This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File:                     wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier:          A/i3tO4KQw0qI/UcX26eZTB0TgduCkaTy+Ti+ClP1as=
Subject key identifier:   CC:15:32:A5:28:5B:02:7D:EE:92:27:08:22:7A:BE:6C:14:22:90:A0
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer:       /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial:       019C43228149E22353AE9D9533A6A5C64BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number:          075A
Signing time:             Mon 09 Feb 2026 16:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:00 +0000
Files and hashes:         1: NDrrs_IUd2G0O3SuekMlmUqDGQ0.roa (hash: jPB6GFI8ltAMvGMwxWBRh6dK/JyrVkFk3erVX9RWesc=)
                          2: O-gWt6o4q970dyzmWA3O_dAqLD0.roa (hash: NVRXZZk1exXkOayT1ebIzr9QdlyalYAdYzDjQteTBuc=)
                          3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: 9PkTPmzyIYnc1DTAE8rKjb7BisrPUil6IsJOtvRKln8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:81:49:e2:23:53:ae:9d:95:33:a6:a5:c6:4b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
        Validity
            Not Before: Feb  9 16:01:00 2026 GMT
            Not After : Feb 10 16:01:00 2026 GMT
        Subject: CN=cc1532a5285b027dee922708227abe6c142290a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:3e:64:70:a6:bd:a4:96:d3:51:fe:ef:b7:
                    f6:69:5d:58:e2:fa:9e:27:e7:dc:d6:e5:f7:55:e2:
                    ca:75:00:7e:dc:00:33:07:9e:6e:3d:3d:0f:04:66:
                    a0:44:e1:37:43:fd:dc:4e:2b:a7:86:f0:77:45:dd:
                    1a:06:8f:42:00:af:87:d5:e0:c0:23:0b:c6:8d:1e:
                    76:e5:d0:88:d8:c2:f2:3a:c4:4b:1b:0f:89:e0:f8:
                    13:c8:2f:87:1e:8d:b9:ad:1a:ec:07:da:3b:8d:c9:
                    f7:00:df:78:c1:c2:3d:1c:b8:1a:fd:50:35:9f:a3:
                    4f:b0:d4:7e:02:97:dc:93:c9:85:87:72:de:de:4e:
                    5b:26:cb:85:27:05:00:33:1a:b2:9d:81:cd:64:e6:
                    75:c9:2a:bc:0f:cd:a4:4d:9d:c3:de:0a:25:2a:e6:
                    a0:6b:4f:14:0a:89:af:73:44:84:b6:d0:52:51:53:
                    45:7e:37:3f:30:55:d8:6d:de:fd:f0:47:9b:2c:73:
                    d5:8e:c6:66:06:7b:52:5e:46:6c:04:8a:11:ec:27:
                    ec:61:d3:b0:86:61:40:12:43:aa:71:57:0b:27:e3:
                    83:99:a1:ec:34:ad:ac:97:ca:99:48:ce:4f:5a:7a:
                    5c:c9:dc:51:91:09:ab:bb:ff:a9:a9:cb:a7:d8:1d:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:32:A5:28:5B:02:7D:EE:92:27:08:22:7A:BE:6C:14:22:90:A0
            X509v3 Authority Key Identifier:
                keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:60:11:ee:7b:8e:c3:fc:60:27:f7:a3:2f:07:61:ce:25:74:
         1e:ff:09:79:98:cf:ce:21:73:59:6a:60:3d:7a:ee:12:92:3f:
         ee:03:1d:0a:67:04:15:20:8f:71:12:8f:9c:b2:77:f7:9f:cc:
         4e:cd:3d:1c:84:63:6b:a5:5b:5a:40:63:c6:9c:7a:7f:18:79:
         b0:90:80:16:a5:38:d0:da:1a:02:8d:fa:33:f7:82:99:ea:31:
         8c:03:04:e4:8e:5f:60:44:77:a3:b0:d9:5a:cf:fd:09:f2:3e:
         bf:0e:7a:2e:6d:84:47:cf:55:14:df:6a:3c:42:87:dd:df:37:
         bb:98:b0:79:8c:88:b6:b4:14:4b:ad:ab:f6:46:2d:78:0b:e6:
         57:e1:d7:bc:15:de:8e:9e:92:44:57:f7:72:78:69:72:77:58:
         74:3b:f6:42:ea:d3:ee:3a:a9:9c:8b:2c:cd:64:07:07:46:d5:
         20:db:45:09:bc:eb:7d:2c:0c:50:8e:23:03:c4:5e:fa:5f:b6:
         fe:fb:8f:af:7a:19:00:00:77:58:4f:7f:73:c8:1d:7f:44:0e:
         16:1b:b0:c9:8a:a7:b0:e3:5e:24:43:f5:bc:80:e4:c1:c7:20:
         db:a8:0f:e6:a4:c7:71:dc:92:30:ab:53:65:bb:e3:d8:23:b7:
         ba:3a:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:02 2026 by rpki-client