This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File:                     WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier:          T2AmpZeqh5G6Xbbeax90Xz0sKSj6HvFPG0qp4izjg5M=
Subject key identifier:   6C:B0:95:95:2E:7A:12:47:17:D6:90:BD:F0:A0:D5:ED:1C:BF:94:24
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer:       /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial:       019C4322AD0A1A62114C84DDF6E9BC436FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number:          17B3
Signing time:             Mon 09 Feb 2026 16:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:11 +0000
Files and hashes:         1: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: DBLNNoYnfEJiA3rT1RcAJrFj+PVCSvyYHjF8yqVuTT0=)
                          2: ylZo-PtqvCZYS10GqApM9m6Ug-o.roa (hash: 4edYiQzvX2wZ9mo10QzR6c1dv5Szd3EKKnlZ558MCYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ad:0a:1a:62:11:4c:84:dd:f6:e9:bc:43:6f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
        Validity
            Not Before: Feb  9 16:01:11 2026 GMT
            Not After : Feb 10 16:01:11 2026 GMT
        Subject: CN=6cb095952e7a124717d690bdf0a0d5ed1cbf9424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:6a:20:6a:58:48:5e:f1:3d:18:d2:b2:74:
                    91:31:97:bd:d6:7d:ba:6d:23:b8:f8:9c:2f:ce:88:
                    73:f1:26:63:60:b2:6c:2a:9e:2e:22:84:9a:a2:53:
                    99:92:8e:fe:65:15:22:50:dd:71:a7:1e:19:b2:c0:
                    b2:bb:dd:96:6b:01:ba:46:c6:ff:6f:27:13:ed:a0:
                    91:0c:a4:04:77:1c:51:fd:99:b5:be:bb:d9:90:49:
                    59:df:05:90:78:d1:23:4e:7e:f8:e4:73:b6:9b:bb:
                    b4:9a:9f:f7:45:11:8c:bf:65:c9:f1:6b:3a:f6:24:
                    ce:63:b7:7b:6a:aa:a9:2d:af:ec:ab:83:e4:05:ec:
                    f8:34:f6:a0:6a:27:f2:7c:2d:e4:d7:e5:82:3a:94:
                    c9:99:04:31:ee:f4:76:b9:4c:98:a9:26:57:8f:9c:
                    ff:8a:f0:2f:79:57:e3:3b:ef:dd:77:85:55:c9:31:
                    0c:0a:3d:89:63:40:cb:13:35:d1:55:c2:f9:e9:7b:
                    cd:c7:b6:e9:70:f0:51:35:87:a2:ba:60:e3:ec:e7:
                    bb:e9:7c:79:b0:b6:43:d6:46:0a:9e:6b:f6:59:aa:
                    a1:17:b7:5a:56:13:9c:70:d6:ae:5c:0d:7d:c6:a9:
                    96:02:9f:ec:a1:b2:81:5b:1d:e4:01:04:c8:cf:db:
                    69:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B0:95:95:2E:7A:12:47:17:D6:90:BD:F0:A0:D5:ED:1C:BF:94:24
            X509v3 Authority Key Identifier:
                keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:b8:32:94:df:70:cd:e8:0e:5f:52:1b:ca:88:d4:4f:fa:
         e4:cc:15:d8:4c:33:7a:ca:30:75:0a:a0:e3:6b:08:10:14:6b:
         7d:8f:ee:49:42:8f:86:3f:5a:d4:02:06:c4:6f:26:d6:8f:97:
         2b:cd:2f:c6:20:9a:c1:cf:ed:03:76:2a:e9:c5:4a:7e:2e:7a:
         05:88:27:99:2c:46:16:f8:15:74:14:cf:47:31:29:45:e0:16:
         eb:2d:c6:9c:3f:32:6f:7c:73:ee:ef:4d:08:01:dc:d6:60:8f:
         cd:3c:89:11:a2:2a:9c:98:a9:6d:7f:78:6b:62:79:30:0f:f0:
         84:1c:e3:1d:eb:87:ad:2e:f0:3d:a3:12:b8:42:7d:c7:05:03:
         c8:a5:df:2b:2b:9e:72:19:96:27:c0:d7:c0:46:30:33:db:b7:
         93:eb:93:06:32:f9:ae:0b:66:d3:e7:68:42:c3:0d:74:e0:50:
         12:70:b4:78:04:36:5c:ca:7b:47:ca:ad:e1:a7:9c:c8:5f:e6:
         73:32:87:80:ee:9b:ad:c9:80:c0:16:41:86:97:ce:ce:0d:9d:
         f5:62:19:8a:6e:6d:8a:2c:8c:d1:ac:53:35:40:fe:86:d8:dd:
         92:b2:0b:dd:2a:98:bc:7b:b9:79:8f:d3:69:0c:55:b8:0f:85:
         7a:90:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:55 2026 by rpki-client