This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File:                     WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier:          HCSUyrzD7mFlTjMFMHsIPbCMtBuNHHZLZY3gUO/C9Vg=
Subject key identifier:   CF:3C:3A:F2:16:2A:2C:D5:C2:CA:8A:5A:3A:F3:1B:0B:AD:F0:9C:E6
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer:       /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial:       019C42B3F5E0981ECA64DC6B3B2341BB37F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number:          0C91
Signing time:             Mon 09 Feb 2026 14:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:15 +0000
Files and hashes:         1: KrihM0-M-9dbOhmKaKlJsVRPjLE.asa (hash: 1tpnATyjLiEC8Y1JllxOdUuP2TfvewFCh8KSgFzAI/Q=)
                          2: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: xzhy5sos6d2bRh0j2tX1f1lZDjvU8f850mb8NZzBgQU=)
                          3: xSm2GKIgX-TmmwbUisQJTzmDs1I.roa (hash: j3pUj/jhxDiPVEhKH0jvS5PVLx5Hu8suAOO9hIjMPQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:f5:e0:98:1e:ca:64:dc:6b:3b:23:41:bb:37:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
        Validity
            Not Before: Feb  9 14:00:15 2026 GMT
            Not After : Feb 10 14:00:15 2026 GMT
        Subject: CN=cf3c3af2162a2cd5c2ca8a5a3af31b0badf09ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:10:50:7c:cb:a9:83:d3:97:33:b4:b7:ff:
                    77:3f:c9:17:da:33:f7:25:fc:39:0f:b0:f3:13:c5:
                    03:94:5d:40:77:c5:ec:42:19:04:e2:27:48:35:fc:
                    fc:fd:fe:69:76:d8:ef:2b:e6:ae:8a:a0:9d:ca:c6:
                    41:9f:48:89:1c:f0:d1:da:ea:65:b9:3a:df:9d:7f:
                    b6:64:e4:3b:22:cf:77:84:5a:b0:a9:ad:86:eb:58:
                    af:07:d7:93:47:12:09:c8:65:06:12:33:09:2b:cc:
                    e2:39:91:2f:39:9b:dd:ea:30:c0:7e:79:e9:01:17:
                    26:c4:d6:cc:62:ac:b5:95:f8:13:a1:09:a4:85:ca:
                    3e:90:b8:ed:50:ee:1b:27:7c:87:02:fb:11:2f:cc:
                    ec:d5:99:90:78:d3:4e:37:7d:e5:bb:27:ec:b2:28:
                    5b:a5:c7:06:d7:ec:36:1a:22:f5:b8:d0:1a:16:99:
                    9f:dc:49:13:83:1e:9f:73:9c:94:fc:89:12:35:3d:
                    79:2c:f5:bd:1d:a4:1d:f6:4d:66:b7:18:8f:29:be:
                    6b:c2:3c:8c:01:2a:d8:c3:1c:dc:68:66:c0:d4:db:
                    2f:6a:e9:6a:bf:aa:40:56:10:2b:8c:e8:f7:71:7c:
                    db:ee:d4:66:98:8b:6c:10:e1:ec:fe:24:1d:d6:cf:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3C:3A:F2:16:2A:2C:D5:C2:CA:8A:5A:3A:F3:1B:0B:AD:F0:9C:E6
            X509v3 Authority Key Identifier:
                keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:14:93:ef:1a:c6:31:87:18:f4:4a:2d:cd:27:c3:23:dc:3b:
         51:b1:0b:6a:61:da:74:b3:a4:34:dd:c7:a2:19:5c:5e:05:2b:
         9e:9c:fb:99:be:80:37:1e:6b:8b:b0:71:8f:9b:a1:a0:d0:07:
         40:cc:67:08:bc:0d:5b:4d:19:eb:2c:1a:ac:5a:3c:54:c4:6f:
         65:f3:38:46:cd:58:eb:0f:f1:47:0c:cb:f7:1a:c3:1a:1c:50:
         5f:e0:e6:2c:1d:92:c4:3e:08:06:a2:24:40:39:fc:cc:00:43:
         3a:f2:43:29:42:27:f2:24:ea:7a:2e:b1:37:68:dd:c0:35:53:
         34:ab:0e:6d:0b:83:17:15:db:53:b6:67:f8:c6:39:59:0f:ba:
         7d:64:50:fe:fe:9c:c2:4f:50:8f:e7:3a:27:70:5b:8f:93:a6:
         ed:96:03:0f:97:f7:b3:7e:90:ad:bc:99:eb:8b:1e:1f:d4:cc:
         6a:09:a4:07:2f:29:1d:c7:97:83:95:0e:dc:3e:9c:ea:c0:41:
         b0:48:b1:5b:11:dd:0f:95:a2:cf:d0:51:00:a9:e9:56:b1:ba:
         8b:90:0e:f7:a2:47:27:8a:2c:69:02:66:e1:da:63:3e:e7:d3:
         93:2a:8f:a2:65:97:7d:bf:c5:a1:07:f2:c0:42:f6:cb:31:c6:
         d6:cd:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:45 2026 by rpki-client