This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File:                     w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier:          i6vVg9x4ov/c3ykJ9SZggMOb+WxaNQcuFKx+DXWNAxY=
Subject key identifier:   19:D1:DF:BF:48:F7:35:59:FF:63:CF:22:72:27:67:10:87:1A:3D:1F
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer:       /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial:       019C4133A2B4931CA5CD57BE8A5497F1CA23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number:          01AA
Signing time:             Mon 09 Feb 2026 07:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:28 +0000
Files and hashes:         1: 6eKn3uMQuUNTMkTpT0y-3vnuj_s.roa (hash: WZXQFULC/IwGTQvmcWdtzTS7QYlU+Fpmd+6cLbWavvM=)
                          2: iLmwMggqjEBnQ1t5qTCIk0-Ops0.roa (hash: f7hSU9eQL9QO+9vWgF04GRMwKj8b5Zh3CLrT+16gfVU=)
                          3: ualECGFgELK8Ub0WIu1zKOrzdLw.roa (hash: m+NzeDbR9O7unWoYNRmh2DUqdEvHCo2FWMfMNRs15bs=)
                          4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: JdDy1zaliZQwTh9RmvMNQZ9zfUw1drjvRnSfjg/7dZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:a2:b4:93:1c:a5:cd:57:be:8a:54:97:f1:ca:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
        Validity
            Not Before: Feb  9 07:00:28 2026 GMT
            Not After : Feb 10 07:00:28 2026 GMT
        Subject: CN=19d1dfbf48f73559ff63cf2272276710871a3d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:52:ee:16:56:70:b8:de:e6:f4:ae:a2:6d:
                    6d:47:87:6c:98:b4:44:40:28:8b:7b:fb:03:57:bb:
                    ac:d2:05:08:a7:c4:e3:8d:a8:9f:d3:b0:f8:f7:f1:
                    16:de:3d:c5:fa:88:64:8a:3e:d3:20:e2:58:d9:83:
                    76:b8:ac:8a:d9:1f:9b:39:5d:73:ee:a2:42:d9:43:
                    c3:cb:1e:be:13:49:4f:7e:4e:0f:25:ba:2b:41:6e:
                    dd:72:fa:7d:15:e7:b1:f0:cd:5b:0f:90:bc:c5:68:
                    67:d9:24:1b:90:52:cf:39:f1:1d:cc:f2:ff:d4:84:
                    33:eb:a5:e6:9e:a7:1c:3f:54:0c:08:88:96:b2:04:
                    c8:f8:96:11:a5:e4:db:52:82:20:26:db:f6:d0:13:
                    f0:e8:2c:d8:37:3c:df:48:be:5c:4e:7f:bf:43:da:
                    bb:cc:89:e4:e3:f8:76:d5:78:b3:a5:ad:b5:88:c8:
                    65:a3:7b:ff:fa:6a:1c:44:5f:3c:76:44:53:13:02:
                    91:8e:eb:c3:a2:63:c0:60:3d:ce:0f:5e:5c:e2:f8:
                    a6:00:17:ff:57:f8:6b:a6:23:a3:ff:38:74:c0:04:
                    06:4d:90:1b:0f:dc:38:07:67:96:ab:d6:8d:8e:c7:
                    98:06:fc:70:25:21:ff:b8:c7:70:f5:63:83:82:b5:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D1:DF:BF:48:F7:35:59:FF:63:CF:22:72:27:67:10:87:1A:3D:1F
            X509v3 Authority Key Identifier:
                keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:04:58:43:4f:02:56:64:61:80:9c:28:52:ed:20:8f:75:
         4e:d9:56:a3:24:60:31:37:f0:63:49:bc:6a:2a:32:db:88:61:
         22:7e:97:1e:0a:f8:bb:06:39:1a:0e:28:05:c2:ba:89:1a:8a:
         73:e5:b0:9a:57:4a:c0:13:d3:d4:99:2b:ce:43:99:aa:9b:f1:
         b1:d9:1b:69:90:ad:10:42:32:c4:f5:30:64:b2:c6:05:7e:11:
         04:53:48:6e:b6:d3:cd:f1:49:75:31:ed:5e:e0:ae:99:58:e3:
         e5:d8:bf:b3:8c:b6:e4:a8:7d:3d:33:c4:cd:01:f1:91:87:8d:
         01:9f:e5:e5:eb:f4:1f:e5:e3:b5:1f:50:28:60:a1:64:56:bc:
         63:8a:ed:d1:69:cf:17:ae:da:00:47:18:94:54:ed:55:20:0c:
         62:cc:ad:2c:8e:a2:88:70:a8:81:8e:b8:f9:5b:37:ed:60:2a:
         e2:b4:0b:a8:d5:6a:3b:e2:6b:56:c7:02:1f:4f:82:d8:e7:f8:
         2f:7e:08:e2:80:5e:28:5c:7d:53:64:cd:46:56:de:3e:77:55:
         b6:df:b3:4f:b3:50:cb:f0:ed:8f:3d:8a:3e:2c:c4:39:e3:79:
         d6:32:57:0b:c9:17:04:e6:b7:41:1f:8a:06:86:ba:a6:98:1d:
         c7:5c:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:02 2026 by rpki-client