This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File:                     wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier:          RPWWUGAx1tfZouqM2Ekh40V8ME/lcLACSMOw6yKy7o8=
Subject key identifier:   A3:70:D8:04:CA:81:26:7C:B9:DD:76:FB:F0:44:D9:A3:57:AC:48:13
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer:       /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial:       019C427DD3AAFD7670D6B1613F332AEC227A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:08 +0000
Files and hashes:         1: RAiUuWAS6kcQ-QJt6I-SFZa80cQ.roa (hash: ttJu1TEjHl6NqHl89N7ouZ4TGNYPAl0suf8bz/Ts/Kg=)
                          2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: VbNtoNeZfjLWhjti+1x1d79tJCfQdT3XhuSYXN5gHXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d3:aa:fd:76:70:d6:b1:61:3f:33:2a:ec:22:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
        Validity
            Not Before: Feb  9 13:01:08 2026 GMT
            Not After : Feb 10 13:01:08 2026 GMT
        Subject: CN=a370d804ca81267cb9dd76fbf044d9a357ac4813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:24:c6:56:bb:73:af:67:1e:8b:93:8f:c5:
                    41:44:6d:0e:1f:07:c5:b2:3b:5e:c7:ca:8d:46:d6:
                    94:d9:0a:f6:3c:c6:a5:d5:fb:aa:05:a6:19:27:80:
                    cd:be:13:89:d6:93:23:8a:43:77:6d:28:ea:ba:54:
                    87:f5:f0:41:d9:b5:e8:e1:13:74:cd:95:c1:47:90:
                    6c:f4:37:e6:76:56:8b:49:51:f8:41:2a:61:29:d8:
                    22:38:0f:c8:cf:b3:73:d4:f9:9f:cc:8e:65:6e:8a:
                    26:65:5e:57:f8:3d:f5:8f:3f:82:d0:8a:3d:3c:9b:
                    a5:19:14:ce:db:97:a4:05:7d:8e:da:e2:75:9a:92:
                    8d:e5:3d:15:2f:75:cd:8d:06:47:c9:17:be:29:00:
                    62:7c:7a:78:3a:93:ee:a7:72:1c:16:ce:bf:08:ce:
                    47:ec:08:c6:9b:d4:54:d3:3a:cb:6f:7d:9c:a8:49:
                    ff:2c:0b:d9:bf:78:74:8b:e8:60:65:79:38:d0:ee:
                    38:37:f4:f3:2c:a0:97:f6:06:fb:5d:c5:f2:be:9f:
                    be:87:aa:7a:08:dc:e8:92:f3:6f:98:3f:fa:f8:89:
                    ce:9b:1b:b6:07:07:0d:ca:c5:2d:45:51:dc:36:7b:
                    9d:90:7b:be:da:ba:fa:b3:52:64:b9:bf:49:90:f1:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:70:D8:04:CA:81:26:7C:B9:DD:76:FB:F0:44:D9:A3:57:AC:48:13
            X509v3 Authority Key Identifier:
                keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:fb:af:d0:f0:d8:94:5b:e9:d9:c0:8c:cc:fd:aa:87:a9:
         02:12:eb:fe:0a:d2:47:5f:bd:30:ee:2e:a6:8d:8f:29:ea:7e:
         cd:3b:f4:04:9b:f8:f7:2a:74:65:4a:8a:25:5a:df:8f:3f:cb:
         54:73:da:57:f0:a9:88:a2:3d:e5:dd:17:3a:fb:86:f3:ed:d5:
         75:6b:52:69:0f:53:05:df:51:ad:cf:af:55:77:3e:b9:71:36:
         e9:ed:24:1f:a1:df:9b:48:83:0c:34:97:69:4b:34:0e:c5:55:
         31:e1:b6:34:c6:8b:4d:29:e0:c9:fa:f0:ca:35:24:3f:ea:42:
         25:97:ff:22:b4:2d:3c:e7:29:9c:bc:35:d1:5b:32:df:87:8c:
         79:c4:1c:57:80:9c:4f:7b:7d:3b:b7:d1:d1:cc:69:46:5d:41:
         ed:65:73:28:b8:46:89:e9:90:b1:bc:51:41:26:e7:43:7c:f0:
         d1:28:ad:71:e5:1d:74:33:d6:64:c1:e7:3a:a0:c9:81:ea:2d:
         91:be:cb:7f:0f:e5:cd:b5:88:69:6c:41:9e:d3:fd:a9:18:32:
         9a:00:1e:5d:f3:59:3b:39:8e:04:71:89:bf:3c:97:ea:31:d1:
         4e:f4:97:ff:14:ca:d1:b1:8b:77:f0:70:2c:41:96:40:3f:21:
         81:12:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:23 2026 by rpki-client