This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          rmcnEjhoXjQTRp6uV1HmrJNNj9K/pl/XPQZnb2jIEgM=
Subject key identifier:   A3:ED:ED:E3:E1:C0:A9:FA:41:7B:3A:41:6F:4B:40:4E:76:08:11:77
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       019C1E031B6827669CC02118000B7749B29A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          10D0
Signing time:             Mon 02 Feb 2026 11:00:45 +0000
Manifest this update:     Mon 02 Feb 2026 11:00:45 +0000
Manifest next update:     Tue 03 Feb 2026 11:00:45 +0000
Files and hashes:         1: 4nK7xMejEGysuibSYJIso6RlQpI.roa (hash: WFo/Wgq0Q0zz5SgRWVK30WfT98xnLcIsGWqhNlQwY78=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: F/CfbjcTQaITkrh+kIFb2KRtpZT8PFzQXN8omlNM2H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:03:1b:68:27:66:9c:c0:21:18:00:0b:77:49:b2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Feb  2 11:00:45 2026 GMT
            Not After : Feb  3 11:00:45 2026 GMT
        Subject: CN=a3edede3e1c0a9fa417b3a416f4b404e76081177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:72:02:e4:18:65:a4:eb:97:8d:3e:c8:49:
                    42:cc:c0:5e:41:0b:b1:cf:68:eb:51:0a:7a:53:5f:
                    c0:b4:e5:1e:0b:99:8a:97:c4:05:55:7a:e0:32:38:
                    5a:94:e7:de:d8:20:39:a9:59:3d:53:18:10:4e:42:
                    1f:7e:e0:f0:20:b2:a7:27:00:6a:8c:58:5a:d2:54:
                    4f:ae:1d:7b:4b:27:3a:09:fb:63:f9:94:e3:af:dc:
                    f9:dc:90:f5:9c:95:c9:f2:1b:17:68:43:d1:89:52:
                    05:fa:16:3a:54:11:0a:d6:17:e3:1b:a6:a6:8b:c6:
                    b3:ea:0f:78:ed:fb:e0:d6:de:79:d7:e7:99:38:d8:
                    af:82:57:f2:9d:9e:e8:37:47:8b:4c:68:59:b2:46:
                    ca:61:2d:3d:f9:26:32:1e:64:65:53:91:9d:68:e9:
                    22:83:75:ee:59:f6:4f:04:2d:30:43:23:77:e5:76:
                    9c:7f:38:be:2d:bc:09:8e:2f:f9:5a:fa:b4:4f:ee:
                    4a:37:dd:38:5e:7a:5b:c5:8d:dd:22:b4:35:43:d0:
                    67:83:a8:a4:db:be:78:49:c4:25:e2:c7:4e:01:23:
                    7b:28:b5:6b:10:ed:3e:0e:25:d7:e6:8d:43:fa:f1:
                    83:ee:ec:62:32:64:34:c9:d8:74:c0:65:27:6c:a7:
                    30:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:ED:ED:E3:E1:C0:A9:FA:41:7B:3A:41:6F:4B:40:4E:76:08:11:77
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:98:b5:76:3e:8d:6b:9c:0f:df:45:b8:e3:e3:d3:a8:d0:
         7d:d7:c2:e4:08:b2:25:72:e8:9c:c1:27:65:db:92:0e:76:d8:
         a8:c8:2e:4b:cd:0e:64:80:ef:fd:dc:b7:bb:83:46:b8:6e:14:
         a0:c4:da:73:1d:f0:9d:48:25:8e:fc:c6:5e:3a:c7:8c:97:fc:
         6e:d3:1a:d0:c2:96:f7:e6:ec:6f:2d:b5:bd:66:b7:98:9b:1d:
         28:3c:c8:fa:34:88:72:13:70:8b:c9:c5:80:94:67:c5:92:9e:
         ad:7a:81:05:58:d1:9d:0e:d7:61:57:b7:15:57:44:55:ff:3d:
         a6:f1:d0:6c:0d:fe:22:39:f8:56:88:02:48:d2:7f:87:e5:8e:
         5e:28:fe:cb:36:de:57:dc:95:05:14:dc:c1:f2:67:fb:e6:9f:
         07:dc:f3:cb:fb:04:8c:bf:14:28:2b:05:bf:5c:d5:cb:b5:d1:
         88:d6:8e:d5:ab:ae:24:a1:53:be:75:b4:cd:02:55:4e:e6:ca:
         de:2a:01:79:11:43:a3:2b:cf:f2:06:d6:9c:b7:f9:9e:b0:47:
         5c:a1:6d:05:83:05:a7:64:69:a7:d5:c4:40:56:79:f9:42:6e:
         64:43:b8:3e:c0:4a:b0:b0:5f:74:fb:f8:a8:b6:1f:5d:51:c4:
         a1:18:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 21:02:59 2026 by rpki-client