This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
File:                     wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json)
Hash identifier:          clUmFYFe9/n7LKXD4JMcbmjuU4pFnG5+q8DK4sb3zsQ=
Subject key identifier:   5F:23:1A:C5:EA:E8:26:F9:8C:D6:DB:9E:78:C4:88:76:5F:10:60:32
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Certificate issuer:       /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial:       019C432256D1391DCE4CB109CE5F04DE7B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
Manifest number:          0D1A
Signing time:             Mon 09 Feb 2026 16:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:49 +0000
Files and hashes:         1: ZWlCbwYlYhNSQIIutHHD8a9h54E.roa (hash: j+KYDXdRZkwHkiyGdkVM+cr8DBbqePU+nu2YjtndwbA=)
                          2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: +RB/TxNH2jN1SZfFy2mk6rbOlqcUUy68K6LkYNIkZ3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:56:d1:39:1d:ce:4c:b1:09:ce:5f:04:de:7b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
        Validity
            Not Before: Feb  9 16:00:49 2026 GMT
            Not After : Feb 10 16:00:49 2026 GMT
        Subject: CN=5f231ac5eae826f98cd6db9e78c488765f106032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:21:5e:7e:65:f4:2d:38:74:84:50:2c:a6:
                    31:1b:64:da:ca:f6:d1:ef:d3:5f:eb:65:57:e4:ad:
                    14:20:90:6d:33:fa:cd:29:bb:fb:9c:85:1c:53:9b:
                    5f:02:65:89:d8:3d:68:50:d4:9c:80:d9:27:df:b4:
                    8e:17:f9:f5:2c:51:51:18:a5:2b:ab:54:1d:77:6b:
                    d5:96:91:85:95:8a:0f:0e:c2:71:67:42:62:c8:8d:
                    21:01:ea:c3:35:f2:e4:1a:fb:a9:c4:92:f1:98:f2:
                    dd:13:df:06:8a:68:0e:5c:9c:ea:20:35:cb:2e:56:
                    48:f1:0e:af:85:df:4e:77:cb:6b:91:68:05:ec:91:
                    97:0a:64:66:2f:56:c3:81:2f:c0:5d:ba:83:e6:64:
                    4f:6e:40:6c:90:cf:aa:19:45:10:e5:6c:a7:8a:d2:
                    2e:f1:b0:18:7a:1a:c6:a4:44:d2:57:84:55:1e:79:
                    74:97:4d:5c:1a:5d:cf:80:7c:4b:6b:a1:40:85:40:
                    c2:d7:d4:71:09:fb:49:94:5c:85:f8:a8:b9:7f:32:
                    f9:df:41:2f:b9:4f:8c:0c:b0:09:c8:01:77:71:01:
                    1f:66:bc:2e:57:04:ca:7a:df:ef:07:86:12:20:66:
                    bd:3b:fa:c2:26:5e:ba:1d:61:8c:61:68:59:ce:6e:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:23:1A:C5:EA:E8:26:F9:8C:D6:DB:9E:78:C4:88:76:5F:10:60:32
            X509v3 Authority Key Identifier:
                keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:9b:fe:0e:0d:0d:89:b5:4f:b1:a8:d6:c1:74:dc:f1:b3:
         77:ef:8d:6f:3b:38:b0:af:6d:cd:dd:86:31:4f:0f:13:0f:90:
         02:f4:ab:d3:8d:32:c8:86:5b:1e:6d:51:80:c6:91:24:40:30:
         f5:c7:5a:67:38:9c:6b:1a:cd:0b:b7:38:db:48:92:6d:c4:5a:
         8b:dd:57:f0:88:7e:94:0b:b3:64:e1:dc:a9:d4:83:ca:10:44:
         16:5e:23:6f:47:b5:78:3f:fd:cd:8d:b7:1a:dd:25:82:90:1d:
         61:99:cb:3f:45:95:26:0f:7b:33:9a:f3:bc:af:e5:79:4c:44:
         93:49:05:73:8e:19:b5:49:0e:45:34:9f:1e:76:a8:98:98:bb:
         21:18:ea:d1:ec:5a:f3:3c:ae:f0:9e:ee:54:57:61:8f:66:5c:
         6c:f5:d3:e3:82:a2:21:3f:31:4a:ac:13:f1:f8:a7:f2:f0:33:
         35:e0:6b:7a:ed:49:15:96:bc:e2:59:43:69:e9:2a:9d:cc:9d:
         c7:88:00:82:19:03:d4:d5:fd:a1:31:f3:6c:9a:2e:72:25:76:
         07:45:df:09:0c:d8:53:0d:95:7e:01:e4:f4:4b:2e:44:62:39:
         13:d3:16:52:57:b6:fe:c6:fa:b6:a2:22:ab:33:c7:cf:52:48:
         5a:05:a0:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIlbROR3OTLEJzl8E3ntlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTNkMDUwNWQwN2FhMTBkOTExN2FjMmZkNTYyNjZkNDg5
MDUxOGYwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZjIzMWFjNWVhZTgyNmY5OGNkNmRiOWU3OGM0ODg3NjVmMTA2MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt14hXn5l9C04dIRQLKYxG2TayvbR
79Nf62VX5K0UIJBtM/rNKbv7nIUcU5tfAmWJ2D1oUNScgNkn37SOF/n1LFFRGKUr
q1Qdd2vVlpGFlYoPDsJxZ0JiyI0hAerDNfLkGvupxJLxmPLdE98GimgOXJzqIDXL
LlZI8Q6vhd9Od8trkWgF7JGXCmRmL1bDgS/AXbqD5mRPbkBskM+qGUUQ5WynitIu
8bAYehrGpETSV4RVHnl0l01cGl3PgHxLa6FAhUDC19RxCftJlFyF+Ki5fzL530Ev
uU+MDLAJyAF3cQEfZrwuVwTKet/vB4YSIGa9O/rCJl66HWGMYWhZzm55lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8jGsXq6Cb5jNbbnnjEiHZfEGAyMB8GA1UdIwQY
MBaAFMAT0FBdB6oQ2RF6wv1WJm1IkFGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEt
NmQyMTBmZDQyZDc3LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEtNmQyMTBmZDQyZDc3
LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXmb/g4N
DYm1T7Go1sF03PGzd++Nbzs4sK9tzd2GMU8PEw+QAvSr040yyIZbHm1RgMaRJEAw
9cdaZzicaxrNC7c420iSbcRai91X8Ih+lAuzZOHcqdSDyhBEFl4jb0e1eD/9zY23
Gt0lgpAdYZnLP0WVJg97M5rzvK/leUxEk0kFc44ZtUkORTSfHnaomJi7IRjq0exa
8zyu8J7uVFdhj2ZcbPXT44KiIT8xSqwT8fin8vAzNeBreu1JFZa84llDaekqncyd
x4gAghkD1NX9oTHzbJouciV2B0XfCQzYUw2VfgHk9EsuRGI5E9MWUle2/sb6tqIi
qzPHz1JIWgWgYg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:27 2026 by rpki-client