:e4:a8:cf:db:5c:7e:f7:91:ea:9b:
                    c1:5e:3a:ea:a9:72:a0:6e:6b:eb:73:a7:e7:8b:0b:
                    78:62:a0:03:05:77:6d:5d:28:52:8f:f6:dd:66:a0:
                    4e:cf:44:86:d5:d4:44:3c:15:a6:59:c6:6c:34:ce:
                    b9:c8:86:37:28:9b:f1:c3:11:78:02:86:77:d7:3b:
                    f3:b3:3b:0b:1a:d0:a2:4f:91:d9:b6:4b:a7:a4:a1:
                    63:a6:ab:b3:df:b8:10:c2:26:f8:66:f7:44:e1:17:
                    79:56:ac:7d:82:35:67:f6:ad:10:a6:4e:1b:1d:8f:
                    73:94:a6:5e:47:09:fa:07:bf:92:b8:e1:2c:24:4f:
                    57:31:2c:6a:c8:cb:0f:df:89:e8:dc:66:9e:b9:63:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7B:E5:84:B0:0B:B1:2D:B4:95:91:F6:82:A1:AA:C4:3E:1E:50:F5
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:a4:dd:9a:5a:fa:69:fc:fa:0f:37:91:b8:17:d6:c1:00:
         a9:12:cf:34:8f:3a:fa:16:1a:a3:7e:86:ab:8e:2c:7c:7c:52:
         e6:b8:fa:19:dd:6f:02:99:dd:41:84:35:b5:60:1e:77:6e:9d:
         75:fa:50:66:d3:04:05:e9:50:4b:0a:1a:99:19:f9:69:23:fd:
         e7:7b:dd:62:0a:ad:b1:f9:8e:b9:01:68:bf:f0:b1:90:fe:87:
         1a:96:ed:90:b7:58:a1:3f:57:dd:6e:a4:4e:7a:32:b9:75:4b:
         18:fd:4c:23:91:6d:5c:5f:f8:68:db:aa:e5:52:fd:e1:a0:68:
         77:53:09:66:e2:f3:0c:ce:31:9d:b5:4f:6b:2e:af:14:3c:4c:
         7b:bd:2d:aa:45:49:1f:15:ed:d7:9a:69:d0:1d:00:f8:cd:3d:
         d8:0f:42:70:31:29:79:a8:eb:7f:ff:a1:4c:d1:be:ef:25:9d:
         3f:59:6c:ec:05:8f:15:0b:2a:fd:5e:1b:95:22:0f:68:0c:a8:
         08:5e:62:5f:e4:07:10:9d:60:aa:31:26:3a:51:17:54:6e:9a:
         11:67:7e:ea:be:86:2b:ab:17:51:3e:84:07:5b:e6:3a:4f:22:
         0a:57:c2:59:db:26:70:28:3d:f7:02:7b:d0:69:0c:07:30:96:
         79:f9:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:50 2026 by rpki-client