This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File:                     WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier:          KsnjRZQ+JuknPIS/A6n2DH1zOembRuXHqhZ8ArkHLys=
Subject key identifier:   D8:BE:B2:9A:BA:31:EB:22:88:33:01:39:31:D5:58:7F:30:87:6A:B5
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer:       /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial:       019C42EB8095C6F31306631322C29CEAF969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number:          034B
Signing time:             Mon 09 Feb 2026 15:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:55 +0000
Files and hashes:         1: DrL-3puYiO1XcvOHU3z8CMJINeA.roa (hash: cuMSInirqa12rGsZAI3BCtXNacI0/0nGWC9/J3U/TsU=)
                          2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: oYiMl/7A2QGIOFYKP52mxNUEoxWiNzpzGv0POwAE9Gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:80:95:c6:f3:13:06:63:13:22:c2:9c:ea:f9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
        Validity
            Not Before: Feb  9 15:00:55 2026 GMT
            Not After : Feb 10 15:00:55 2026 GMT
        Subject: CN=d8beb29aba31eb228833013931d5587f30876ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:d9:bc:fe:21:0a:42:ce:2d:11:76:9b:06:
                    75:41:f6:aa:02:7e:8f:4b:5b:16:3c:b8:92:2d:b7:
                    4f:32:68:dc:6f:7b:e4:4c:89:41:af:50:25:67:9c:
                    e5:5c:89:73:25:fe:b3:cb:3a:49:30:0a:c4:ff:d6:
                    56:ec:41:2e:0d:6f:d7:7e:0d:88:75:49:b4:2f:86:
                    6b:a3:7e:6e:29:e6:ba:c0:a4:97:fc:81:6b:01:9d:
                    f2:f9:7f:f2:4e:b0:98:2e:91:47:e3:26:cc:5c:60:
                    68:9d:3c:f4:01:e2:2c:b5:e5:49:40:85:e8:dd:9c:
                    4b:02:dc:6b:6c:c5:70:76:03:03:71:f0:f1:02:33:
                    ad:bd:2e:56:ce:14:54:b9:06:a3:e5:ef:e0:b2:3c:
                    ad:57:12:1f:dc:cd:40:69:89:64:04:8a:27:26:d8:
                    9f:7e:ed:69:21:c2:d8:40:99:13:36:fd:d8:93:a6:
                    82:62:d2:24:2a:c1:cf:f8:ea:d1:30:b2:02:3f:b2:
                    00:42:3b:38:c6:84:65:21:83:b1:9e:52:80:11:c4:
                    53:1c:07:24:8f:e0:36:b0:db:29:d1:a3:89:84:7f:
                    a8:d1:a4:d3:34:2e:a0:2a:2a:ef:3a:81:4e:b5:91:
                    d5:0f:2a:27:e7:12:4e:8c:24:fe:d0:a4:60:92:a5:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BE:B2:9A:BA:31:EB:22:88:33:01:39:31:D5:58:7F:30:87:6A:B5
            X509v3 Authority Key Identifier:
                keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:32:17:22:d3:7c:20:50:59:98:1a:2b:79:38:c3:5f:51:3b:
         e8:2d:c2:f3:dd:86:46:54:d2:4a:30:d5:73:f8:7e:6a:5f:f7:
         dc:ed:77:5f:e1:e3:29:61:7e:9b:a2:3c:85:2e:93:67:a6:8d:
         28:53:f2:b5:77:30:24:07:12:bd:16:3b:95:16:85:ab:a8:45:
         3a:02:e3:6e:f4:09:9f:05:24:cb:03:23:e9:3f:6f:74:7d:9e:
         3f:87:20:7b:13:9e:1f:36:1b:83:a5:60:8a:96:3d:88:e3:51:
         7a:90:44:14:2e:1e:0d:57:49:49:b2:ea:3d:6b:bd:b0:ae:8d:
         d9:7e:7a:b3:96:74:cf:4a:37:f3:6e:8b:ff:4f:e4:a6:33:42:
         a3:5a:7d:0a:06:0b:ca:4c:59:89:81:90:4f:ac:6f:af:1b:4b:
         2f:07:d4:39:38:58:6d:99:57:c8:84:d4:2d:ee:d0:a7:51:87:
         30:25:e8:76:3d:ba:99:75:82:c0:31:c6:5b:8c:bb:48:e7:ef:
         c8:65:96:be:c4:1c:4c:b3:c0:df:01:fc:6d:2c:78:50:69:15:
         d8:d2:8a:35:7a:41:90:46:8b:82:99:9d:8e:51:f8:94:ad:d8:
         07:fb:6a:49:c8:04:7e:f2:ee:02:95:7c:83:47:74:66:be:c2:
         b2:18:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:01 2026 by rpki-client