This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          9g8f99kxzhweoCYGWUtJHZgYTRUQnmVlbJmOIyI2cNk=
Subject key identifier:   49:77:67:5D:22:14:55:41:34:55:BA:5F:6C:30:8C:7D:B4:22:64:9B
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019C41D89033E1E31AFDAB2A16E4C0D0CC06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          01AA
Signing time:             Mon 09 Feb 2026 10:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:37 +0000
Files and hashes:         1: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (hash: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: AefWLibFzoWOU+aAOheLOi6GtdrekqsN5oCUGjADvOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:90:33:e1:e3:1a:fd:ab:2a:16:e4:c0:d0:cc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Feb  9 10:00:37 2026 GMT
            Not After : Feb 10 10:00:37 2026 GMT
        Subject: CN=4977675d221455413455ba5f6c308c7db422649b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:0e:ff:fd:46:21:55:d8:f8:7a:ba:5c:cc:
                    c8:19:94:ff:31:e6:b3:3a:71:84:e3:63:9a:f9:fe:
                    ea:dc:2c:64:4a:9a:04:f9:f7:ce:43:20:21:6c:4b:
                    1b:f4:e6:e2:f9:55:74:fa:9d:22:ba:a7:b8:ad:41:
                    2f:ae:c9:e3:6b:e5:95:c9:78:b2:04:f1:d7:6d:ec:
                    a5:ad:31:19:c9:f2:99:36:8c:bb:3d:8d:27:58:a2:
                    88:7d:5e:ff:95:07:9b:85:00:49:b5:13:81:d4:5f:
                    5b:2d:db:e5:c8:6a:a0:18:a9:09:ec:b2:20:c1:2c:
                    73:36:34:b1:67:d3:f8:1b:80:a6:6a:64:fa:c8:ec:
                    4d:ac:c7:c7:27:43:78:0b:19:7a:5e:e3:73:0b:3a:
                    28:98:44:22:8d:55:83:6e:74:25:49:5e:df:4f:17:
                    56:1e:b1:5a:45:b1:9c:78:b6:7c:95:4b:4b:e4:66:
                    33:30:5f:8f:6e:6b:46:95:41:51:48:b3:7d:e5:e3:
                    fe:13:d3:f7:ce:33:20:da:c7:bc:b4:a3:72:88:83:
                    35:12:38:f9:af:2f:36:fe:f4:18:ed:a7:1a:fe:c2:
                    07:0a:db:8d:aa:7b:ae:ad:7e:65:26:a7:5c:13:6c:
                    11:ca:b3:41:09:54:fe:92:63:42:9a:0a:8c:5e:4b:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:67:5D:22:14:55:41:34:55:BA:5F:6C:30:8C:7D:B4:22:64:9B
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:48:fa:e6:6f:92:06:6c:b4:60:dc:11:cf:e3:6a:e8:09:
         bb:ed:a5:0e:74:10:4c:97:1e:d7:ad:cf:d7:7f:32:6d:b7:99:
         f0:12:0e:6f:b6:c5:ba:19:f4:ef:02:c9:20:44:7e:4d:b6:3c:
         f0:76:3e:5a:90:40:fb:b2:5b:be:ac:a6:04:e5:55:36:58:61:
         d6:f2:4a:70:fc:32:de:5b:77:36:cf:df:2a:05:e8:3a:fd:df:
         22:21:7f:13:da:3a:be:bb:20:19:62:c4:83:02:98:d0:b2:a2:
         76:ae:19:e6:c3:8e:c5:bf:95:0d:82:71:d9:99:b9:c5:a8:93:
         b8:f6:dc:8b:b1:35:43:7a:b0:07:a6:9d:75:eb:b6:40:ee:d3:
         07:68:15:eb:39:d9:ed:99:7b:b8:4e:1f:94:ba:e2:ea:b1:6c:
         a3:39:52:c2:e7:e6:44:92:02:ca:b4:c6:f9:58:d5:a4:c1:5f:
         08:8d:8a:f3:fa:1d:18:75:51:33:cd:10:9d:11:36:93:6c:3a:
         bd:33:96:5f:78:8d:be:48:90:8e:a7:9e:33:bf:7c:e4:39:b2:
         b1:6b:f2:33:90:95:3e:0b:d6:34:75:4a:da:73:9c:0c:69:55:
         a7:50:30:dc:64:77:6d:5a:e4:d4:f5:5c:fa:89:ae:a1:7c:0a:
         9c:f2:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:15 2026 by rpki-client