This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File:                     WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier:          mZdxm2LWfrIH7w4sQExPgkpNEFfHILOEXiLvOXrrG1k=
Subject key identifier:   D6:9F:86:6F:92:60:CE:78:47:7B:5D:3E:B4:60:1E:67:6B:9B:CF:4C
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer:       /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial:       019C435928AEDCE219A609AED6CA5CA16FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number:          107F
Signing time:             Mon 09 Feb 2026 17:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:42 +0000
Files and hashes:         1: U838CZ3tP-SqpmS_2UEPBZ3tGac.roa (hash: 0MbyurR/tw2t4cWUzKHipnxJH0cpvpDBnD2yvgzDDAc=)
                          2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: 18Sq2lImGfkJyj2Wf/smz+4UM1wDl+NdokDQpAtlHnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:28:ae:dc:e2:19:a6:09:ae:d6:ca:5c:a1:6f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
        Validity
            Not Before: Feb  9 17:00:42 2026 GMT
            Not After : Feb 10 17:00:42 2026 GMT
        Subject: CN=d69f866f9260ce78477b5d3eb4601e676b9bcf4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:5c:4d:ea:19:ae:94:f2:f9:42:a5:90:4a:
                    b0:25:af:22:aa:1b:c1:5e:26:6b:bc:2f:b2:46:94:
                    28:89:c4:7b:77:72:0e:da:5e:dd:c0:a1:0a:12:1b:
                    be:6a:7e:b3:1c:22:86:2f:fc:1e:ac:f2:37:32:46:
                    21:43:a5:0b:50:4d:86:34:de:46:c8:ed:b9:cb:5a:
                    ee:0f:92:b5:84:96:a1:df:57:c9:54:0b:0a:dc:67:
                    42:53:8f:12:c6:ef:c8:0c:00:4b:e4:0a:a4:e4:c4:
                    7b:ce:25:f2:82:ab:67:dd:01:b8:88:c1:7d:8f:f7:
                    f3:1c:e3:fb:d6:74:3e:1c:04:fd:e7:37:8c:4a:5f:
                    e9:eb:65:44:30:7c:fb:4a:43:c2:af:0d:23:54:60:
                    69:63:92:d7:57:1f:db:4f:87:e2:d4:77:b1:6d:09:
                    6d:a9:95:83:93:e0:ed:99:f3:6a:fe:1a:a4:13:7c:
                    65:29:e0:45:c3:90:76:7d:dd:3e:8c:bb:d1:fe:e5:
                    b6:40:e3:ff:f2:a8:88:15:3a:65:b9:63:f9:b6:3e:
                    b3:d9:71:8b:03:0a:74:9c:10:75:84:0c:80:20:70:
                    56:c1:80:1a:c7:3a:cb:a9:1a:fd:de:1a:49:6a:47:
                    50:24:d5:fc:33:20:fe:11:e9:cd:ef:21:87:42:e3:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9F:86:6F:92:60:CE:78:47:7B:5D:3E:B4:60:1E:67:6B:9B:CF:4C
            X509v3 Authority Key Identifier:
                keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:0c:6c:84:22:8e:b1:71:7e:02:e9:60:b9:57:cd:bc:a2:
         86:5e:6f:aa:9a:fb:8c:ee:8a:d0:56:d3:1a:ba:fb:2a:f7:d2:
         85:4d:bd:d9:4a:70:d6:81:7d:ea:9c:dc:36:37:2c:03:87:b1:
         24:25:e3:90:e9:89:3a:20:81:34:f1:5d:80:dd:f0:9e:39:d0:
         f1:1e:5c:6b:63:87:34:ef:c7:1b:e9:b8:e9:d8:bb:dd:06:82:
         a1:da:00:20:ed:4a:94:ec:07:e4:c2:ee:e1:e0:7e:77:1d:c3:
         54:2e:4e:a9:19:74:fc:03:d0:aa:b0:20:5c:0c:2e:26:63:5b:
         81:29:b8:9e:de:fb:b7:74:44:19:f2:26:9b:c1:55:da:0e:76:
         d2:61:e9:1b:36:74:5c:e3:d2:e1:d0:1d:29:23:47:16:4c:38:
         e9:0d:e5:90:93:2c:8b:1a:ba:77:1c:e2:aa:fb:d6:fc:72:6b:
         0d:b6:05:4d:6d:88:8a:be:93:f2:f1:03:08:cf:83:5a:36:12:
         57:e9:9b:b8:1b:df:15:93:eb:bc:b1:67:32:98:4f:0e:8a:c2:
         ac:ae:0d:e6:77:5e:a4:30:dd:ab:c3:3b:01:8e:67:e9:1f:11:
         f6:27:f8:c6:b3:10:5a:3f:8c:6d:25:1d:9b:95:90:93:a1:22:
         a7:33:be:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWSiu3OIZpgmu1spcoW/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMGFhOTY4MmM2ODNhOWMxYjk1Y2U5Njc2ZDUxYjIwZDM5
ZmQyYWUwHhcNMjYwMjA5MTcwMDQyWhcNMjYwMjEwMTcwMDQyWjAzMTEwLwYDVQQD
EyhkNjlmODY2ZjkyNjBjZTc4NDc3YjVkM2ViNDYwMWU2NzZiOWJjZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+NcTeoZrpTy+UKlkEqwJa8iqhvB
XiZrvC+yRpQoicR7d3IO2l7dwKEKEhu+an6zHCKGL/werPI3MkYhQ6ULUE2GNN5G
yO25y1ruD5K1hJah31fJVAsK3GdCU48Sxu/IDABL5Aqk5MR7ziXygqtn3QG4iMF9
j/fzHOP71nQ+HAT95zeMSl/p62VEMHz7SkPCrw0jVGBpY5LXVx/bT4fi1HexbQlt
qZWDk+DtmfNq/hqkE3xlKeBFw5B2fd0+jLvR/uW2QOP/8qiIFTpluWP5tj6z2XGL
Awp0nBB1hAyAIHBWwYAaxzrLqRr93hpJakdQJNX8MyD+EenN7yGHQuPLvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNafhm+SYM54R3tdPrRgHmdrm89MMB8GA1UdIwQY
MBaAFFoKqWgsaDqcG5XOlnbVGyDTn9KuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjkt
NmVlZDUyOTY4YjFjLzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjktNmVlZDUyOTY4YjFj
LzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzIMbIQi
jrFxfgLpYLlXzbyihl5vqpr7jO6K0FbTGrr7KvfShU292Upw1oF96pzcNjcsA4ex
JCXjkOmJOiCBNPFdgN3wnjnQ8R5ca2OHNO/HG+m46di73QaCodoAIO1KlOwH5MLu
4eB+dx3DVC5OqRl0/APQqrAgXAwuJmNbgSm4nt77t3REGfImm8FV2g520mHpGzZ0
XOPS4dAdKSNHFkw46Q3lkJMsixq6dxziqvvW/HJrDbYFTW2Iir6T8vEDCM+DWjYS
V+mbuBvfFZPrvLFnMphPDorCrK4N5ndepDDdq8M7AY5n6R8R9if4xrMQWj+MbSUd
m5WQk6EipzO+8Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:59 2026 by rpki-client