This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
File:                     WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft (raw, json)
Hash identifier:          8GlaDSg5y/vh9VQO1tw0O+inSXJWQS2hHkk2JrFPmOg=
Subject key identifier:   BE:B8:D6:95:8C:CB:4A:BA:FC:07:C7:82:11:FF:B8:5C:5D:57:EF:D2
Authority key identifier: 58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66
Certificate issuer:       /CN=58ec149761a5d84b8c49e2c9936bbb748033fe66
Certificate serial:       019C43907B95FAED890AE7A677084E7C4C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
Manifest number:          091D
Signing time:             Mon 09 Feb 2026 18:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:08 +0000
Files and hashes:         1: 25mArsav4GG3WtXno9imIubDQu0.roa (hash: Cg3JHKj2K2hfP/W6oR1e2hB6cuYdLQLmtsGZEIJI+LE=)
                          2: WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl (hash: rsJL27S6B5PlX39VXnCeihikHmgB7vYDWuCzF2QIMz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:7b:95:fa:ed:89:0a:e7:a6:77:08:4e:7c:4c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ec149761a5d84b8c49e2c9936bbb748033fe66
        Validity
            Not Before: Feb  9 18:01:08 2026 GMT
            Not After : Feb 10 18:01:08 2026 GMT
        Subject: CN=beb8d6958ccb4abafc07c78211ffb85c5d57efd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:a7:3a:44:dd:6f:98:b4:6b:f1:c5:c8:08:
                    dd:3b:ce:39:32:1c:46:a7:36:ce:a0:41:7a:e1:eb:
                    e7:3b:63:c6:70:58:37:04:25:a2:b1:bd:d2:4b:ef:
                    f8:22:97:bd:d7:cf:1a:c9:65:97:0e:69:dc:ba:34:
                    3c:4f:72:ed:f7:15:13:d9:8b:4f:78:e8:88:ba:2c:
                    52:7e:f1:50:42:8e:45:f0:08:97:db:37:64:88:56:
                    b5:9e:d0:4f:8b:7b:c1:b8:40:c0:da:3f:8e:0e:56:
                    a2:ed:1f:bd:bb:30:3d:ff:e1:75:e2:c2:7c:cf:27:
                    d3:6a:5d:a7:26:4b:19:2b:68:cb:6c:9f:04:ab:ea:
                    de:36:54:f7:6a:7d:35:7b:42:1c:36:05:df:02:0f:
                    3d:6e:36:40:09:48:72:a5:1e:0d:bc:ca:49:61:3b:
                    32:a9:f6:93:33:f4:7d:9e:f8:4c:0a:03:ce:c6:8c:
                    99:7b:99:55:41:fb:53:42:16:9c:2c:13:c3:ca:c6:
                    4b:1f:1c:1b:66:6b:58:15:69:49:8f:68:24:18:05:
                    78:20:f8:3f:98:43:7c:b6:e2:33:a6:dc:ff:31:fa:
                    71:27:b2:d7:6e:c9:0b:10:1c:58:9e:02:ba:df:6d:
                    38:ee:84:e1:27:dd:96:2e:34:df:71:b5:06:74:91:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:D6:95:8C:CB:4A:BA:FC:07:C7:82:11:FF:B8:5C:5D:57:EF:D2
            X509v3 Authority Key Identifier:
                keyid:58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d1:42:38:c1:cd:21:f7:ea:06:e5:25:70:8d:71:73:c1:9f:
         e5:61:7d:0c:43:90:01:dc:d2:4b:19:04:9b:6a:e4:b8:04:e9:
         bf:61:40:d9:c1:1d:c3:74:4b:5e:e2:7f:84:bb:46:71:8b:b0:
         b0:06:35:e5:79:8a:2e:6a:89:2a:2f:b5:d6:63:44:44:f0:ca:
         94:17:21:74:a0:ce:d0:ec:45:14:8e:19:66:0e:eb:2c:ae:f2:
         6e:db:8f:c0:0a:4e:a9:2f:b5:35:48:d9:5e:61:30:81:72:da:
         7e:6e:a3:fb:08:8d:93:08:15:5b:aa:d8:a1:3b:1c:fb:73:c0:
         e4:ff:d4:48:ee:98:a8:f9:26:5d:97:0d:c8:83:b8:72:98:29:
         53:0a:93:28:6e:75:c0:55:b9:43:ec:94:13:70:3d:00:54:57:
         58:04:64:a6:26:78:73:c0:34:79:fb:a0:4f:14:8c:ad:f4:fa:
         eb:1f:bd:1c:ab:f3:b9:c3:30:9c:c6:a2:ce:0a:24:c4:27:c0:
         f9:9a:90:fb:f7:2e:88:28:dc:64:c1:ad:de:38:79:fd:8b:84:
         e2:0d:3a:72:4f:ca:0d:28:4c:eb:a0:96:a3:75:d8:d3:83:02:
         25:de:3f:f2:22:2f:a1:34:6f:e4:89:c1:d0:e9:c2:77:e6:7e:
         b1:52:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:04 2026 by rpki-client