This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File:                     WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier:          vuoYso1rborxW9FGQMXAox8qcPWuu5l5F+tyd1C1aYY=
Subject key identifier:   DD:70:5E:06:02:5F:F6:22:6B:C8:0A:92:F6:87:98:55:12:28:C5:E2
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer:       /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial:       019C4133B8DF10D7A9EB4AE485DA761451B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 07:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:34 +0000
Files and hashes:         1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: ycafTZoQFe/osXPCgSIhkZP8ASaOB+tbD1TUp8XBdRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:b8:df:10:d7:a9:eb:4a:e4:85:da:76:14:51:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
        Validity
            Not Before: Feb  9 07:00:34 2026 GMT
            Not After : Feb 10 07:00:34 2026 GMT
        Subject: CN=dd705e06025ff6226bc80a92f68798551228c5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:16:61:6c:8c:ff:fa:11:38:35:d3:de:31:
                    19:73:c7:a8:ca:9d:06:a0:8b:7a:84:fe:22:bc:c8:
                    67:0c:07:1c:02:0f:04:c8:8a:6c:2a:5b:c2:29:a7:
                    7d:d9:70:b4:69:17:65:03:ad:06:e9:4c:09:04:c1:
                    8d:c2:b8:fc:b2:c4:13:b4:cf:a2:2d:99:4d:89:1a:
                    bb:d6:a9:1c:64:fc:31:4d:fa:99:06:fe:04:92:89:
                    3a:82:fa:c1:d4:a0:ce:34:a3:47:9f:7d:15:22:f1:
                    4d:21:7b:d6:ed:cd:70:64:fb:76:f4:f2:4e:22:54:
                    64:3a:47:42:06:a2:e8:ff:1f:45:00:46:bb:d9:d3:
                    60:69:d5:ab:af:22:46:86:05:c4:ad:a5:51:20:ba:
                    3e:0d:26:55:1b:0f:54:4b:82:f9:b3:0e:71:fe:f9:
                    58:28:14:42:6d:45:7d:71:c9:c7:65:74:a8:87:8d:
                    c6:a1:06:9e:d1:48:47:de:1c:ab:9c:97:4d:bf:cc:
                    32:4b:43:ac:de:8d:61:9b:9f:af:79:55:61:92:f0:
                    be:1b:07:01:e4:0f:9a:2a:83:57:7c:f5:08:45:3a:
                    5b:a3:27:50:ee:4a:fe:79:74:cf:19:b8:04:3f:50:
                    a7:ba:11:8a:4a:f3:71:cb:f9:0d:dc:84:92:70:25:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:5E:06:02:5F:F6:22:6B:C8:0A:92:F6:87:98:55:12:28:C5:E2
            X509v3 Authority Key Identifier:
                keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:97:d8:d3:85:6d:26:bb:9d:45:9c:0a:d5:d3:df:a7:5e:08:
         58:0c:af:74:7a:7b:51:0d:2a:c1:24:4a:c5:b9:44:a6:81:bf:
         06:86:69:15:e7:3b:aa:28:5f:fc:8a:85:9d:5c:48:3b:bd:fd:
         50:77:a2:19:24:d2:f0:d1:c4:d4:b9:34:c7:dd:51:b2:bb:e3:
         39:56:42:be:ee:9d:eb:91:8c:83:7b:72:c8:e3:85:9c:7e:bd:
         36:45:97:50:df:f8:60:25:e0:84:85:18:5e:5d:e8:6f:ce:a3:
         4e:17:c7:97:96:97:52:9e:89:72:6f:f7:d6:a1:b8:9e:cc:90:
         9b:57:35:67:d1:42:7d:81:2e:f8:bb:bf:5b:cd:20:84:27:08:
         78:33:89:26:65:1d:14:16:ae:d0:1a:0f:9c:7f:e3:c8:54:28:
         17:0d:e9:ee:77:56:ca:51:6b:e2:bd:9a:fc:9e:6b:54:a9:9b:
         9c:6d:6f:ff:3a:33:57:0c:82:08:b9:86:08:43:ab:2d:9d:4f:
         a7:5d:23:bf:76:23:2c:ed:85:29:05:19:3e:c1:6b:a2:ac:2a:
         33:25:85:f7:bb:d7:92:55:4d:74:fc:a6:46:bb:e6:ab:ad:0b:
         38:a8:6e:a0:12:02:e0:e6:e1:65:f7:a5:4e:84:4a:a8:56:06:
         80:7f:3b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:27 2026 by rpki-client