This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
File:                     wvPozdMcgnmN3vk0AfKcfcqmr20.mft (raw, json)
Hash identifier:          6DReU5cG5oFfujfEAIkA7vONBzmHVEsrGSCNf80Dwv4=
Subject key identifier:   C9:3F:85:0C:10:A6:8C:9C:B4:9E:67:8E:0C:0C:14:19:09:30:E3:9D
Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
Certificate issuer:       /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Certificate serial:       019C421006EA19A0913A5EC14ABAEFA4732F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
Manifest number:          0199
Signing time:             Mon 09 Feb 2026 11:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:12 +0000
Files and hashes:         1: Gfv6VShJ4mT0fdnOqNJm0r4Kd0I.roa (hash: qUpgMPynY63Z9VUYkg3HECjUl6zX6JH95LZtBLn9SPc=)
                          2: wvPozdMcgnmN3vk0AfKcfcqmr20.crl (hash: 2OYaowonH/rIi73hnw6K5wfrhSFUoSLmooIPJyOeWUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:06:ea:19:a0:91:3a:5e:c1:4a:ba:ef:a4:73:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
        Validity
            Not Before: Feb  9 11:01:12 2026 GMT
            Not After : Feb 10 11:01:12 2026 GMT
        Subject: CN=c93f850c10a68c9cb49e678e0c0c14190930e39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:92:4b:d6:4d:33:87:a3:65:ec:20:64:d6:
                    24:63:ef:70:30:61:d8:dd:1b:ea:07:b1:2f:18:7d:
                    3a:54:32:89:eb:7e:ef:da:39:d5:e4:1a:90:b0:95:
                    e6:fc:c7:0b:fa:5a:f2:33:7a:a5:27:6b:20:26:59:
                    5e:43:b2:72:85:88:ed:40:b5:44:2d:89:2f:6b:0d:
                    9c:e2:a9:64:a8:7b:70:eb:d7:73:1b:5a:8e:79:59:
                    d5:85:a0:6d:a3:bc:3d:b7:02:43:c2:02:5a:bc:c1:
                    27:60:ff:a0:46:49:55:63:ab:5e:1b:52:0a:f2:28:
                    0c:83:a6:16:7a:38:36:95:40:f1:2b:1e:79:4e:7d:
                    14:c2:2b:83:21:fa:0d:60:c3:da:c9:33:a9:66:4b:
                    a4:b2:e8:df:4f:79:b1:cf:eb:aa:ba:7f:9d:22:4f:
                    1d:60:65:a8:ec:f2:a6:ed:b6:96:03:4c:94:6d:61:
                    b7:a0:77:cc:fc:f7:f3:f5:8d:b8:72:d9:a9:4d:42:
                    95:4d:bf:b4:8c:84:3c:b9:b6:f0:3b:3c:a4:19:62:
                    36:ae:15:ae:6d:5d:02:1a:69:16:68:59:6e:18:c8:
                    b8:81:91:c5:6b:f0:3e:4b:2f:2e:f6:eb:c8:d9:f8:
                    9a:09:18:fd:97:b2:87:c8:8d:c1:67:79:12:49:7b:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3F:85:0C:10:A6:8C:9C:B4:9E:67:8E:0C:0C:14:19:09:30:E3:9D
            X509v3 Authority Key Identifier:
                keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:44:b3:df:45:58:33:cf:c4:ef:ee:68:db:e3:c7:57:48:0d:
         07:f8:14:6c:f1:03:10:ed:36:ac:d9:93:7e:5a:06:94:f5:dd:
         36:f7:bf:0d:d4:33:98:2b:bb:ff:fc:5f:88:0c:c2:f1:ff:48:
         65:22:4f:0d:7f:26:5e:70:28:6e:2b:bc:77:9f:49:a9:c8:af:
         1d:82:8e:72:07:3d:53:99:f1:1c:31:61:bf:c8:f5:07:4a:d5:
         4c:87:99:91:1d:88:5b:59:84:76:aa:bd:8d:00:47:2e:ba:e2:
         83:ca:4e:e8:df:d1:9c:8b:a4:5b:1b:2d:bd:65:aa:09:44:b9:
         10:20:b6:b4:66:06:ff:65:b3:b7:2a:95:5f:9c:86:06:c8:05:
         bc:75:43:69:ce:6e:c7:db:05:81:04:d0:12:f8:82:86:32:d2:
         66:63:78:3f:91:ae:e6:71:e1:81:ec:5a:8e:0b:85:5a:3a:39:
         34:82:fc:0c:54:8b:93:70:4f:12:14:77:a3:51:c6:ae:d7:2f:
         d1:c4:6b:9b:1f:c1:79:06:47:d8:34:5f:15:80:23:90:e4:9d:
         9b:9c:05:50:ac:22:25:8a:21:d9:4f:a3:03:bf:d0:3e:04:ee:
         ec:e1:8f:aa:f2:99:27:b8:05:33:b0:15:5a:54:f1:e9:3a:63:
         82:44:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:25 2026 by rpki-client