This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File:                     W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier:          1IosAwxb73ec5YkfxefnegtEfWTyTAzcEuyZ54UOreE=
Subject key identifier:   39:B3:31:B9:2C:F5:AE:30:8D:E9:27:FC:D8:13:77:07:7C:3B:80:5F
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer:       /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial:       019C43FDB3FE8DCC4885F4394D91790DEC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number:          103F
Signing time:             Mon 09 Feb 2026 20:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:26 +0000
Files and hashes:         1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: YdYs/u6teG5QY65EIp7UOHVsjIDUQLZx9spK8eNM4ow=)
                          2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:b3:fe:8d:cc:48:85:f4:39:4d:91:79:0d:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
        Validity
            Not Before: Feb  9 20:00:26 2026 GMT
            Not After : Feb 10 20:00:26 2026 GMT
        Subject: CN=39b331b92cf5ae308de927fcd81377077c3b805f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:0c:98:c6:0b:c0:44:94:1a:2f:ba:80:7c:
                    54:ef:bd:61:a2:97:19:29:5b:02:04:9e:65:d6:d7:
                    78:b8:b6:b0:ca:80:7a:82:80:2d:4e:f7:00:24:3e:
                    99:f1:c4:fa:b4:59:32:e9:fc:1e:86:d2:a1:bf:40:
                    60:23:37:c1:c7:f8:0d:a1:e4:fd:8d:cc:73:14:86:
                    cf:c5:ce:a4:20:ce:45:ea:1c:24:9b:01:1e:7d:8f:
                    15:b2:16:73:e8:53:ac:6b:eb:11:3e:70:48:75:01:
                    81:f8:f7:b2:76:13:81:92:c3:a1:03:1a:50:93:92:
                    67:14:1f:1c:e6:c1:aa:9c:66:07:b2:7f:7d:84:12:
                    80:b5:2e:1f:bb:ff:a3:9e:cd:92:3d:f0:77:98:9f:
                    a0:4c:74:15:b5:98:b9:e7:72:5e:bd:49:1b:e0:c0:
                    31:f3:24:a4:54:15:5c:d8:81:5a:14:a3:7b:8e:42:
                    fd:7e:1a:ec:e0:ac:76:a6:f8:8f:c0:db:4c:5c:85:
                    95:8f:6d:80:f1:c1:1b:56:6e:39:f5:de:3e:06:d1:
                    2d:d9:a7:00:5c:43:2b:d4:16:8a:22:23:6b:4c:41:
                    82:1d:38:62:07:62:cc:72:5b:78:2e:c1:37:f2:4d:
                    f2:d9:6c:68:17:f9:6a:8a:dd:f7:59:6d:44:67:11:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B3:31:B9:2C:F5:AE:30:8D:E9:27:FC:D8:13:77:07:7C:3B:80:5F
            X509v3 Authority Key Identifier:
                keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:8a:56:c3:31:0d:8b:bc:6c:a5:18:9d:b9:4d:31:ae:bc:
         f8:06:de:77:0c:69:7a:c1:9a:e7:99:b0:d6:38:b2:ef:b9:ab:
         29:d1:00:12:8d:13:ae:d2:ea:c3:2c:f7:e2:26:8b:25:82:10:
         5d:8e:39:7c:65:c5:ff:eb:7e:d1:b3:de:55:f2:56:c1:65:ad:
         4f:e8:78:8f:8b:ab:14:6c:3b:e5:52:92:45:a5:e3:63:b3:8e:
         d4:17:53:9b:e4:d5:f1:86:c4:c8:ec:31:c0:bc:9f:62:46:1a:
         66:b7:65:2f:16:7a:21:a8:0d:55:f5:0c:bb:0b:66:40:7a:dd:
         78:b2:af:2e:23:17:3d:5b:05:51:67:46:4e:64:e1:7c:db:de:
         b8:05:dc:b8:57:c1:e8:e6:25:1c:b0:60:c1:68:62:08:0c:7d:
         61:5c:19:35:57:b3:8b:44:39:79:d7:1c:96:ad:15:64:9e:80:
         0a:bb:33:95:26:a5:44:97:89:ec:6d:a3:b6:53:e0:e7:84:41:
         d5:b7:de:72:6b:b0:96:ef:f9:8c:cd:93:c2:ea:64:7a:13:12:
         0c:0a:4e:13:62:86:15:d6:87:df:fd:b2:c3:72:6e:8d:63:12:
         12:89:27:dd:5f:38:5e:12:b8:34:17:ce:a7:cc:27:d7:a9:2c:
         ce:36:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:39 2026 by rpki-client