This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File:                     wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier:          od6CzjW1kLt5tqaO2tw3055dVFeEmTkg83BhgvKfwco=
Subject key identifier:   79:58:74:4E:D1:96:19:56:A0:33:17:B2:92:95:5B:24:14:66:5D:CD
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer:       /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial:       019C427DCCFC82A662D3B5F5A255300B598B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:06 +0000
Files and hashes:         1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
                          2: YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa (hash: BRgXVBcV8E1flieZOrUO66c4KxWhFECdnyVZ6NuuWi0=)
                          3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: g6fZdtAqO1R9g4kYcfMZe4HJCUvO4Rodrv5eGdWFPSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:cc:fc:82:a6:62:d3:b5:f5:a2:55:30:0b:59:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
        Validity
            Not Before: Feb  9 13:01:06 2026 GMT
            Not After : Feb 10 13:01:06 2026 GMT
        Subject: CN=7958744ed1961956a03317b292955b2414665dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:6e:d1:48:1e:d0:35:d2:f2:a5:c7:71:95:
                    3c:2c:9d:d5:cc:59:3c:70:cc:16:35:a5:32:16:5f:
                    c2:dd:e6:5e:ea:a8:de:0c:a7:ff:83:c6:54:29:53:
                    e3:d6:39:23:ee:8a:62:d8:89:86:62:73:56:e3:f8:
                    5b:bc:1a:d8:30:45:16:2d:69:5c:5b:a5:50:e3:5b:
                    ea:59:4f:f7:78:51:03:37:12:6f:55:12:d3:76:53:
                    8b:db:81:0e:14:04:67:67:83:03:50:15:f0:24:cc:
                    f8:82:19:8a:35:51:4b:b1:d9:36:ac:85:44:16:09:
                    11:de:a3:92:3c:a6:ba:9d:41:49:87:24:ef:af:a5:
                    73:66:ee:92:c3:86:25:b9:33:29:79:e0:19:16:9e:
                    6e:2a:1a:e3:45:6f:5f:96:02:7f:ab:ac:f0:17:fd:
                    9a:5d:4e:8f:1f:64:5a:b5:13:ea:6b:a3:42:d8:0c:
                    25:7e:51:18:85:71:aa:1b:99:9f:70:7c:a7:fb:9d:
                    d5:15:26:95:f2:22:cc:e2:34:06:53:77:5e:38:59:
                    d9:18:8a:b1:ff:95:eb:60:bf:56:40:31:32:01:c3:
                    0a:85:87:b2:41:c5:1a:c7:31:c9:0e:58:75:85:b3:
                    d4:c1:44:b0:ee:49:a0:23:fa:1b:4a:0a:ad:c7:5c:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:74:4E:D1:96:19:56:A0:33:17:B2:92:95:5B:24:14:66:5D:CD
            X509v3 Authority Key Identifier:
                keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:04:08:ab:3b:82:f8:a4:43:38:ae:a9:f7:71:b8:cb:d2:
         5e:5d:df:db:40:ac:af:e9:61:50:95:7f:c0:35:1e:f4:7e:19:
         5c:29:1d:83:a4:71:ab:7c:9a:4f:7f:9a:62:f2:75:25:8a:ba:
         6d:d5:c0:97:3c:aa:6a:cf:c3:1e:e1:a4:52:c7:bd:ef:30:df:
         11:41:c8:6c:bc:19:fb:ca:ed:9b:87:ad:36:8d:5b:66:41:18:
         ba:bc:b7:51:2d:3a:03:1b:15:12:4f:71:0c:1f:a6:34:9b:c2:
         3f:f5:e1:a4:d5:63:e0:b9:36:99:0b:a8:d1:44:7c:60:10:63:
         03:50:ae:8d:51:05:a4:51:69:4f:2b:46:2c:cc:6a:25:ff:e1:
         c7:dc:91:b2:01:a1:9d:60:91:cb:63:38:0c:93:a7:c8:f1:c6:
         3b:77:db:7d:b7:8f:8d:d7:8c:ef:25:61:0f:19:bd:af:ef:fc:
         ad:7d:dd:84:9a:2e:e2:a6:61:75:e7:c2:4a:0b:d8:6b:d4:70:
         ac:79:f2:84:c8:0a:98:e3:57:21:cb:9d:7e:77:0b:42:04:51:
         e9:f8:51:3d:86:2e:9d:b3:41:b1:1e:4f:10:71:fc:5b:cd:70:
         f1:2e:65:ab:35:b9:74:4e:a3:52:cf:a5:95:4c:b5:ce:65:c9:
         6a:86:f4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfcz8gqZi07X1olUwC1mLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWRiZGZlMDFlOWEzZjk2ZDUwMDIyYzNjZGFmZGMzZTFh
OGQ5ODgwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD
Eyg3OTU4NzQ0ZWQxOTYxOTU2YTAzMzE3YjI5Mjk1NWIyNDE0NjY1ZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85u0Uge0DXS8qXHcZU8LJ3VzFk8
cMwWNaUyFl/C3eZe6qjeDKf/g8ZUKVPj1jkj7opi2ImGYnNW4/hbvBrYMEUWLWlc
W6VQ41vqWU/3eFEDNxJvVRLTdlOL24EOFARnZ4MDUBXwJMz4ghmKNVFLsdk2rIVE
FgkR3qOSPKa6nUFJhyTvr6VzZu6Sw4YluTMpeeAZFp5uKhrjRW9flgJ/q6zwF/2a
XU6PH2RatRPqa6NC2AwlflEYhXGqG5mfcHyn+53VFSaV8iLM4jQGU3deOFnZGIqx
/5XrYL9WQDEyAcMKhYeyQcUaxzHJDlh1hbPUwUSw7kmgI/obSgqtx1ztEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlYdE7RlhlWoDMXspKVWyQUZl3NMB8GA1UdIwQY
MBaAFMGtvf4B6aP5bVACLDza/cPhqNmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYt
NDM5NDA1MmNkNjVlLzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYtNDM5NDA1MmNkNjVl
LzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+8ECKs7
gvikQziuqfdxuMvSXl3f20Csr+lhUJV/wDUe9H4ZXCkdg6Rxq3yaT3+aYvJ1JYq6
bdXAlzyqas/DHuGkUse97zDfEUHIbLwZ+8rtm4etNo1bZkEYury3US06AxsVEk9x
DB+mNJvCP/XhpNVj4Lk2mQuo0UR8YBBjA1CujVEFpFFpTytGLMxqJf/hx9yRsgGh
nWCRy2M4DJOnyPHGO3fbfbePjdeM7yVhDxm9r+/8rX3dhJou4qZhdefCSgvYa9Rw
rHnyhMgKmONXIcudfncLQgRR6fhRPYYunbNBsR5PEHH8W81w8S5lqzW5dE6jUs+l
lUy1zmXJaob06g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:37 2026 by rpki-client