This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          MPAEemuVGsOV408jDMYKL4r5yUapzSE15fmbj4/w6Bg=
Subject key identifier:   7B:32:A9:4E:23:74:37:37:1D:6C:09:32:1A:32:47:DE:CB:1B:48:5A
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       019C43C6A6FAFB5F59951FF5FED3F44063B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          0675
Signing time:             Mon 09 Feb 2026 19:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:18 +0000
Files and hashes:         1: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: gEsD6VAaz9TF1DBt6SdPABk2rPbeIn8P6+fm7F7klAw=)
                          2: dksbh_tx3bU5Ok0WztbuReiYrpU.roa (hash: NSSCxFWQG/xHAi2bn2Rv8MYwRip8Bj4kZ82RJfLw3As=)
                          3: gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa (hash: D7tJT81Ih/7yE0Ex5L+2xy+fHBPkeGvPOLXrDK+WOqg=)
                          4: miAb-8PhHCi43bUCI_hLnwDESQM.roa (hash: R+HHUuhd28D1d5kF4bYGuzan7r+ujmUekbJUkPeHQ9U=)
                          5: vrN1ckiG11RIjmLBs3NUdn3vLXw.roa (hash: r1+gve8otRlqQvYmhKMUDpHufcQSUz4Vi42HDaDr78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a6:fa:fb:5f:59:95:1f:f5:fe:d3:f4:40:63:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Feb  9 19:00:18 2026 GMT
            Not After : Feb 10 19:00:18 2026 GMT
        Subject: CN=7b32a94e237437371d6c09321a3247decb1b485a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:11:ca:a8:c8:70:d1:63:d1:c3:fb:94:fc:
                    e5:6a:eb:2c:c1:54:cd:ac:11:d2:b1:d8:c3:a2:20:
                    cc:79:a6:28:8e:28:31:5f:dd:34:9f:c5:6b:c1:c4:
                    79:2d:54:62:9b:43:df:4b:d7:b3:d8:c5:55:7b:c1:
                    09:d1:98:a5:44:6e:c0:7c:e5:ff:7b:fb:9d:f0:30:
                    5c:2a:20:59:8e:77:81:49:d9:f5:fc:f1:11:cc:bd:
                    b5:33:b2:79:aa:ce:7a:a7:f1:89:d5:47:d8:66:47:
                    99:dc:ee:7b:4f:a5:a5:71:a6:31:d0:ed:50:f6:6a:
                    b3:58:a1:8b:53:8a:1a:6f:f0:73:a4:68:da:0a:57:
                    e3:1c:66:b2:d2:46:df:ac:e1:b2:8b:5f:c2:c7:f2:
                    64:63:25:61:61:da:21:6a:8d:86:ae:aa:1e:ab:20:
                    bc:09:3c:db:6f:3b:1d:85:d7:d0:d3:9f:78:8f:f0:
                    3a:e0:c2:2c:c8:00:70:a8:b6:29:1f:94:49:80:13:
                    5d:84:13:d3:6c:7f:e6:3c:fb:86:f5:c5:9c:4c:43:
                    6a:f6:e6:02:ed:8b:a2:ec:7c:a5:28:db:b8:6a:ba:
                    ca:8d:36:92:21:01:76:71:7b:2b:c9:f1:c6:d8:44:
                    3d:92:92:b8:1b:8c:7f:3a:b4:72:67:7f:03:bd:a6:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:32:A9:4E:23:74:37:37:1D:6C:09:32:1A:32:47:DE:CB:1B:48:5A
