This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File:                     _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier:          UdomizLPW6ayrJ6OrcFsFg+cm23K5NsOIayrINNyp94=
Subject key identifier:   29:5F:69:17:7F:DC:22:48:2A:EE:52:BB:B1:20:23:DD:0A:9E:5B:0E
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer:       /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial:       019C420F395B7BE8A4659ADFD1BD96728630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number:          1246
Signing time:             Mon 09 Feb 2026 11:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:19 +0000
Files and hashes:         1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: 6HhexYEG97//ZNgmlE+o7T4J7Rrt4prFXV9UtAoiyGA=)
                          2: jRw_hCaxwNXQsYzA3PzlY4fOvh8.roa (hash: TsARQtUlpIVlezRpKUxgn9JnDhx3xOYYjd6M4rAmM6E=)
                          3: wTx66_ZrAUtnUb1haIiLM4fL3Cc.roa (hash: uyecQTO1gvRg0VQn7PGhpDSFigdWaWP+Ttm02UEjKE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:39:5b:7b:e8:a4:65:9a:df:d1:bd:96:72:86:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
        Validity
            Not Before: Feb  9 11:00:19 2026 GMT
            Not After : Feb 10 11:00:19 2026 GMT
        Subject: CN=295f69177fdc22482aee52bbb12023dd0a9e5b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:93:4f:85:52:e0:31:ad:18:65:e9:13:3b:
                    f3:97:2c:45:16:58:25:1d:5a:e2:2e:16:9d:d2:39:
                    b4:60:ea:0b:fb:52:5f:ab:6d:d1:2c:9d:2d:8b:24:
                    e3:5a:81:e6:3e:56:57:98:70:25:a4:90:b9:4a:29:
                    05:29:68:ea:4d:4a:e0:62:7c:ed:0a:73:80:2e:76:
                    bf:95:49:f9:b8:9b:a2:94:e5:2e:9a:7b:c0:d4:91:
                    77:3d:9b:f4:ca:df:f3:d4:41:2b:cf:66:75:64:2a:
                    2c:1d:ad:7f:d5:54:c2:87:dd:2a:59:b0:04:b6:37:
                    46:ca:69:a3:18:93:94:3f:64:e9:3d:25:d9:b0:ec:
                    5c:34:2f:8d:c0:52:40:af:85:d1:e3:86:dc:9c:5b:
                    cf:6a:b0:2f:67:b4:3f:8b:3f:3b:a6:9a:16:6b:6b:
                    6a:f1:e6:4e:42:05:10:6a:a9:23:7c:d8:75:e6:91:
                    88:9a:06:f8:4b:28:ce:5a:bb:32:72:ea:bb:6d:14:
                    13:b4:73:cc:7a:2d:69:fd:94:37:73:14:39:ff:0f:
                    31:c5:df:cb:0d:62:2c:74:ba:2f:0b:e4:a1:d1:9e:
                    65:25:e5:a4:00:f5:cb:13:0c:25:46:f9:43:75:13:
                    dc:ae:74:b8:d5:eb:c8:95:ba:bd:12:74:7d:a7:f1:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5F:69:17:7F:DC:22:48:2A:EE:52:BB:B1:20:23:DD:0A:9E:5B:0E
            X509v3 Authority Key Identifier:
                keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:12:ce:69:34:6d:52:ff:e9:ee:e2:49:77:eb:72:b3:b4:
         68:0d:13:30:63:27:be:9c:82:ab:34:fb:c8:9e:4d:70:27:cf:
         23:3e:0e:1c:90:2d:9f:c1:b6:09:97:5e:a4:13:4a:8a:23:3f:
         d2:3b:a3:f2:0f:c5:2b:b6:07:c5:07:c7:43:11:dd:44:73:6c:
         92:39:fc:e3:ba:4e:4d:5e:92:65:3b:16:81:54:70:f5:e3:ed:
         3f:b4:e7:6f:ea:33:63:5c:62:0d:01:7e:d0:3f:f6:f1:55:5d:
         7a:b6:e2:28:b7:67:a5:3d:2f:35:1f:cf:54:2a:c5:50:28:39:
         1a:53:42:ee:ee:2b:c2:e3:2f:7a:6b:54:45:fc:a1:8a:40:14:
         9c:ea:98:ee:28:66:69:51:0c:f8:03:ba:7d:72:a1:7a:08:8b:
         89:03:ff:ed:13:3f:47:08:28:7b:d5:8e:40:a2:fa:2c:94:a6:
         bd:2b:79:cc:1c:05:7e:ef:b8:f3:01:aa:1d:43:92:72:06:3f:
         52:af:01:02:70:91:74:da:84:38:fa:cf:80:eb:18:0b:79:68:
         f1:6b:c0:1f:2d:66:28:a9:3e:b7:c5:56:ac:c6:f4:3b:62:e1:
         64:02:38:36:a3:0f:3d:2d:f2:74:e3:d7:ca:5d:4d:42:a2:ea:
         19:dd:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:58 2026 by rpki-client