This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File:                     WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier:          b4j/MGnypBpTZwvBceR3ehTvQbxasXXnE6XCsO+hD/M=
Subject key identifier:   FC:48:7F:99:B0:5C:D9:AE:5F:41:56:EC:27:D4:21:10:F5:A3:74:24
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer:       /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial:       019C4134182F5672E7E6BD69A0A1EE7C8A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number:          0907
Signing time:             Mon 09 Feb 2026 07:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:58 +0000
Files and hashes:         1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: G7v1/sLk4hindxMETEJKGCDfuAvZ7Mr72XdafdF7Ng4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:18:2f:56:72:e7:e6:bd:69:a0:a1:ee:7c:8a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
        Validity
            Not Before: Feb  9 07:00:58 2026 GMT
            Not After : Feb 10 07:00:58 2026 GMT
        Subject: CN=fc487f99b05cd9ae5f4156ec27d42110f5a37424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:22:8c:a2:6c:70:6d:80:71:ab:ff:6e:52:
                    9c:75:11:a6:18:63:2e:77:1a:40:2e:18:b2:ec:8f:
                    e1:2b:4a:9f:bd:d0:1e:a7:21:91:f3:ef:64:a1:69:
                    b3:5a:b2:04:62:a2:ed:32:00:ee:6b:2a:e8:01:54:
                    30:96:9e:b1:64:66:16:79:5e:ee:44:6c:e3:15:8c:
                    f4:90:82:fd:6f:81:e6:a3:48:d6:39:c2:0a:80:a1:
                    16:99:04:c9:49:6a:05:79:57:22:d6:9e:05:90:f8:
                    26:93:42:ee:6c:d0:a5:31:4f:f7:be:80:2c:2d:21:
                    57:39:a2:bd:b3:36:05:08:c9:87:30:6c:4d:84:6d:
                    8a:52:fb:a9:00:ce:07:7c:39:7e:dd:a4:3e:eb:03:
                    a7:59:d4:6a:04:75:7d:9d:a2:a6:7a:ba:9f:e5:6b:
                    b1:d8:11:99:b6:90:f1:0c:34:48:b6:61:0c:79:8e:
                    aa:a8:45:7b:5f:0e:e9:8e:63:ae:bb:f3:a7:03:d8:
                    50:70:99:fe:d4:a9:f4:2e:7d:cd:7a:ef:8f:c0:40:
                    f3:ec:cd:9e:f1:a2:b4:48:c6:d4:43:83:c6:84:71:
                    50:f6:26:58:7b:34:de:1c:9a:00:39:75:86:55:c2:
                    bb:2c:be:79:89:08:3b:a2:16:c0:86:4a:ce:ec:8b:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:7F:99:B0:5C:D9:AE:5F:41:56:EC:27:D4:21:10:F5:A3:74:24
            X509v3 Authority Key Identifier:
                keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:76:43:0e:8a:81:9c:3a:d9:cf:89:c0:36:9c:20:45:33:8f:
         a7:c3:86:cc:6a:5b:73:f3:8b:96:4e:42:cf:20:9d:64:e6:b3:
         b1:cb:d5:0f:eb:29:2b:bf:d5:07:0d:09:29:8b:22:c0:03:1a:
         09:40:40:8c:76:91:84:02:e2:b2:1f:fb:5c:aa:01:bc:c9:2e:
         a6:b0:ee:03:52:3d:97:bc:3c:23:d8:4a:b0:75:42:21:7a:cb:
         93:a9:f7:a0:f0:ad:c2:a1:cb:bc:b9:03:e8:6e:fa:83:c4:e6:
         68:87:50:8c:95:d1:11:8f:1c:26:11:04:b4:16:cc:94:4c:a7:
         8a:8d:6e:7d:a9:d2:00:c3:67:05:4a:0d:6a:ad:da:9b:4f:e0:
         41:9f:a1:f8:a8:16:7d:4b:75:95:a7:e7:05:11:b3:7c:07:4c:
         31:01:c6:db:81:43:03:4a:2d:0e:d5:d3:36:50:ba:d0:49:d4:
         f4:d3:b7:df:f5:93:ee:c9:18:cb:7e:36:48:f0:8c:72:e5:ba:
         05:a6:98:e2:f8:fd:e6:02:10:d6:9f:92:53:56:de:6d:0b:c7:
         a3:b5:15:c5:00:06:9d:a8:5f:68:a6:15:bd:e5:52:46:cf:39:
         a7:74:c0:f1:da:ac:ae:57:61:3a:67:8d:f7:19:5a:a9:12:ab:
         b2:27:ea:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBNBgvVnLn5r1poKHufIocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZThlY2JlNjk1NTEyZGE0ZTBmMDJiNmRjMGU3YmRhOTYw
ZGMzM2EwHhcNMjYwMjA5MDcwMDU4WhcNMjYwMjEwMDcwMDU4WjAzMTEwLwYDVQQD
EyhmYzQ4N2Y5OWIwNWNkOWFlNWY0MTU2ZWMyN2Q0MjExMGY1YTM3NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFgijKJscG2Acav/blKcdRGmGGMu
dxpALhiy7I/hK0qfvdAepyGR8+9koWmzWrIEYqLtMgDuayroAVQwlp6xZGYWeV7u
RGzjFYz0kIL9b4Hmo0jWOcIKgKEWmQTJSWoFeVci1p4FkPgmk0LubNClMU/3voAs
LSFXOaK9szYFCMmHMGxNhG2KUvupAM4HfDl+3aQ+6wOnWdRqBHV9naKmerqf5Wux
2BGZtpDxDDRItmEMeY6qqEV7Xw7pjmOuu/OnA9hQcJn+1Kn0Ln3Neu+PwEDz7M2e
8aK0SMbUQ4PGhHFQ9iZYezTeHJoAOXWGVcK7LL55iQg7ohbAhkrO7IusiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxIf5mwXNmuX0FW7CfUIRD1o3QkMB8GA1UdIwQY
MBaAFFro7L5pVRLaTg8CttwOe9qWDcM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMjdhM2ItYWNmOC00NjY4LTk4OWYt
ODNjZjQ2Njg5Mzc1LzEvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iMjdhM2ItYWNmOC00NjY4LTk4OWYtODNjZjQ2Njg5Mzc1
LzEvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHZDDoqB
nDrZz4nANpwgRTOPp8OGzGpbc/OLlk5CzyCdZOazscvVD+spK7/VBw0JKYsiwAMa
CUBAjHaRhALish/7XKoBvMkuprDuA1I9l7w8I9hKsHVCIXrLk6n3oPCtwqHLvLkD
6G76g8TmaIdQjJXREY8cJhEEtBbMlEynio1ufanSAMNnBUoNaq3am0/gQZ+h+KgW
fUt1lafnBRGzfAdMMQHG24FDA0otDtXTNlC60EnU9NO33/WT7skYy342SPCMcuW6
BaaY4vj95gIQ1p+SU1bebQvHo7UVxQAGnahfaKYVveVSRs85p3TA8dqsrldhOmeN
9xlaqRKrsifqTg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:52 2026 by rpki-client