This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File:                     WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier:          vDgHZPpbDquXYpEv0vukQpaGR8WJSPncyZH/bkadRHo=
Subject key identifier:   ED:5B:BF:AF:D8:37:E4:8B:9D:A5:28:8F:59:A6:5A:68:D5:84:97:E1
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer:       /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial:       019C41A17AAA02F535999F651ED37C252707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number:          0793
Signing time:             Mon 09 Feb 2026 09:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:27 +0000
Files and hashes:         1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: fP0JwcbTPwhGKQQWaiNCXrT6vLMi5hMOR3zsIesomOw=)
                          2: nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa (hash: ybsBDRN+Wgxdd71NM5Q38e+H0vIZjbotj33kAgs43CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:7a:aa:02:f5:35:99:9f:65:1e:d3:7c:25:27:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
        Validity
            Not Before: Feb  9 09:00:27 2026 GMT
            Not After : Feb 10 09:00:27 2026 GMT
        Subject: CN=ed5bbfafd837e48b9da5288f59a65a68d58497e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:80:d3:57:b8:d5:97:01:5c:42:67:89:55:b0:
                    90:08:00:ad:4d:e9:21:5a:45:d9:0e:b4:3f:82:ee:
                    5c:f5:ea:e0:eb:c2:0d:74:38:d8:af:48:3e:d8:10:
                    3a:e9:0b:0e:aa:70:01:1c:95:cf:94:bd:7a:62:ef:
                    91:3a:05:9f:26:55:ce:b7:d3:73:88:e0:e4:13:ae:
                    cc:09:4c:f2:f2:5f:5e:78:b0:b5:6f:23:9f:b1:e6:
                    32:14:1a:44:39:38:6f:9d:2a:cf:35:06:71:eb:f8:
                    e4:0b:7c:30:d4:76:77:30:98:c5:44:af:bb:95:da:
                    15:5c:b8:a5:24:45:71:a3:87:64:4b:11:bf:4b:be:
                    9e:bf:3b:81:db:54:ea:d0:7f:cc:16:8a:44:0b:03:
                    61:b5:a1:50:0d:c8:e0:b1:ec:dd:31:02:70:8f:52:
                    d0:4b:30:96:b6:86:61:a4:5a:03:36:1a:18:53:49:
                    74:a7:fe:61:e9:c0:15:16:bc:82:0c:8c:63:27:6a:
                    a7:f5:5e:d1:37:00:a2:50:4b:70:8e:b2:bb:fd:a3:
                    3c:84:82:b2:1e:3c:4a:75:cf:08:dd:30:5e:04:c2:
                    ab:1d:53:a4:7a:40:ac:50:74:0b:99:92:14:b3:cd:
                    38:e4:92:55:e5:fb:2b:6f:2f:14:15:91:ea:91:db:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:BF:AF:D8:37:E4:8B:9D:A5:28:8F:59:A6:5A:68:D5:84:97:E1
            X509v3 Authority Key Identifier:
                keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3b:dd:af:79:76:17:c5:db:1b:f5:1b:ee:cb:f2:50:6b:9d:
         2a:44:58:86:2d:d4:62:49:4f:d2:09:03:3d:c7:45:46:d8:e2:
         ff:c6:7b:24:45:4d:c7:b5:d5:a9:20:b9:cb:e8:a7:82:31:d1:
         7c:1f:bb:6e:a4:71:04:35:7b:16:77:57:45:b8:b9:2f:13:40:
         87:fd:61:7e:a2:e8:8d:be:68:58:8b:54:dd:e7:f6:c8:9c:c1:
         ec:77:6e:04:4d:86:d7:41:70:31:50:96:42:18:ce:f9:86:40:
         70:ae:46:f9:d5:0d:eb:b7:5d:52:e9:8a:24:5d:f4:ce:9f:2a:
         04:97:c6:bd:6e:dd:c2:73:04:08:33:37:3e:82:3c:2d:e0:b9:
         e4:62:70:af:41:85:7b:dc:5d:d2:91:09:94:0e:52:d2:13:b2:
         4c:73:cd:de:3c:01:cb:3a:59:8c:cc:60:21:46:a3:98:96:f8:
         fc:d6:54:41:0c:0f:76:d1:c0:0b:b0:86:db:0e:66:0f:d5:90:
         53:b3:32:58:d1:c2:9d:ce:23:6e:c8:4c:cc:9c:a7:1b:90:8b:
         81:f2:8f:11:8d:9d:ea:e7:dd:e8:56:55:d4:d7:00:1e:0a:7b:
         2a:4a:29:01:f9:ba:f0:b9:71:7d:a3:12:76:68:05:cb:f7:f5:
         ef:dc:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:37 2026 by rpki-client