This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          dT/DbnVMIFxmg8yLHlDNSD3ChjnKa2o3TbJZ1fl5fZY=
Subject key identifier:   8C:A5:24:26:D4:A5:A7:EB:6A:E2:59:4F:7A:86:6E:B9:4F:67:84:31
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       019C421037335E0729E66CFC1E8C3E1725A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          1008
Signing time:             Mon 09 Feb 2026 11:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:24 +0000
Files and hashes:         1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: srheVWf4AjE4U6BLQ+q/CELLVkDYZPhxHLt3RthOsj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:37:33:5e:07:29:e6:6c:fc:1e:8c:3e:17:25:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Feb  9 11:01:24 2026 GMT
            Not After : Feb 10 11:01:24 2026 GMT
        Subject: CN=8ca52426d4a5a7eb6ae2594f7a866eb94f678431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:e1:ff:b3:5c:d2:88:6b:a8:f5:a6:4b:d6:
                    8a:71:e2:cf:39:24:41:87:40:f2:53:8d:78:d8:ff:
                    e8:58:f7:11:e7:e7:84:78:33:97:64:95:0c:eb:5f:
                    0c:d6:7a:a8:7f:6e:18:34:93:64:d4:6f:8e:52:98:
                    5c:e0:33:4a:eb:1c:a0:e4:aa:e8:f7:3d:4b:8c:5d:
                    42:54:3e:cf:dc:93:aa:60:af:96:bc:ec:08:e9:51:
                    a1:01:00:3d:a7:38:9d:66:e6:3b:6c:46:c6:a1:5e:
                    49:7f:2c:61:ed:39:4b:27:36:e4:a7:60:68:3b:c8:
                    3a:a8:dd:bc:2f:6e:c2:d8:de:56:40:11:4e:9a:e8:
                    b1:28:a3:cf:18:c2:5c:78:63:96:2f:e0:a3:41:29:
                    72:0a:48:14:e0:44:b7:21:79:5e:48:76:7b:0b:3c:
                    ac:83:ef:fc:0d:67:6e:82:0c:b7:7f:e7:f1:17:ce:
                    74:06:85:a2:c1:e7:e3:86:6a:eb:1a:f7:63:41:77:
                    75:b1:c5:37:df:56:2f:fc:9c:c6:4d:25:bb:b3:28:
                    a0:f0:94:6e:61:03:49:d9:7c:97:a8:4c:48:29:2c:
                    34:c4:52:b0:f4:1b:77:af:bd:c0:60:6f:94:b2:5c:
                    f2:98:89:b6:77:eb:76:f0:70:c5:52:95:a2:bd:38:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A5:24:26:D4:A5:A7:EB:6A:E2:59:4F:7A:86:6E:B9:4F:67:84:31
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:71:70:63:0e:a0:c5:45:fc:c0:ad:b1:ba:2f:1d:15:83:8c:
         14:51:d8:d2:da:c9:9a:f0:67:f9:d3:96:ee:05:bd:f0:9d:b8:
         b7:55:fd:67:d5:b4:76:64:32:9c:fc:a6:12:21:08:50:79:19:
         c1:dd:a6:c2:ef:45:78:03:1a:9c:d8:a4:40:2f:24:d5:6b:6d:
         c2:17:3a:08:5e:4f:93:ac:1c:a6:da:d6:b3:0a:0e:11:54:92:
         d2:5e:94:12:0e:7b:13:96:92:ed:8a:5a:bb:22:5e:61:7b:79:
         3a:1b:89:bb:e9:d6:8c:2f:f4:16:50:c7:c4:ee:8b:64:f2:88:
         d4:ab:38:9d:85:cb:bd:03:32:63:68:b5:86:cb:4a:7f:f0:18:
         6d:01:32:d3:4d:1f:d3:d0:08:2b:1e:d5:0d:b3:48:85:a6:70:
         93:41:28:4a:87:47:93:d4:3e:25:4d:9a:5c:8b:33:31:3c:87:
         bd:e0:58:b4:eb:fa:5d:06:30:6e:d5:cc:05:09:20:72:81:c5:
         32:ba:99:d1:fb:85:16:a1:6c:32:e3:99:f7:ed:d6:7a:b9:ed:
         96:ea:55:db:0a:53:df:2d:8d:34:b3:78:72:5f:e4:31:be:7f:
         17:7f:f1:66:18:5f:62:e7:b8:86:1c:fc:7e:02:26:e6:c2:87:
         23:95:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:58 2026 by rpki-client