This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File:                     Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier:          8aVsI3sY9OU9JbRu9ohO334NlYfSbRq7Uu5f6+DjSBI=
Subject key identifier:   28:9F:A4:B0:58:2F:FE:D2:C6:EE:58:3B:4D:7F:E1:98:79:97:20:D2
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer:       /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial:       019C42EB3EF493F20BE43805CB09F25E1D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number:          0D59
Signing time:             Mon 09 Feb 2026 15:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:39 +0000
Files and hashes:         1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: +n8MmF83pwXq6C8XDM6iYqZolqP8apMENv2KF7bbX7k=)
                          2: b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa (hash: o8XoU14Iw4MJitDTGOKpTt9lHXFFyCkBas20Hr7/Z5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:3e:f4:93:f2:0b:e4:38:05:cb:09:f2:5e:1d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
        Validity
            Not Before: Feb  9 15:00:39 2026 GMT
            Not After : Feb 10 15:00:39 2026 GMT
        Subject: CN=289fa4b0582ffed2c6ee583b4d7fe198799720d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:9d:84:7a:29:0b:32:04:e4:df:50:d1:3e:
                    6b:63:6c:d2:0f:8e:c4:c5:eb:7b:4f:c0:3a:37:30:
                    60:69:92:c7:cc:8b:00:b5:dd:73:2a:1a:3d:d9:10:
                    be:c9:97:c5:81:05:11:f1:97:99:37:10:ce:97:00:
                    51:9c:1a:e8:19:53:a4:6e:27:0e:6e:cc:21:f9:5c:
                    fa:5a:30:e6:d2:51:75:17:ff:ea:a1:dc:80:d0:14:
                    e8:e5:d1:85:a9:ec:61:ec:20:16:52:fc:90:e6:66:
                    44:12:93:a8:3a:78:93:f4:95:b6:69:89:25:0c:76:
                    b8:88:ef:bf:7c:ba:fb:08:12:3d:2d:07:43:16:28:
                    c7:5c:6c:86:a7:ed:aa:34:a7:84:c9:f0:a7:9b:f8:
                    26:0e:91:56:2a:c0:41:e7:d3:51:15:3c:50:e9:d8:
                    90:2e:b5:6b:01:c5:ff:57:ba:c2:d4:36:fa:6c:d5:
                    ce:ce:8e:17:36:a6:e8:f5:25:13:41:b3:57:19:16:
                    19:30:58:16:6a:79:b0:b0:0a:a2:53:fa:60:84:68:
                    cd:55:ae:dc:96:68:0a:a9:26:15:b5:58:04:ef:a9:
                    ac:c4:e5:bd:82:c2:d2:3c:c2:a5:fc:a0:ef:da:4e:
                    3f:de:69:48:e3:f5:a9:5a:89:84:80:23:03:bd:b4:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9F:A4:B0:58:2F:FE:D2:C6:EE:58:3B:4D:7F:E1:98:79:97:20:D2
            X509v3 Authority Key Identifier:
                keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:f9:3e:dd:3e:e8:c9:38:42:cd:43:cf:4f:90:cb:c0:24:
         79:01:59:d6:fd:07:60:8b:70:d7:96:3e:e7:63:ea:0d:d7:fa:
         d9:cf:53:22:9c:e5:d0:90:c1:0c:72:b9:66:8f:05:4a:21:7d:
         5a:fd:0d:bb:04:d8:75:4e:35:50:3b:98:17:14:86:d1:c4:fe:
         f9:a5:f2:e7:35:03:fb:47:0c:f0:18:f4:8e:5b:ca:2e:e1:fe:
         61:c0:a8:c7:3c:47:23:7f:8f:75:97:63:70:48:67:18:cb:e1:
         d0:f4:51:80:96:f3:6a:f3:7e:93:23:45:58:a5:6f:84:90:ea:
         25:ae:49:39:8e:7e:6a:e7:7a:07:95:15:13:15:28:09:b1:51:
         69:2f:38:e0:70:fd:57:e2:9d:09:54:9c:01:b3:92:bb:1a:71:
         3b:42:41:83:c1:8e:a7:87:0c:da:7e:50:9b:c9:7e:f1:d5:6e:
         d0:8e:45:46:90:fc:33:e0:c9:92:e3:58:f1:fe:57:9a:4f:29:
         86:4f:43:c5:cd:62:56:63:da:09:ac:77:03:8c:08:fb:36:96:
         03:4e:17:3f:5f:3c:f9:2a:ba:f5:a5:f5:b4:a0:06:b2:c7:06:
         05:06:c2:02:07:1a:50:80:d9:7b:34:ad:88:dd:72:9d:2e:2c:
         5d:a6:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:59 2026 by rpki-client