This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
File:                     Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json)
Hash identifier:          WE0T0+jEQmbJs+n9z2egfDlS2Hw1ed5pUygaLj4Up/A=
Subject key identifier:   7D:EC:E0:F9:0D:C4:48:9E:FD:68:00:26:A1:65:00:04:79:0F:81:05
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Certificate issuer:       /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial:       019C41A14A95CADCEDA1C987FB422A6630D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
Manifest number:          0605
Signing time:             Mon 09 Feb 2026 09:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:15 +0000
Files and hashes:         1: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: /5vsq6Xp/9x5awUS7knY7y5JFLB4JmNl/WI9ER9hHAQ=)
                          2: _QT3lMVu1JStai6T69WGgwqn7ys.roa (hash: oNv+STRTc8dSmd+O/sB61KNG7rpMHLNG/eCHfujsdBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:4a:95:ca:dc:ed:a1:c9:87:fb:42:2a:66:30:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
        Validity
            Not Before: Feb  9 09:00:15 2026 GMT
            Not After : Feb 10 09:00:15 2026 GMT
        Subject: CN=7dece0f90dc4489efd680026a1650004790f8105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:eb:7f:58:a1:95:a8:9f:42:5e:9b:f4:a1:
                    64:15:3d:cf:04:45:33:5a:d5:99:f9:12:79:32:11:
                    23:5d:a3:ca:d9:00:6e:0b:29:10:85:90:2d:76:5a:
                    d7:81:4d:90:ea:6f:05:76:09:3f:47:f2:e8:03:63:
                    b9:8d:7a:ac:c1:42:29:a2:e1:48:bd:59:f2:28:4a:
                    bc:20:22:b5:d2:57:df:5d:4f:e9:7c:b2:e3:2f:21:
                    1e:7a:23:7e:1c:af:0f:74:dc:53:16:3e:59:79:f2:
                    f8:93:be:99:a4:ca:de:89:2b:74:bb:43:63:52:78:
                    67:66:bd:ca:ae:10:8d:5b:85:0b:2a:82:e5:cf:af:
                    01:78:cb:a3:7b:b4:a2:0a:c8:56:b2:94:51:f5:69:
                    d0:d0:f4:aa:68:5c:9b:96:97:fc:0c:73:68:f6:38:
                    e0:24:f3:2c:5f:23:c6:0e:0e:51:52:9d:1d:5e:c7:
                    3e:c8:98:a0:61:7a:76:2a:f2:88:0a:b3:8a:a4:c9:
                    1b:88:9f:e3:1c:5a:43:ed:2c:63:a1:f8:13:f8:46:
                    5d:eb:87:30:15:37:ff:1e:7f:50:ef:0c:18:87:fe:
                    99:d8:e2:32:ce:e3:d9:a5:bd:a2:45:0e:77:0b:a2:
                    b8:b2:4d:e0:84:f1:f7:5a:56:a1:c4:15:44:aa:d4:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EC:E0:F9:0D:C4:48:9E:FD:68:00:26:A1:65:00:04:79:0F:81:05
            X509v3 Authority Key Identifier:
                keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:cd:10:ad:71:30:d6:0d:db:67:67:f9:4b:24:c3:bd:8f:
         58:81:39:57:24:d7:e3:b0:69:b4:61:67:44:a4:7f:bf:73:8c:
         5f:fd:de:92:57:6c:9c:ec:7b:b5:92:8a:e8:4e:c7:54:2c:ae:
         2f:c6:b4:16:0f:e6:7f:af:d9:e8:94:8b:14:84:38:ed:f0:68:
         94:c2:33:81:be:60:74:82:5c:fe:f4:17:48:7e:43:a4:1c:27:
         5b:42:0f:29:0b:9f:c3:ef:55:d1:47:71:56:92:78:e8:33:6e:
         be:10:ce:31:61:d8:c8:59:2b:17:08:cd:2c:ad:e8:14:11:2c:
         f7:75:4b:f6:3e:a1:bc:16:a6:a9:26:2f:6a:ee:c9:b8:ba:f8:
         54:ec:b3:3a:95:9d:18:e9:1d:b1:ff:aa:0e:e0:b7:c2:5e:98:
         3c:5f:eb:f9:cf:6f:39:a9:c3:fb:4d:e3:29:a4:ab:cc:cd:6c:
         2c:9c:97:73:1a:37:f2:1c:b5:cc:a3:4a:16:9a:6a:ac:2a:d1:
         c3:c3:89:5e:b6:92:0e:ee:fe:ff:f3:32:f6:34:ed:61:fa:39:
         88:43:5f:11:e8:e2:d8:67:9b:fe:a5:9f:64:92:8a:82:9f:cc:
         59:de:ff:c2:dd:6d:45:ff:6e:3d:ee:79:d5:7c:77:36:34:8e:
         2a:f0:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:32 2026 by rpki-client