This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File:                     wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier:          QX+Y4MpWQM9iDc17OVOYGL+ZKkcoG/FX/Tfy139HedI=
Subject key identifier:   A0:62:A5:43:30:57:DE:38:33:90:05:3D:F5:9B:12:70:89:D3:2B:29
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer:       /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial:       019C427D4F25FF7B64BEF5CA1184422A66B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number:          0477
Signing time:             Mon 09 Feb 2026 13:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:34 +0000
Files and hashes:         1: sESThJoImWepiHXICmCyiUQO13c.roa (hash: /EXA+hsAhf5yELjtFqrr5qslACb1l1qBz89KSCq1yVw=)
                          2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: 6t6h04McnBRkdwiYDbXEtswe2VWI48LvhoDC5ze2qzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4f:25:ff:7b:64:be:f5:ca:11:84:42:2a:66:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
        Validity
            Not Before: Feb  9 13:00:34 2026 GMT
            Not After : Feb 10 13:00:34 2026 GMT
        Subject: CN=a062a5433057de383390053df59b127089d32b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:3b:5d:c0:9d:95:b0:14:13:92:e7:b2:3c:
                    10:86:4a:e2:12:40:65:fd:58:29:c9:36:1d:d2:4a:
                    e0:b1:a9:b5:01:15:47:b8:8e:d5:8c:2f:33:be:9d:
                    e0:dc:31:a2:9f:82:7e:b6:f6:d6:4c:95:30:1f:16:
                    a2:b2:b0:74:1f:ef:62:4b:ba:a0:11:20:9a:83:40:
                    e0:7a:e7:c6:03:92:44:7f:cf:82:ca:26:31:e1:8f:
                    6f:ad:84:06:6e:55:1d:fb:5d:b8:7d:43:00:1a:d1:
                    8c:b8:b4:ec:fd:52:bb:7f:88:60:c1:fc:7c:7a:1f:
                    ca:ce:11:53:0e:c8:77:8c:83:f6:32:19:19:60:78:
                    25:7a:7c:ec:be:47:70:ba:a5:62:47:03:ae:10:14:
                    f7:38:b1:a7:ff:cc:da:b4:db:b9:57:24:26:47:d3:
                    1c:b3:6a:07:8e:72:56:7d:f6:55:5e:1a:68:8f:12:
                    40:e9:9c:94:6f:ca:7f:2b:52:07:8b:db:6f:29:f9:
                    1a:8d:76:5a:9f:68:8f:f5:af:c9:cb:ee:d5:bd:bc:
                    53:56:8c:a9:a0:59:7c:96:b0:dc:51:7b:21:5c:7b:
                    a3:21:0d:5d:39:26:9b:92:ec:22:b1:41:5a:58:a8:
                    85:79:65:02:92:81:68:3e:89:57:d5:1c:83:43:19:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:62:A5:43:30:57:DE:38:33:90:05:3D:F5:9B:12:70:89:D3:2B:29
            X509v3 Authority Key Identifier:
                keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:c8:1c:f6:66:62:8e:6a:26:19:18:b3:fa:b8:21:2a:73:
         c0:db:40:cb:27:39:43:97:82:cb:a4:75:4f:c3:27:44:41:05:
         dc:71:93:0a:4f:ee:69:84:e6:3e:bb:40:a1:93:58:10:e8:e5:
         d6:c9:db:6a:e1:f4:36:5d:bb:10:aa:29:6e:e5:54:33:22:ff:
         89:14:da:b4:b4:22:6f:a9:90:ec:d5:c6:2e:bd:a5:92:42:62:
         03:49:d3:aa:04:3f:f2:92:50:d5:15:79:8d:76:d3:70:d5:6b:
         90:83:b6:06:b6:ce:23:58:d6:2c:20:ae:dd:d6:ee:62:a2:d4:
         42:40:33:bf:50:4c:a0:2b:03:33:2e:8b:c7:d4:d0:41:3a:a7:
         27:f6:bd:90:55:3b:86:50:71:e2:9b:a3:e5:56:e1:45:66:3d:
         6f:90:a6:2f:ca:b6:77:ce:66:89:7e:d7:5f:9d:09:ff:51:b1:
         b7:e9:a6:00:cd:64:20:e6:b8:fe:60:7f:f0:82:99:43:b4:08:
         fe:c8:01:53:2f:2b:6d:dd:5c:40:d4:55:96:ee:54:7c:69:c3:
         73:e3:00:52:01:5c:6a:45:d4:ab:66:f2:c5:37:f0:ff:3e:b1:
         be:fd:17:0b:61:91:84:da:a2:98:8c:74:89:09:2c:c6:f2:7d:
         86:8e:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:59 2026 by rpki-client