This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          YtHjpNuIw4AEhkQQQGgVlye4HnME8MpajAInO44mmrc=
Subject key identifier:   0F:23:F2:41:12:E5:E1:47:74:21:4F:2F:8D:77:B9:11:FB:CD:5E:A3
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       019C44DA00DA8EC7392C2B87C986A7D5D95C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          0487
Signing time:             Tue 10 Feb 2026 00:01:03 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:03 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:03 +0000
Files and hashes:         1: mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa (hash: QMMxxl6fyPVIcpenT7PqBSSmMyHkr6udMWC3CqmEp8U=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: s5kFMrfPSeAV1HYW2nnTPlp0emW2f76v65lKDV1s+oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:00:da:8e:c7:39:2c:2b:87:c9:86:a7:d5:d9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: Feb 10 00:01:03 2026 GMT
            Not After : Feb 11 00:01:03 2026 GMT
        Subject: CN=0f23f24112e5e14774214f2f8d77b911fbcd5ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:e4:88:7c:e6:fc:fe:1e:d6:4a:06:79:66:
                    82:d9:da:d0:ca:d3:d5:1c:04:5b:74:fc:d5:41:d7:
                    76:b1:56:07:e8:5c:f2:4f:db:fb:7f:4c:58:e7:74:
                    52:e1:6e:a3:d9:19:5f:c0:2c:54:56:9b:a7:eb:7e:
                    23:aa:cf:82:0a:8e:7e:98:90:8e:3a:24:43:5c:72:
                    11:6d:c5:c0:e0:01:70:be:7f:89:a2:dc:ff:03:4f:
                    d0:61:46:28:f9:00:2e:07:72:08:22:c8:3d:ae:d9:
                    b6:d8:09:eb:23:42:31:04:e8:f9:2f:37:db:1f:cc:
                    a9:96:f6:64:ba:94:09:44:39:12:3b:9f:bf:4c:de:
                    ca:13:50:21:fc:fb:3c:b8:68:ef:25:78:dc:8c:9b:
                    38:2c:b4:54:f0:bd:30:1e:ec:b4:2c:7b:c5:58:23:
                    08:b6:76:af:2d:98:21:90:2b:91:d4:0b:99:f1:e6:
                    c4:a5:8c:50:d9:79:35:85:3a:72:81:a2:c5:55:6b:
                    81:8d:57:8f:86:7b:e8:32:b7:56:44:5d:11:cc:28:
                    89:d4:34:db:eb:46:21:d1:16:c0:41:31:30:e3:e4:
                    2c:c8:5d:73:ca:5e:e7:f2:96:32:30:ba:53:c7:b2:
                    28:12:59:c9:7f:8f:29:96:c3:d4:7b:c4:6d:67:af:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:F2:41:12:E5:E1:47:74:21:4F:2F:8D:77:B9:11:FB:CD:5E:A3
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:85:c9:f8:23:a3:39:73:38:a6:cc:3b:eb:1f:49:51:da:5f:
         c6:8b:7b:38:9f:04:d4:af:8d:c4:6a:8d:fe:06:eb:6e:33:9f:
         6c:40:fb:d9:2f:80:f6:15:cb:af:e1:70:87:a2:a7:dc:cb:87:
         51:9d:b2:65:37:af:0f:89:38:29:2a:fa:ce:0d:10:9a:20:68:
         2a:9c:12:44:95:41:79:03:80:17:29:20:73:d2:13:30:a0:19:
         61:77:e1:59:78:e1:c5:07:97:e2:5f:df:7c:6a:1a:74:9c:ce:
         03:e8:33:b7:2c:dc:fa:41:33:59:b7:80:f4:04:0b:7c:83:29:
         60:e6:ba:2d:8e:19:cd:71:69:2e:02:60:6f:d8:32:ba:22:cc:
         d6:28:a6:c6:a9:bf:71:3d:f7:40:1d:bb:35:e5:04:d3:09:65:
         85:bc:1f:23:75:f9:1a:2a:79:2a:99:ab:bf:ff:fa:ac:1a:d8:
         86:f9:51:4a:de:4c:c7:47:6c:50:e9:09:bf:30:b8:bb:9a:3d:
         01:ed:a1:f9:58:f5:b0:c1:72:46:5a:8a:29:ec:8f:53:3b:27:
         d7:5d:32:dd:94:57:f5:b3:2f:83:8f:df:51:83:89:96:d7:e7:
         ce:b8:ce:b1:1e:5f:22:b4:eb:11:7a:97:d3:95:6f:ae:04:ab:
         07:b2:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:50 2026 by rpki-client