This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          u+2TnZAlaIDVK1+UUmk8CNYM/i7EziAmOcUF2bSKMqo=
Subject key identifier:   E4:69:3F:C4:4C:F9:23:36:58:73:E1:57:01:95:52:71:2A:AC:5B:3E
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019C43FDED068A7D23E19507868AD15E6721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          128E
Signing time:             Mon 09 Feb 2026 20:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:40 +0000
Files and hashes:         1: 0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa (hash: +jTSNuKfxuCvHo1F5dM5RaYN/hFX2mIW99lx2JVtRD0=)
                          2: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (hash: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is=)
                          3: loJlqq3qXuCu-dkSIlY72SrCnbU.roa (hash: 5OLtUAD6inbOq/tzv2K1YJFeXJFtMDnKAXlws3rJ/lw=)
                          4: ryDpy6cdN2x4PxzZve738-RUKps.roa (hash: 7P6XIPn0h99li8ImXCuSS48Xd7ty7D1xcOSjTfq3Khg=)
                          5: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: cu9ImGKKYZpnh+rB4NWWlH2snSnEBd0tS6Yu266wRcE=)
                          6: xF6DSfpWjHY3DSnY4quSmS7ktcA.roa (hash: odbQ9fjuabZiW5G2VLqBK8Bk/nuyTPF9z/+wCBqDPfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:ed:06:8a:7d:23:e1:95:07:86:8a:d1:5e:67:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Feb  9 20:00:40 2026 GMT
            Not After : Feb 10 20:00:40 2026 GMT
        Subject: CN=e4693fc44cf923365873e157019552712aac5b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:bd:71:c5:04:6c:0f:e5:bc:17:21:37:54:
                    7a:c8:92:b4:cd:39:9d:df:30:2d:32:8e:ff:34:68:
                    fc:4a:a8:17:09:bb:8d:90:78:a2:4c:07:a5:a5:bd:
                    05:4f:01:87:6e:ae:01:7c:8a:9b:bc:45:3e:84:a2:
                    5c:36:67:9c:5d:b5:e3:35:2c:3d:6f:8e:0b:a2:b0:
                    d7:dd:5e:3b:56:de:fa:cf:70:9e:49:b6:11:72:5d:
                    76:4a:52:4d:64:ce:fe:04:14:cb:52:e0:24:7b:b1:
                    fc:85:37:e1:fd:1f:c1:04:cb:be:6d:83:b0:4d:f4:
                    11:16:3e:06:84:67:83:2c:e5:c9:f4:6e:1b:29:79:
                    71:d1:7e:40:c3:15:9f:98:13:8a:04:bc:65:cc:31:
                    07:09:3c:d3:20:96:df:6d:ba:1b:15:f4:44:f1:92:
                    67:78:de:9a:5e:55:a1:23:66:f3:3e:aa:3b:94:1a:
                    ab:cd:09:c0:b1:64:b2:f1:f9:7b:e6:99:59:c3:dc:
                    05:c4:4f:05:92:72:4b:1b:01:87:64:57:8d:09:2d:
                    e6:6b:89:5d:47:8a:70:24:5a:0f:f8:4c:d6:b4:71:
                    50:0e:bd:ae:30:9a:13:3f:41:86:62:cd:bd:36:8e:
                    4b:b5:35:07:37:69:06:ec:1d:2f:c8:85:4c:26:82:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:69:3F:C4:4C:F9:23:36:58:73:E1:57:01:95:52:71:2A:AC:5B:3E
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:73:a3:03:8e:83:51:0e:09:5e:53:af:6c:62:b8:27:a4:d5:
         e6:09:38:e1:3a:0b:17:6b:cc:e6:f9:c4:87:b4:3f:f5:ef:00:
         04:d4:a1:f4:6b:90:95:56:3b:9e:58:d7:c3:1b:17:b7:83:2b:
         65:51:16:83:ef:ce:83:cf:42:3a:35:c8:fb:bb:65:6a:9b:bc:
         12:38:44:0c:15:d8:e1:fd:cf:09:19:fa:ee:14:50:9b:c5:b1:
         6a:32:87:08:77:81:59:d4:cb:ae:1d:e4:f3:41:c6:b4:a2:9c:
         22:2c:b6:53:47:f0:3d:49:e9:fc:13:bc:ba:1e:e8:32:0d:c8:
         54:be:cf:3f:1b:36:17:81:ab:ac:8f:c5:12:5d:62:c6:fb:0d:
         18:29:57:22:76:c0:0c:84:99:9a:d0:4b:37:be:20:1a:96:c5:
         c3:12:c3:64:ec:41:1c:1c:84:8d:f7:81:84:51:e2:36:a5:df:
         d1:5b:52:b9:51:99:00:18:87:a5:aa:5b:f0:fa:0d:34:10:89:
         50:2d:4c:2b:07:d1:ea:9d:bf:c4:b3:33:a7:fb:b4:13:a3:ca:
         9c:e9:ee:0b:90:77:0c:9a:cf:67:7a:5f:99:f8:e7:eb:dc:af:
         c8:93:54:2b:51:70:3a:78:4a:dd:94:cc:76:ed:75:15:06:17:
         91:63:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:51 2026 by rpki-client