This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File:                     wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier:          FwhCBIaU0LHhwKvd/iS+nXS80MMylqx2Se5vB69b2Y8=
Subject key identifier:   3A:AE:C9:74:09:74:CF:86:3F:AD:15:31:D7:DF:ED:4E:B3:41:DA:D9
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer:       /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial:       019C43905395FF2C1BAA846C309AEE65AB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number:          0EF3
Signing time:             Mon 09 Feb 2026 18:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:57 +0000
Files and hashes:         1: SSYiDgD_3-1wMHqQrv7qO7JPevs.roa (hash: 1WfeKCTajb/KdbOomr3V7iu+Ay5TdD7m9U7zyCHhLwM=)
                          2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: izTQh4EzsOhq6K07ClbwNJbvrqHB6guhm0G2eTLzL+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:53:95:ff:2c:1b:aa:84:6c:30:9a:ee:65:ab:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
        Validity
            Not Before: Feb  9 18:00:57 2026 GMT
            Not After : Feb 10 18:00:57 2026 GMT
        Subject: CN=3aaec9740974cf863fad1531d7dfed4eb341dad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:05:87:f8:e1:21:06:8a:ed:c5:06:61:5e:
                    2d:c3:df:79:2d:22:19:bf:33:9d:0a:f2:72:4f:5b:
                    1d:26:8e:f9:34:2b:2f:5a:51:6a:9c:f3:52:aa:6a:
                    99:45:70:ea:1b:eb:7d:dd:be:98:c8:03:d6:25:16:
                    a5:6b:dc:21:47:df:16:93:c0:7a:e0:f6:59:ae:de:
                    83:96:d8:43:8c:5f:72:16:88:cd:b0:eb:fd:1b:17:
                    8d:ec:ad:a0:79:be:c1:ed:75:de:b6:1f:14:4e:63:
                    25:cc:57:55:0c:bc:e0:4d:75:a1:06:a4:6e:96:28:
                    cc:22:82:83:b9:d6:50:63:3d:45:30:99:92:99:a6:
                    56:e4:01:80:e5:57:36:cc:6d:da:8d:43:8e:fd:0a:
                    47:3d:ca:05:21:37:67:f2:95:f6:97:54:c0:d5:82:
                    be:5b:d1:27:94:76:98:d2:81:d9:89:6f:28:90:0d:
                    eb:4d:83:75:40:3d:ca:9c:92:89:69:a8:b9:d5:cc:
                    f2:f9:71:79:87:78:a4:85:bc:e7:ea:47:19:7d:07:
                    c6:41:dd:c4:f7:22:2f:cf:4a:0b:9c:5e:a6:85:16:
                    1b:30:0c:98:5c:f2:36:11:a6:64:66:f6:67:be:1f:
                    38:28:66:13:e1:39:d7:d4:45:1b:61:0c:8c:09:37:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:C9:74:09:74:CF:86:3F:AD:15:31:D7:DF:ED:4E:B3:41:DA:D9
            X509v3 Authority Key Identifier:
                keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:5f:d6:16:f7:67:58:7c:53:6b:ca:db:ad:68:15:6a:0e:
         a5:28:62:7b:05:e6:a4:a9:90:e3:5b:cb:15:84:02:8e:a5:b0:
         a3:14:1b:eb:34:7c:b4:e5:72:fa:95:8b:b8:1b:be:45:a6:5f:
         91:4d:b9:6a:86:13:48:3a:5c:22:6e:e3:52:5e:7f:83:3e:0d:
         94:17:01:cc:66:f4:f9:d1:51:c4:4b:b4:62:30:d2:e5:76:b2:
         4f:10:67:6e:65:ae:69:c7:db:57:2d:ec:08:c5:40:16:ce:fd:
         26:f7:13:c8:c9:53:2c:ef:2b:e7:b1:65:12:2e:0a:00:ea:74:
         dc:06:a2:dc:d8:d2:57:1b:57:07:63:ba:62:54:6b:ba:fd:f9:
         6b:60:cb:34:c2:b7:16:98:fe:cb:b6:bf:d6:c9:08:a2:b1:05:
         b6:6f:3d:fc:96:49:2d:37:60:85:49:64:3d:3f:79:b4:5f:09:
         76:95:29:4c:1b:64:0e:d2:74:7b:1f:de:26:50:ac:9e:27:a4:
         29:24:d9:da:64:16:32:63:78:a3:1a:09:3a:6d:97:d4:f6:0a:
         9a:c7:47:f3:89:1a:07:1f:9f:09:79:df:5b:d9:96:11:4f:6c:
         21:50:6e:8b:86:bf:98:8f:27:f5:8f:7d:f9:e4:0b:c5:bd:eb:
         7a:74:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:29 2026 by rpki-client