This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
File:                     pWGJNurjnydAQKDTMnz4gQLITG8.mft (raw, json)
Hash identifier:          7bCyAXUngO3Po86+ilod9fWO78DvraH/ovuiue612hM=
Subject key identifier:   A6:C6:A2:7A:62:50:43:2F:CF:8B:04:0A:64:AB:00:A1:A1:84:EC:17
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Certificate issuer:       /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial:       019C41D83A322319FDC632C1FD88B84B382C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
Manifest number:          27
Signing time:             Mon 09 Feb 2026 10:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:15 +0000
Files and hashes:         1: pWGJNurjnydAQKDTMnz4gQLITG8.crl (hash: 8rwkDIUvKF4o7iTQnpTSf2Razv1S0HXoEdi0Bexxw3U=)
                          2: vc4rQV1btws3GoUjJ72MXPBLjsA.roa (hash: vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:3a:32:23:19:fd:c6:32:c1:fd:88:b8:4b:38:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
        Validity
            Not Before: Feb  9 10:00:15 2026 GMT
            Not After : Feb 10 10:00:15 2026 GMT
        Subject: CN=a6c6a27a6250432fcf8b040a64ab00a1a184ec17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:5f:2a:b6:d8:d6:69:a3:cb:7e:83:96:f1:
                    6b:8d:ec:cb:61:ab:89:7c:b3:4c:1f:fb:f4:2c:4f:
                    d8:f8:98:95:be:86:77:72:4c:32:20:f5:92:f9:1f:
                    d7:a3:c0:67:5e:cd:fa:f7:96:bc:99:71:3c:bb:05:
                    33:10:05:29:e2:6d:41:28:64:89:29:5f:fc:47:56:
                    f0:69:e8:3b:a2:44:d0:44:70:7f:f5:54:d6:9f:48:
                    fc:f4:84:de:d3:8c:a2:96:05:0f:4f:41:20:fa:ee:
                    c2:ad:5a:a6:e4:3a:56:cf:f7:ab:5a:c6:59:52:9e:
                    5c:df:99:27:52:e0:0c:77:a6:6a:93:ca:ed:a3:f6:
                    5a:43:c1:5d:3a:80:01:48:ee:cd:d7:e7:5a:dd:9d:
                    45:21:13:56:98:21:2a:41:71:86:2c:87:fe:8a:f1:
                    3b:72:e8:25:7d:3d:a0:b0:f1:92:2f:d1:7b:2c:22:
                    9f:75:a1:c6:ee:8d:6a:07:5d:a1:73:81:21:20:8c:
                    44:98:d5:33:0d:09:3e:e3:81:4b:00:7c:48:f7:aa:
                    76:76:a6:25:b9:d4:d0:b2:20:7f:90:bd:dc:e8:b0:
                    de:dc:2d:2c:99:f9:2d:f6:e8:91:c8:ee:19:26:a3:
                    56:f4:b7:56:13:61:33:f1:2f:52:61:07:93:09:f2:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C6:A2:7A:62:50:43:2F:CF:8B:04:0A:64:AB:00:A1:A1:84:EC:17
            X509v3 Authority Key Identifier:
                keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:bd:99:10:d3:c4:e8:e5:82:ce:d5:0c:d3:f0:2c:be:0e:
         72:97:39:4b:a4:50:87:0d:ce:db:c5:e0:6b:ec:15:38:44:1e:
         89:7e:09:69:80:35:e4:6a:93:56:3c:2d:68:a3:e1:78:2b:99:
         de:83:d9:6a:55:04:0e:38:46:f1:ae:de:90:2b:e9:13:c6:4b:
         68:3c:76:b6:3a:ec:da:4e:dc:e1:c9:89:eb:0a:ef:a2:d8:07:
         4c:4e:3f:ea:c5:e6:a5:f7:b5:9a:9e:2a:10:1a:4f:bd:18:95:
         f5:60:6f:a5:06:5d:24:c7:7d:3f:57:28:da:fa:38:60:50:f2:
         f4:07:88:7c:53:b9:c1:e3:0a:44:cb:5c:01:e0:56:2f:11:0f:
         e6:54:50:56:74:9f:59:b2:c2:a4:3c:1c:c3:2b:89:03:11:d4:
         68:a2:ef:a7:88:d6:fe:6a:f0:8d:9e:60:b0:e3:21:4f:62:a6:
         79:c3:12:a4:12:83:76:44:0d:c7:d0:1c:56:ea:c5:f9:ae:a6:
         89:d8:2e:ea:d2:b4:f4:65:98:23:72:79:8d:5c:4d:3c:93:b3:
         f6:3c:51:9e:53:b6:91:7d:0b:a1:d7:60:c8:88:77:c4:de:18:
         81:ba:03:a3:e4:88:61:71:2f:05:29:fd:7f:b3:36:f3:09:9d:
         f7:64:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:34 2026 by rpki-client