This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
File:                     wVxXxJbEN46ATCYTOYB11U74qWI.mft (raw, json)
Hash identifier:          CNKXvs+tqYRBC4s4YQH9QgcVLR6/I8O3yh296oAqsCY=
Subject key identifier:   ED:CD:EB:23:C0:19:EC:7C:4F:90:BC:0B:B2:89:06:BA:A5:67:A4:C3
Authority key identifier: C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
Certificate issuer:       /CN=c15c57c496c4378e804c2613398075d54ef8a962
Certificate serial:       019C4246564AC0CFB6369AD90A615716412A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
Manifest number:          02E2
Signing time:             Mon 09 Feb 2026 12:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:31 +0000
Files and hashes:         1: R2DSGkXp2tD1CPLW3SJgACnZ-U4.roa (hash: JcjqTJ6u4BkDf1c4CSNYFXzWmDeRFEeHd+21Baxb2HU=)
                          2: wVxXxJbEN46ATCYTOYB11U74qWI.crl (hash: Gywz7fAt3DnNMkQ4NlbEOp22mT+jvN1wT90mCGOPIVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:56:4a:c0:cf:b6:36:9a:d9:0a:61:57:16:41:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15c57c496c4378e804c2613398075d54ef8a962
        Validity
            Not Before: Feb  9 12:00:31 2026 GMT
            Not After : Feb 10 12:00:31 2026 GMT
        Subject: CN=edcdeb23c019ec7c4f90bc0bb28906baa567a4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:77:27:78:32:73:f7:5c:af:6d:89:83:75:
                    43:3a:98:fd:3e:4d:1c:37:f5:1f:a2:57:c2:ce:c2:
                    9c:61:ab:f3:6b:46:eb:02:1e:47:99:df:cd:7b:f9:
                    46:74:f6:30:8f:bb:7c:9c:b3:6d:dc:e7:aa:7b:3d:
                    8b:55:ea:9d:cf:99:46:7e:31:0e:18:a4:db:99:12:
                    3c:d7:8a:db:5c:7b:0a:0c:b1:b4:1d:ca:ba:ac:b8:
                    4c:d1:ee:8e:3b:02:9b:59:d9:9e:7f:bf:13:db:45:
                    7c:83:39:d7:68:d0:6c:7b:d9:05:91:19:34:13:eb:
                    ca:89:9b:9c:97:44:38:91:20:4d:ca:da:2a:15:cc:
                    a8:b1:25:be:9a:db:a5:ea:61:99:2b:ed:0a:4f:f0:
                    96:7c:d9:e3:da:4c:34:17:4c:36:cd:84:31:7c:2b:
                    31:07:85:c8:57:c7:1e:11:2c:94:35:10:15:cc:81:
                    ee:5c:c0:6e:61:7d:e7:f3:a1:cd:4d:39:6f:9a:f8:
                    64:21:78:66:51:36:b0:05:c7:9b:ae:4d:35:a9:f3:
                    d3:ad:39:ef:fb:85:ee:7a:8a:b0:e1:e6:fc:50:66:
                    10:4f:85:ed:dd:ae:45:54:1b:b1:99:6a:ea:ca:f5:
                    ef:b3:95:25:25:f6:2b:d1:df:2a:fc:89:69:d6:a0:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CD:EB:23:C0:19:EC:7C:4F:90:BC:0B:B2:89:06:BA:A5:67:A4:C3
            X509v3 Authority Key Identifier:
                keyid:C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:13:e0:96:cc:ca:0f:d2:40:19:ee:1f:40:ab:d1:8b:23:
         e8:ba:cc:c0:1f:a7:01:b9:6a:15:71:6e:68:88:d3:0f:cc:2f:
         d7:9a:57:c7:a4:3b:10:18:07:51:b1:7d:b0:83:dc:d5:8e:ee:
         7c:80:3b:ee:52:7d:99:a2:46:51:88:e1:78:7b:f9:29:44:c6:
         7e:6f:01:7f:25:6d:86:9c:83:05:87:e9:ad:54:77:4a:7c:e2:
         b3:f7:8e:23:e9:33:8a:a8:21:77:d5:8e:ad:30:78:d6:47:2c:
         32:b8:d3:a6:67:0d:07:28:98:36:dc:5e:3d:f9:20:2b:95:59:
         ca:4a:1a:18:4e:06:58:10:e6:fc:40:7e:43:19:e4:d8:bc:f2:
         31:22:2e:86:05:ea:58:99:a8:7a:91:6c:8e:8c:27:27:b3:06:
         c5:86:e1:17:aa:2a:72:25:96:e3:a2:58:53:5c:a7:ca:2a:fb:
         e6:7f:00:26:06:83:2e:26:87:a1:62:00:84:2b:e1:eb:4f:3e:
         ac:e7:06:76:9b:d3:4e:8c:33:6e:94:64:87:50:99:99:13:61:
         37:0d:e9:7b:2e:32:18:16:c1:10:1c:fd:80:6f:40:9c:a7:8d:
         c9:e7:d0:b7:d6:de:a2:4e:eb:13:5b:98:a6:8b:02:53:10:70:
         6e:14:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:03 2026 by rpki-client