This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File:                     Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier:          WggQxCTMhIuir/KXX5BJbFKefVQsl87NT7MgdsjvDMs=
Subject key identifier:   ED:E6:D6:5A:11:38:43:2E:7D:DE:79:2C:66:AA:64:86:78:9D:E4:3E
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer:       /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial:       019C41A21845BDBC60F7729A44BB1058AE0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number:          1678
Signing time:             Mon 09 Feb 2026 09:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:07 +0000
Files and hashes:         1: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: DwaE8+MCAO+nT9uIGbsQ/VP8xk8WxpRZ77ZKFP/ShxA=)
                          2: deK62GymHjI7pPHou_DnpOMbHoY.roa (hash: Z9L1mrfYyQRlpKO8mVrybo46X8ByziZzKGq7WcbtlNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:18:45:bd:bc:60:f7:72:9a:44:bb:10:58:ae:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
        Validity
            Not Before: Feb  9 09:01:07 2026 GMT
            Not After : Feb 10 09:01:07 2026 GMT
        Subject: CN=ede6d65a1138432e7dde792c66aa6486789de43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:9b:4b:14:37:a4:e1:22:d7:e2:2f:cf:52:
                    bf:47:b3:27:94:5b:b5:9a:44:1d:4a:f1:8d:3c:3d:
                    87:02:be:05:3b:9a:f2:a9:e2:88:9a:4c:75:c1:f8:
                    c5:1e:6d:be:17:9f:38:aa:88:c1:78:76:41:c5:af:
                    cb:37:cd:ee:72:a8:32:25:1f:71:a1:cc:41:8a:01:
                    d1:7c:c0:79:6c:77:ea:51:4a:40:f9:c4:19:9b:a5:
                    b1:08:52:c3:f7:fb:f5:00:f0:9f:ad:3b:33:0d:63:
                    e2:33:3c:d8:f8:1d:59:fe:cb:33:78:e8:a4:96:62:
                    2d:b1:d4:50:c0:54:7c:d9:93:a2:d5:15:12:06:b9:
                    3c:14:0d:ea:82:9b:33:a7:1b:fc:a4:c3:f8:1d:74:
                    c6:7e:50:c8:a9:cc:e9:08:5a:40:22:05:0a:e7:19:
                    fa:d6:ac:bc:2e:21:a5:65:05:e6:ec:e2:76:2b:be:
                    79:34:be:b8:43:c4:de:63:ff:6b:73:3c:99:f9:2c:
                    7d:1c:ee:6c:28:87:29:81:98:36:ec:39:e4:9d:c4:
                    57:a3:a2:23:aa:43:a6:7b:f3:93:80:82:eb:0e:e7:
                    22:48:5a:39:51:43:4b:ef:4d:21:6f:1f:5f:52:df:
                    c5:ba:5c:81:96:c3:b5:a1:4a:70:fc:08:fd:06:8d:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:D6:5A:11:38:43:2E:7D:DE:79:2C:66:AA:64:86:78:9D:E4:3E
            X509v3 Authority Key Identifier:
                keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ef:0c:e9:ea:8c:e5:f0:f8:e9:b4:92:66:61:46:f9:d1:40:
         3f:7e:ac:5f:92:aa:05:9b:88:13:50:9e:e8:76:25:49:f5:57:
         e1:d8:9e:1c:26:1b:99:ff:5b:3a:23:67:ba:6e:c7:a6:8e:70:
         a9:06:f2:9b:e1:81:1d:23:22:7e:2b:8a:fb:2c:76:02:de:63:
         3a:ad:82:86:08:23:5c:f9:a7:e9:0c:b3:44:2b:d9:88:87:78:
         b6:78:a0:6e:4c:da:82:1b:fb:19:91:a0:ba:2a:e1:3d:31:ed:
         81:16:2c:97:b0:d7:be:bc:13:b6:bd:02:33:68:61:e9:12:c2:
         b2:09:9b:aa:b5:8b:66:40:f7:3d:35:42:ab:e4:d6:bc:c1:85:
         d2:97:7f:17:c8:c5:3e:72:5c:e4:50:11:bc:a6:49:64:85:b8:
         eb:e6:4d:8d:7d:d7:a4:6f:46:54:6e:33:32:d2:3d:9b:b1:fa:
         29:f5:39:02:51:aa:a3:4c:19:90:51:a2:2c:8b:e1:f0:b8:e3:
         93:be:af:e7:e6:6b:bf:97:4a:49:57:ba:7f:ae:d2:e1:c9:ac:
         9f:58:ef:82:a5:b1:52:cc:4e:0e:1f:dd:ab:64:46:0a:2b:90:
         a7:0f:1d:27:b5:a4:b9:2a:26:88:28:42:92:a7:b3:d3:31:a9:
         a6:75:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:24 2026 by rpki-client