This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
File:                     pywg5_4xCpg7miNx-ULa9EvmELM.mft (raw, json)
Hash identifier:          Ksh056TQcs3/E28uQTOYL4WTyxNP1XYwZ1SopG7cQ10=
Subject key identifier:   EE:9D:12:AC:ED:E6:29:FA:B3:F1:AA:A2:C7:59:7F:BA:2C:00:75:35
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Certificate issuer:       /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial:       019C438FC5A8A91D8B90F08A5672E2C12D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
Manifest number:          0542
Signing time:             Mon 09 Feb 2026 18:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:21 +0000
Files and hashes:         1: 97I6aw0yc5ghlgnXfoPx1AXF_Js.roa (hash: MfTKq7Nn0b67YpRTl+D+72YsWvXbSRgj0PmOH+uQQMs=)
                          2: pywg5_4xCpg7miNx-ULa9EvmELM.crl (hash: eoRHa69lQhzH4C+hHP1F98f5P9MqP7FJeObUw9nAjaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c5:a8:a9:1d:8b:90:f0:8a:56:72:e2:c1:2d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
        Validity
            Not Before: Feb  9 18:00:21 2026 GMT
            Not After : Feb 10 18:00:21 2026 GMT
        Subject: CN=ee9d12acede629fab3f1aaa2c7597fba2c007535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:4f:ba:2d:d1:cc:91:d3:99:f2:e4:e8:0a:
                    14:28:e9:33:b9:39:5f:f1:48:71:71:b1:60:1c:32:
                    49:7b:00:df:50:e6:57:75:53:53:18:41:c3:f7:51:
                    86:94:c9:bc:24:77:a5:e1:4b:40:cc:9b:55:2a:65:
                    3a:dc:7c:32:08:8a:ff:1b:ca:f9:da:44:7e:72:bc:
                    63:e9:03:80:ba:e5:54:b0:fb:5e:d3:e3:0e:46:88:
                    4a:b2:6c:7f:c8:59:ab:f1:63:cc:26:c9:88:6c:2d:
                    44:5f:89:a5:76:17:e7:b2:65:6b:67:23:b8:f2:f0:
                    42:1b:c7:15:ef:6b:c2:98:73:bf:55:04:22:3d:3e:
                    6c:03:6e:bf:53:4e:dd:b2:e8:eb:94:f2:1b:dd:d5:
                    47:25:6c:df:e7:e3:e9:24:6b:af:de:ed:66:ee:48:
                    33:21:c4:5c:01:aa:b7:2e:d1:01:eb:3e:6c:21:85:
                    98:13:f9:b6:3f:fe:3a:ba:76:2a:4b:a8:a4:41:b0:
                    02:a3:07:4d:aa:39:2f:42:5a:ea:78:94:68:44:a3:
                    42:e1:2a:25:96:e2:aa:9e:21:df:c5:74:dc:e8:36:
                    41:60:95:a5:bd:93:4a:a9:af:8f:ee:b9:54:a2:d7:
                    de:2b:4c:3a:7a:cc:cf:3f:a9:ec:46:8f:c0:a8:f7:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9D:12:AC:ED:E6:29:FA:B3:F1:AA:A2:C7:59:7F:BA:2C:00:75:35
            X509v3 Authority Key Identifier:
                keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:31:38:2f:f5:ee:45:d7:fa:16:35:01:30:a0:44:fc:20:
         7e:32:3a:6a:b4:be:8a:01:d4:5b:0a:61:1b:c2:8e:e3:89:28:
         83:53:99:e7:78:a3:22:7e:65:2f:ab:4e:83:51:6c:03:e6:15:
         b9:75:d3:3e:ed:dc:62:ff:92:68:38:cb:e9:9e:38:5d:60:37:
         d2:2a:be:48:e8:1e:03:12:93:22:8a:d0:13:ac:5f:a2:01:54:
         52:b7:1f:91:77:a4:32:79:2c:d3:ea:64:f5:6f:78:f6:3f:cb:
         c6:ba:63:05:4c:c0:b3:63:85:7f:21:1a:b4:5f:24:a4:35:4f:
         4c:fc:58:88:7f:6b:b6:fe:ef:dd:75:9a:eb:de:e1:5c:c0:e3:
         54:ea:1d:2e:d1:40:3b:8d:e7:ad:f3:c3:f2:2e:40:51:3d:ce:
         28:63:61:28:b2:9a:32:81:13:fa:24:24:a0:b7:03:ce:7a:92:
         ef:33:6b:38:62:b4:f7:39:f6:bd:df:33:e7:e0:36:08:34:83:
         52:7d:fc:cc:cd:5f:3f:04:c0:b9:f0:93:a5:61:09:91:c7:0f:
         8a:de:67:68:ea:b0:4c:69:a1:a6:7b:94:28:12:8c:3d:ec:8c:
         52:a7:ee:ae:3b:51:dc:d1:92:1b:e9:0e:12:d7:4a:3b:51:91:
         b3:9b:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:23 2026 by rpki-client