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:19:47:87:aa:a2:5d:a6:e7:15:76:75:17:8b:b4:33:e9:
         c1:b4:e5:f5:77:3d:da:3b:4c:26:c7:6a:a8:ce:7d:0b:34:ff:
         f7:13:de:48:aa:5c:ea:11:5e:47:21:76:0d:a4:1d:fa:81:30:
         49:7b:c5:e4:b9:72:2d:db:cc:81:cb:22:be:d9:58:46:56:86:
         09:ef:7d:39:6c:88:d5:ee:d8:b7:7e:24:88:10:d0:ba:84:cc:
         e9:45:db:45:a8:78:7a:8d:e4:ae:28:a3:ca:9d:4d:e6:ab:5c:
         61:9f:98:21:f5:85:22:75:a4:1a:99:21:eb:e2:d9:01:2f:87:
         f0:47:0a:87:82:e4:3a:c7:d0:c4:7b:a8:0c:f7:14:ae:aa:7b:
         32:cc:8a:1b:1f:30:e0:fe:69:9b:47:61:61:ab:b7:32:ac:f3:
         e3:ba:51:12:70:e9:e1:a3:a6:95:e6:47:f6:42:5c:f8:5f:6c:
         68:85:8c:b1:25:f9:d4:6a:6b:bc:a1:e2:fa:8b:eb:ab:5d:5d:
         e8:30:d1:97:5c:64:3d:a8:dc:22:27:4a:db:75:70:3c:43:fc:
         31:86:db:e7:d9:00:d4:55:d9:63:3e:8a:fc:8e:1d:9e:a9:d4:
         48:4d:a9:58:88:64:ad:1a:6b:83:fb:e1:7d:d1:a6:48:37:45:
         b1:64:22:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxqb6+19ZlR/1/tP0QGO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NjhkMGE3MjA0NTYwYjYzNTZkODM3YmJmMTUxMGQ5NjM2
ZGY2M2EwHhcNMjYwMjA5MTkwMDE4WhcNMjYwMjEwMTkwMDE4WjAzMTEwLwYDVQQD
Eyg3YjMyYTk0ZTIzNzQzNzM3MWQ2YzA5MzIxYTMyNDdkZWNiMWI0ODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIkRyqjIcNFj0cP7lPzlausswVTN
rBHSsdjDoiDMeaYojigxX900n8VrwcR5LVRim0PfS9ez2MVVe8EJ0ZilRG7AfOX/
e/ud8DBcKiBZjneBSdn1/PERzL21M7J5qs56p/GJ1UfYZkeZ3O57T6WlcaYx0O1Q
9mqzWKGLU4oab/BzpGjaClfjHGay0kbfrOGyi1/Cx/JkYyVhYdohao2GrqoeqyC8
CTzbbzsdhdfQ0594j/A64MIsyABwqLYpH5RJgBNdhBPTbH/mPPuG9cWcTENq9uYC
7Yui7HylKNu4arrKjTaSIQF2cXsryfHG2EQ9kpK4G4x/OrRyZ38DvaYUkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsyqU4jdDc3HWwJMhoyR97LG0haMB8GA1UdIwQY
MBaAFEVo0KcgRWC2NW2De78VENljbfY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgt
NmZlMzVhZTU0YTViLzEvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iMGZiMGItYjk2YS00MzkwLTg2YTgtNmZlMzVhZTU0YTVi
LzEvUldqUXB5QkZZTFkxYllON3Z4VVEyV050OWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMYZR4eq
ol2m5xV2dReLtDPpwbTl9Xc92jtMJsdqqM59CzT/9xPeSKpc6hFeRyF2DaQd+oEw
SXvF5LlyLdvMgcsivtlYRlaGCe99OWyI1e7Yt34kiBDQuoTM6UXbRah4eo3kriij
yp1N5qtcYZ+YIfWFInWkGpkh6+LZAS+H8EcKh4LkOsfQxHuoDPcUrqp7MsyKGx8w
4P5pm0dhYau3Mqzz47pREnDp4aOmleZH9kJc+F9saIWMsSX51GprvKHi+ovrq11d
6DDRl1xkPajcIidK23VwPEP8MYbb59kA1FXZYz6K/I4dnqnUSE2pWIhkrRprg/vh
fdGmSDdFsWQirg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:44 2026 by rpki-client