This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File:                     wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier:          DGXLKUYVdXCYd/byL8h8ZYyIswP320VYf6laf0DDQx0=
Subject key identifier:   F5:92:46:29:59:13:CA:9F:FB:D5:CE:6A:81:19:A2:4D:92:87:F8:14
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer:       /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial:       019C416A894224590EC706BBE947504C1CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 08:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:26 +0000
Files and hashes:         1: T8QJHByEv64H0gjF7HGRIrb9vjE.roa (hash: HQO3K4fGqybXPG44yT3CoGrtf4JzDzj7i8w8Wh7zPMc=)
                          2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: sbs5OjRL/dap/aaulN2448xF0W/rONiVUJVu3CqeICE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:89:42:24:59:0e:c7:06:bb:e9:47:50:4c:1c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
        Validity
            Not Before: Feb  9 08:00:26 2026 GMT
            Not After : Feb 10 08:00:26 2026 GMT
        Subject: CN=f59246295913ca9ffbd5ce6a8119a24d9287f814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:23:ce:a3:16:74:f2:ca:6e:b3:f2:68:c9:
                    f0:d5:61:97:8d:68:19:6c:c1:78:2f:51:b5:71:e2:
                    1b:61:49:69:8f:35:c1:68:d2:e9:73:36:8d:6f:91:
                    3a:dd:d7:f2:00:c4:c8:2a:bd:74:5d:06:cd:0f:5c:
                    6f:31:58:e0:a4:11:9b:e5:57:18:37:ee:ff:18:b3:
                    ff:34:5f:14:ec:e5:97:ad:0c:19:57:1a:47:a3:79:
                    d2:75:27:57:3d:3f:b2:f0:7c:d7:f8:73:5b:81:52:
                    23:ad:0c:07:d7:34:65:3e:42:3a:b9:c0:7c:1b:c9:
                    08:23:62:1a:d6:14:77:2f:77:2e:09:5e:36:aa:d0:
                    c0:99:cd:e9:83:0c:46:14:de:4f:5f:94:ab:f2:b6:
                    3b:9b:01:6d:ff:6c:0e:31:31:96:38:35:94:86:cb:
                    a7:00:85:7d:22:99:ca:23:8b:c5:a9:af:59:02:8e:
                    8f:4f:b5:b2:68:7f:0e:f1:5a:25:16:05:f9:c9:2a:
                    f8:65:cb:c8:99:e7:ac:75:98:01:c2:b4:e4:67:72:
                    9e:cc:52:39:97:06:a0:24:1f:61:21:d3:a3:42:26:
                    86:37:9d:a0:bd:c8:7c:3c:4b:44:59:f6:c8:dc:9b:
                    8a:ee:cf:2a:f0:9b:aa:17:bc:8d:28:f3:29:16:60:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:46:29:59:13:CA:9F:FB:D5:CE:6A:81:19:A2:4D:92:87:F8:14
            X509v3 Authority Key Identifier:
                keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:b4:ff:97:03:79:88:a8:53:37:2e:cb:10:ec:00:2b:9a:
         82:d2:c3:f8:0d:05:6d:2d:12:0b:bb:d1:25:a6:41:41:5a:a2:
         2e:a5:29:0a:74:08:e1:1f:b9:24:85:6b:23:d5:da:41:f9:56:
         d2:9c:c3:47:fa:fd:9d:2e:7d:a9:50:d3:ed:20:5e:7c:8b:d7:
         2e:cb:9a:cb:20:1b:ba:6f:ad:63:13:57:22:0b:39:24:4d:a0:
         f6:55:f4:c5:57:3a:49:90:7f:6a:4b:db:1c:d0:73:66:62:61:
         a7:16:be:4f:25:37:ba:ba:fe:a4:dc:1a:cb:97:12:22:2f:5f:
         50:82:de:94:2a:c7:e9:fd:0f:ee:e4:52:cd:9a:08:b0:72:1d:
         a1:d1:ec:bd:be:4f:d5:72:ba:ff:f3:d6:c3:61:e5:d8:e8:0e:
         89:95:6e:08:23:63:c6:d9:47:1d:91:57:a4:81:ff:a1:86:80:
         fb:f3:f9:61:bb:24:7a:00:1e:49:4a:d4:65:a7:f7:d7:e0:df:
         0a:af:46:c5:d1:f8:93:48:78:f6:10:61:34:4e:68:09:0c:d9:
         f5:70:ab:ec:ee:e5:4f:b4:52:b7:24:97:1a:8b:7a:0e:48:6e:
         59:25:0f:f4:10:6a:29:96:05:41:3b:a3:4b:03:53:fd:31:ca:
         98:d0:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:17 2026 by rpki-client