This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File:                     wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier:          TQug/exZQV+0vYGRGQYF4sQHSW3iu8uQGXpyuY+Sbjo=
Subject key identifier:   30:50:42:D6:EC:CA:3D:D2:57:D9:72:5E:00:42:C1:CE:6C:3E:CF:ED
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer:       /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial:       019C45112DBDE6BCE6A5F827BB9E72C3C095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number:          14AA
Signing time:             Tue 10 Feb 2026 01:01:19 +0000
Manifest this update:     Tue 10 Feb 2026 01:01:19 +0000
Manifest next update:     Wed 11 Feb 2026 01:01:19 +0000
Files and hashes:         1: 8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa (hash: /ZabFzyJivcnbLtz1Of+Qh0KFPOxtwgBRMKumxY4Dq4=)
                          2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: idGDKN7W189vYu9y/ECEof3cNWdrFwyqYHmJhMh/gNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:11:2d:bd:e6:bc:e6:a5:f8:27:bb:9e:72:c3:c0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
        Validity
            Not Before: Feb 10 01:01:19 2026 GMT
            Not After : Feb 11 01:01:19 2026 GMT
        Subject: CN=305042d6ecca3dd257d9725e0042c1ce6c3ecfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:5b:74:e6:54:b5:db:ce:78:c8:b5:28:5c:
                    d4:8f:38:c3:e1:6f:f5:43:e0:f3:1a:b3:be:b1:54:
                    fd:ae:7a:5e:5d:da:b4:19:f4:78:f4:7c:18:6f:c1:
                    51:ee:46:f6:1b:5f:e9:68:a6:35:db:2d:77:7a:2a:
                    ed:a3:9f:1a:38:dc:0b:0a:a4:71:9e:13:88:d3:6a:
                    8f:d5:d8:34:d8:0e:54:47:89:d6:ea:50:45:8e:ae:
                    92:ab:04:aa:4e:95:d7:9c:34:dd:10:7d:be:73:be:
                    93:0b:1a:82:cf:2c:19:57:0c:cb:34:66:fe:ec:e0:
                    e4:d2:7d:1a:73:9b:e0:a7:bc:49:1a:7d:ef:52:71:
                    25:40:eb:78:84:6a:8f:f3:f9:58:77:b5:e2:41:7c:
                    a2:81:88:6b:09:37:75:cf:fa:81:a8:d3:f7:cd:28:
                    71:f0:fb:33:d8:af:5d:ad:e3:78:80:57:5e:f1:c6:
                    2c:6f:5b:02:f7:a8:b3:f0:b9:5f:4a:fa:c2:d8:0e:
                    6d:30:7c:96:88:ff:2d:71:82:4b:7c:e2:98:c6:90:
                    46:c9:1b:de:4c:77:03:b1:b0:c1:97:27:88:dc:2c:
                    eb:4b:02:89:0f:44:ce:1e:b9:ce:20:1b:e8:12:74:
                    c8:b0:72:d4:d0:d3:a7:d7:7f:fb:1d:29:41:24:cb:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:50:42:D6:EC:CA:3D:D2:57:D9:72:5E:00:42:C1:CE:6C:3E:CF:ED
            X509v3 Authority Key Identifier:
                keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:2b:b3:35:fa:f2:e1:e3:d0:7b:3f:54:33:7d:dd:b9:3d:
         86:18:de:c1:eb:49:40:a0:20:28:cc:6a:f3:b1:64:da:04:d3:
         7f:b3:b5:44:0c:dd:46:2d:0f:60:c8:78:bc:87:8f:27:c5:8f:
         99:5b:2d:67:52:b6:bc:86:09:e4:a0:c3:58:36:9b:a7:3a:1b:
         eb:5d:38:11:e1:3f:7e:b2:95:e8:57:1e:23:ed:80:97:ec:ae:
         06:86:ec:c6:8d:b4:72:13:c7:51:c0:95:61:0c:71:8d:90:26:
         65:a6:9e:df:81:ae:31:33:82:33:e1:16:0a:89:8c:3e:c5:15:
         f1:a9:fc:af:4a:c3:1b:9c:07:3c:3c:00:a0:0e:2a:68:eb:4e:
         d7:4b:4c:9b:9b:5b:3f:6c:d2:e0:65:38:d3:80:5a:d0:6d:3c:
         a8:37:f8:f6:af:78:b2:ea:9a:87:d7:a9:c0:aa:c5:c9:9f:1f:
         62:c1:19:bd:a1:bf:5f:b1:0c:da:2e:4a:f5:dd:31:be:a5:c0:
         68:91:62:69:a9:87:0f:1c:cb:96:a5:c5:73:f6:9c:32:fe:c7:
         12:a9:a6:ca:67:65:f5:87:8f:11:2a:23:35:c8:3b:15:f7:20:
         2a:de:24:33:47:61:ae:d3:8e:47:d7:1a:18:17:34:3b:16:12:
         d8:5b:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:56 2026 by rpki-client