This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File:                     WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier:          +z7A4o6x5htNPVqGGmHCDV5v7fddZlpOfMvdhEDihtU=
Subject key identifier:   D2:9B:5F:60:5B:2A:C9:C6:70:FE:E2:96:77:F0:DD:8F:62:1D:F1:3E
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer:       /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial:       019C40FCBF9A54E18E5A71E31D726F9F17A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number:          0E0F
Signing time:             Mon 09 Feb 2026 06:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:31 +0000
Files and hashes:         1: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: MO5bYY/M67aaf3VLxK0HuXBboepILDNtt+QHJJs7RIM=)
                          2: h5VWwLm5sJPb8Mq6egOvSDm1ZbE.roa (hash: lIFIr7IW4fJHhWCQmREyv0ZLQpwRC/atkqoeOTTCLNA=)
                          3: oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa (hash: thUeFABDpIEkTpbKZW+FpdsviA9MqeC7/Ij0qsHenC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:bf:9a:54:e1:8e:5a:71:e3:1d:72:6f:9f:17:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
        Validity
            Not Before: Feb  9 06:00:31 2026 GMT
            Not After : Feb 10 06:00:31 2026 GMT
        Subject: CN=d29b5f605b2ac9c670fee29677f0dd8f621df13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:a5:6e:3d:b9:7a:df:a4:48:d7:d7:64:f9:
                    db:ed:8a:c4:7b:32:43:dd:1b:ac:f5:e1:5f:b3:a4:
                    64:0a:08:c5:ac:62:79:0b:f5:77:dc:42:34:a6:65:
                    d6:b0:09:da:1e:b6:48:b9:49:c4:79:77:c4:e3:7b:
                    8d:f4:77:e3:85:7a:4f:2b:df:10:94:50:10:a5:fc:
                    fd:55:b7:63:33:36:54:79:2c:b2:67:a6:65:03:20:
                    5a:10:09:7b:14:ab:bc:92:8b:d4:c9:ff:06:26:04:
                    d2:dc:a7:7d:82:3d:c7:98:60:dc:d2:1b:53:56:8d:
                    5f:dc:1d:ee:61:b8:59:c5:64:ef:17:b4:aa:64:bc:
                    ec:b4:f1:3d:08:34:67:d6:69:02:1e:aa:49:cd:9e:
                    7a:b7:5a:db:47:f2:aa:29:d1:99:ea:f6:e4:2d:4f:
                    f8:8b:a9:05:c7:83:8a:05:c7:b9:f4:64:50:a6:11:
                    f2:1d:c9:3d:e6:11:55:7e:13:ba:a1:e3:e0:e0:47:
                    6e:17:26:eb:55:f9:c3:39:85:23:27:c5:fa:60:43:
                    ca:fb:ef:13:c1:38:47:8c:ad:62:8d:ab:b2:d4:57:
                    8a:24:54:8c:82:6d:03:0c:61:20:d7:3e:9f:d4:f3:
                    0b:72:71:c1:99:dc:ec:58:e8:f0:cc:1a:92:b9:cf:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9B:5F:60:5B:2A:C9:C6:70:FE:E2:96:77:F0:DD:8F:62:1D:F1:3E
            X509v3 Authority Key Identifier:
                keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4b:27:93:39:01:f0:53:14:7e:67:04:bf:be:4b:e7:d6:7b:
         68:27:64:02:f1:0f:00:7c:60:b8:66:ae:47:2d:2f:f7:c4:0a:
         de:a9:bc:9a:d2:29:bf:11:86:37:be:4b:56:bd:08:d6:83:d5:
         c8:ce:d9:68:54:af:0e:ff:c3:df:90:2b:40:ac:eb:7d:58:14:
         36:d4:18:42:fa:f8:21:a3:d2:d5:b5:4a:ab:c1:24:ff:e1:51:
         0e:f5:51:d7:58:23:4d:66:36:0d:7c:e5:d1:bd:96:59:0a:f5:
         ec:7c:0b:19:6b:0b:c9:8b:41:24:b9:5e:bf:5c:37:6e:b0:b4:
         12:9a:48:76:7b:fd:81:ff:c8:2c:fb:08:32:be:64:8a:33:29:
         6c:76:59:9e:27:69:44:79:f2:2c:12:1a:ac:4c:f4:28:d1:43:
         b2:4e:c8:53:89:42:ad:e7:5c:59:23:20:11:84:91:58:bb:29:
         a6:41:7f:1d:44:81:c9:f6:c6:79:45:19:0a:d6:8c:1f:f6:75:
         46:06:52:64:db:4d:9f:5c:10:8d:da:ab:3a:29:28:72:45:6b:
         51:13:1c:2f:5a:5b:7f:36:1e:41:11:92:d1:6c:97:83:04:81:
         f9:8b:c7:5d:35:35:68:7c:2e:ee:74:22:68:d8:e8:ba:a6:40:
         80:fb:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:50 2026 by rpki-client