This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
File:                     wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json)
Hash identifier:          bumhI4hjbvkpIM3uow+VD8bO6IFmf0yMiNfkMo0a1TY=
Subject key identifier:   20:70:6E:5E:3B:24:4B:0A:8F:97:FF:1F:64:9D:04:71:6D:CC:41:96
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Certificate issuer:       /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial:       019C1C83D25F1D2B49A0ECA290A33F16161E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
Manifest number:          01B9
Signing time:             Mon 02 Feb 2026 04:02:06 +0000
Manifest this update:     Mon 02 Feb 2026 04:02:06 +0000
Manifest next update:     Tue 03 Feb 2026 04:02:06 +0000
Files and hashes:         1: 3SgkFgo0LTk2swzrn5dq7YjNcJs.asa (hash: wflGAfTimYQQh20JKmlCe7N9/FvGlFFSJj9BuYPzogQ=)
                          2: SzC8hMx5tzBzWjktYwvaTi6cjyQ.roa (hash: 8ga9fO6S8Z1OQYqLUPIw2CDMJOQAzPqO/gCXybL+2eY=)
                          3: cIXDfR-Jle5Jda3lToN6L1RqtVs.asa (hash: 0Czg9gaAGKAEq6Rfn/gJ1HPiXTpLu7e+YQAdkMW2/O4=)
                          4: rijMNY4qTX58liBaP4nQVa0F5T8.roa (hash: 75qp8fYGJAhLzPMUevB+ccWkd9/VoKZwOJVlzHHiRoY=)
                          5: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: y7qbD2Ky522y6AF0eWZOVPZTBHD+WX6NX9GAs1Q2uDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:83:d2:5f:1d:2b:49:a0:ec:a2:90:a3:3f:16:16:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
        Validity
            Not Before: Feb  2 04:02:06 2026 GMT
            Not After : Feb  3 04:02:06 2026 GMT
        Subject: CN=20706e5e3b244b0a8f97ff1f649d04716dcc4196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:14:90:31:d7:1b:75:19:16:88:51:97:eb:
                    ac:b7:f3:c1:f8:79:b0:6f:4e:87:5e:23:72:2a:16:
                    42:fc:c3:85:0f:41:e4:7b:13:06:45:05:54:e1:46:
                    9d:9a:72:27:0b:ac:59:94:ed:0c:af:a1:e7:f2:26:
                    5e:f8:aa:a8:76:1e:20:24:eb:d0:e3:c3:01:48:9d:
                    76:01:49:8d:30:b2:82:1a:4c:89:b1:bc:4b:96:57:
                    f8:5e:35:3b:c8:93:ba:ef:b2:31:00:90:ee:36:6a:
                    ab:f0:5b:72:60:fe:86:13:74:7e:80:8d:d0:87:7c:
                    dd:c2:0c:b8:2a:58:01:45:f7:ce:8d:c9:c7:19:26:
                    da:53:df:2d:6a:be:5d:e4:c6:d8:96:0c:28:31:19:
                    45:a1:cb:7b:1f:1c:96:95:e0:b5:09:b7:8d:e8:9c:
                    20:83:e0:48:ec:66:33:09:4a:48:eb:52:f7:2a:a8:
                    70:ea:1a:22:22:17:48:e0:69:e1:83:f9:41:fe:0f:
                    fe:13:43:50:7a:95:ce:6e:94:7f:0f:d9:d0:24:06:
                    54:a4:29:1b:3d:99:7b:57:a5:9a:38:62:2c:a8:3c:
                    a0:a4:f6:23:82:a8:7d:96:27:c4:a9:e7:3d:9a:7a:
                    ed:22:71:6a:52:95:01:3e:a5:56:af:e9:99:51:4e:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:6E:5E:3B:24:4B:0A:8F:97:FF:1F:64:9D:04:71:6D:CC:41:96
            X509v3 Authority Key Identifier:
                keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:88:23:62:24:13:31:31:87:b4:3d:9a:db:ae:9a:ac:d7:fa:
         fd:eb:bf:73:b7:ca:b2:f3:1f:38:82:31:8c:4f:5d:4f:1f:ae:
         1f:d1:76:d2:bb:be:a2:cb:44:e7:87:19:4d:d7:f6:99:70:df:
         27:fa:9a:7d:54:08:40:91:0b:1b:8f:ee:f2:ac:4f:d0:31:9b:
         b0:71:03:a0:c3:d4:18:54:87:80:c6:0d:55:fb:ce:9c:33:5a:
         aa:fe:96:9d:10:6f:37:47:63:08:2d:74:71:e9:eb:ec:4d:c5:
         e1:4b:07:6c:c6:d4:51:30:13:c8:11:f9:aa:37:cc:b0:dc:dd:
         a6:81:83:27:0e:b1:14:e5:01:8b:ba:38:31:fb:34:c8:d4:c1:
         4b:df:0f:ca:d6:54:71:b8:f1:8f:b1:e7:0d:7a:6f:17:14:93:
         8c:d6:16:c1:ae:1b:63:e9:0f:a8:50:d3:b2:ad:f6:5a:ea:ab:
         3f:d8:91:10:a3:9f:4f:d6:76:b8:b4:e0:85:6a:11:36:a4:cf:
         a2:c8:25:79:b9:66:da:86:ef:8f:6c:44:35:c2:aa:e1:7c:3b:
         c4:8f:38:7b:a4:68:84:07:99:05:3b:f7:74:d1:d3:aa:f0:b7:
         dc:34:55:f8:03:58:43:aa:ba:de:87:9e:93:53:96:ec:00:a4:
         f1:04:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:26 2026 by rpki-client