This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File:                     wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier:          ngeu7WiO7FG9e8IT3i2DeyCRkX7DEosb9wPQUdJJpxo=
Subject key identifier:   58:4A:1C:81:D2:AE:98:1B:4B:73:D9:DB:46:C8:4B:C7:F8:AC:4F:D5
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer:       /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial:       019C427D49C63D7FBBC35328E3738CA246C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 13:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:32 +0000
Files and hashes:         1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: BT8nnvsm/yYJfHGy9U0DNxlDYaLOR8GREyvYhLLifl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:49:c6:3d:7f:bb:c3:53:28:e3:73:8c:a2:46:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
        Validity
            Not Before: Feb  9 13:00:32 2026 GMT
            Not After : Feb 10 13:00:32 2026 GMT
        Subject: CN=584a1c81d2ae981b4b73d9db46c84bc7f8ac4fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:18:54:8b:6a:4b:b8:1b:b0:6e:8e:4b:d9:
                    4e:56:33:0c:98:80:5a:cc:30:1d:84:26:58:41:17:
                    cb:46:c2:43:57:bf:ad:d2:0c:2c:6d:fb:ea:fb:5e:
                    b0:66:6a:b4:51:e1:f1:42:a7:7f:87:7b:83:6e:11:
                    e1:dc:dc:25:24:39:a1:51:68:e5:0c:9b:85:34:78:
                    ac:c0:f1:1e:77:54:87:59:78:b7:a9:2c:c1:9e:29:
                    60:7c:d1:9d:c0:ad:e1:c0:00:6c:93:55:1d:05:37:
                    ba:f0:58:30:d8:b6:57:60:63:a2:9e:e3:86:0f:aa:
                    c4:af:95:2a:85:d4:a9:13:4a:f1:8b:0c:74:7e:d6:
                    22:fc:18:eb:c7:ae:06:ff:9d:6c:cf:b6:2e:45:bc:
                    d8:c4:34:80:a7:ff:ce:7d:91:6f:d9:b4:a9:10:24:
                    cb:89:14:3b:41:91:a5:80:5f:43:57:f9:e0:8d:e4:
                    ea:5b:3c:e7:7b:b0:60:a8:a5:d8:62:9c:f2:e3:26:
                    41:cd:32:b5:d5:a4:a0:74:cc:c9:1c:77:f9:68:55:
                    d2:f3:05:5a:26:5a:42:41:d4:68:bb:94:6c:c5:94:
                    1e:82:14:71:2b:6e:c8:7b:7b:12:80:62:41:de:5d:
                    dd:e0:95:5f:4e:ae:7b:86:c4:06:a3:74:73:c8:d0:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4A:1C:81:D2:AE:98:1B:4B:73:D9:DB:46:C8:4B:C7:F8:AC:4F:D5
            X509v3 Authority Key Identifier:
                keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7c:ea:78:bc:ec:10:f9:6c:cf:36:16:43:91:69:87:9f:2d:
         25:18:3f:48:38:24:bd:35:1e:96:86:9f:0b:c7:0d:87:3c:52:
         d8:aa:57:80:6e:1f:58:65:ed:9d:a5:a2:bc:e7:a3:33:eb:11:
         22:2f:bb:2a:fd:71:40:c7:c6:a8:c8:af:04:ba:86:10:f3:06:
         6e:8f:bc:9d:22:ae:75:41:92:4b:24:0e:a4:b8:82:bd:bf:f6:
         27:94:e0:92:cb:38:b5:52:61:b8:76:20:72:61:52:b1:54:fb:
         09:49:e6:57:7b:f7:25:b5:a6:7a:e5:88:de:8d:88:10:c7:eb:
         1b:f8:32:ff:68:d4:fd:d0:1b:ef:29:aa:9d:8f:5e:04:78:e4:
         24:52:5d:4a:eb:e4:57:19:bd:57:cb:ff:80:e2:4c:d8:aa:a1:
         6d:d3:90:88:6a:f3:ce:88:ac:d5:ab:f0:0b:80:87:e0:22:de:
         69:7d:cf:34:4e:26:9e:42:2e:51:c9:73:9b:b5:b6:7e:5b:24:
         4d:f8:8e:c7:e1:6d:a4:45:ef:96:55:cf:14:db:5f:cf:67:8b:
         f0:5b:b9:f7:d8:4b:4a:77:ad:2c:40:ac:de:2d:7b:3b:d5:19:
         50:93:ee:cd:87:33:52:09:49:57:89:41:16:fb:b5:1b:0b:a5:
         88:52:da:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfUnGPX+7w1Mo43OMokbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzU2ZWI0M2YyMjBlYjUxNDFlZDg2MTUzMGFmZjI1MjFi
MjFlZWQwHhcNMjYwMjA5MTMwMDMyWhcNMjYwMjEwMTMwMDMyWjAzMTEwLwYDVQQD
Eyg1ODRhMWM4MWQyYWU5ODFiNGI3M2Q5ZGI0NmM4NGJjN2Y4YWM0ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXkYVItqS7gbsG6OS9lOVjMMmIBa
zDAdhCZYQRfLRsJDV7+t0gwsbfvq+16wZmq0UeHxQqd/h3uDbhHh3NwlJDmhUWjl
DJuFNHiswPEed1SHWXi3qSzBnilgfNGdwK3hwABsk1UdBTe68Fgw2LZXYGOinuOG
D6rEr5UqhdSpE0rxiwx0ftYi/Bjrx64G/51sz7YuRbzYxDSAp//OfZFv2bSpECTL
iRQ7QZGlgF9DV/ngjeTqWzzne7BgqKXYYpzy4yZBzTK11aSgdMzJHHf5aFXS8wVa
JlpCQdRou5RsxZQeghRxK27Ie3sSgGJB3l3d4JVfTq57hsQGo3RzyNAIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhKHIHSrpgbS3PZ20bIS8f4rE/VMB8GA1UdIwQY
MBaAFMLFbrQ/Ig61FB7YYVMK/yUhsh7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEt
MDk4MmJiZDMxZGQ0LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEtMDk4MmJiZDMxZGQ0
LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXzqeLzs
EPlszzYWQ5Fph58tJRg/SDgkvTUeloafC8cNhzxS2KpXgG4fWGXtnaWivOejM+sR
Ii+7Kv1xQMfGqMivBLqGEPMGbo+8nSKudUGSSyQOpLiCvb/2J5Tgkss4tVJhuHYg
cmFSsVT7CUnmV3v3JbWmeuWI3o2IEMfrG/gy/2jU/dAb7ymqnY9eBHjkJFJdSuvk
Vxm9V8v/gOJM2KqhbdOQiGrzzois1avwC4CH4CLeaX3PNE4mnkIuUclzm7W2flsk
TfiOx+FtpEXvllXPFNtfz2eL8Fu599hLSnetLECs3i17O9UZUJPuzYczUglJV4lB
Fvu1GwuliFLaMg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:34 2026 by rpki-client