This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
File:                     w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json)
Hash identifier:          rysWNBRpkVPC/3zWfWeyEN8IpoaMU3lveRMH4+ISLBg=
Subject key identifier:   30:E2:24:5E:BC:F6:64:6E:1A:AE:BD:F9:EE:85:BD:1F:99:2C:FB:48
Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
Certificate issuer:       /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
Certificate serial:       019C43223A26EC3617DA7DD4176CB1171356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
Manifest number:          02C4
Signing time:             Mon 09 Feb 2026 16:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:42 +0000
Files and hashes:         1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: HiXhH7NEDp0jY3QTSmvQSNx3P04ZW65sWOQTYF1PPmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:3a:26:ec:36:17:da:7d:d4:17:6c:b1:17:13:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
        Validity
            Not Before: Feb  9 16:00:42 2026 GMT
            Not After : Feb 10 16:00:42 2026 GMT
        Subject: CN=30e2245ebcf6646e1aaebdf9ee85bd1f992cfb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:66:ba:8e:8e:81:69:6a:99:fc:4b:e0:0e:
                    f1:04:63:e9:a4:b1:61:da:76:b0:1b:23:a6:a5:46:
                    eb:a6:0a:33:21:b6:ee:cb:19:7d:d0:50:a9:96:67:
                    0d:e3:b8:43:b1:82:d8:7a:47:5f:a4:0c:40:c6:2f:
                    f8:a1:39:18:7c:b8:d2:87:ac:dc:e8:c4:db:ec:e4:
                    8d:0e:f5:16:9e:33:1e:7f:3b:01:ec:1a:d8:73:dd:
                    1a:c8:8c:c7:7d:e1:27:ed:d2:19:39:0f:ce:13:a2:
                    46:ce:77:1a:c0:ae:0c:ae:f9:82:4b:41:9f:65:36:
                    34:6c:0a:0c:34:86:01:31:44:dc:11:c6:20:e4:a3:
                    57:67:b7:36:32:9e:b4:56:fe:6b:57:ce:5e:23:b4:
                    2d:c6:55:b6:d2:80:b7:9e:b4:b6:68:ae:a1:7c:4e:
                    fd:91:43:cb:15:6f:b2:22:a8:18:90:dd:ff:58:be:
                    c0:d6:75:8c:3d:7f:85:8f:f3:be:20:16:d4:34:06:
                    78:b9:2d:28:56:f4:e7:1d:d9:17:41:74:fe:98:60:
                    6e:d6:8b:9a:01:4a:f1:9d:f6:ea:25:79:67:38:0d:
                    a5:af:71:21:8f:d0:f5:d2:2a:67:5a:35:0d:59:93:
                    3a:b2:b5:7b:90:6d:64:9f:a9:46:f4:41:7e:c9:54:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:24:5E:BC:F6:64:6E:1A:AE:BD:F9:EE:85:BD:1F:99:2C:FB:48
            X509v3 Authority Key Identifier:
                keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7c:61:ba:b9:bd:6b:21:e0:2e:e9:fd:0a:29:a3:a7:b1:f7:
         54:dd:e0:1f:a5:58:e7:9c:d5:e0:9a:dd:c6:cc:a9:01:59:ee:
         1a:91:c1:1f:d4:04:c6:68:f2:67:7c:18:0a:38:c4:e2:91:4e:
         9b:ee:cf:f1:3d:a2:f5:df:ee:d6:28:53:40:d5:78:23:cb:b5:
         56:e6:f5:76:5f:e7:aa:6e:98:a8:d9:55:68:af:f9:ce:d8:33:
         b5:10:47:91:52:b6:48:63:78:af:3e:67:3b:70:5e:0f:c8:2e:
         12:bb:d6:96:b3:8c:f9:bc:d3:a1:3e:89:5e:c9:61:ec:4b:94:
         fd:aa:db:69:11:6e:ff:13:08:2b:41:bf:78:12:6e:2b:cc:37:
         de:d0:d9:e3:cb:15:8a:02:03:9c:48:1c:15:8d:c8:0b:9e:f0:
         1b:d0:92:2e:4d:38:77:f1:a6:8d:d7:54:51:22:7c:c6:96:68:
         07:75:be:f7:bf:64:c5:c0:a5:ac:af:b6:e1:ad:84:b0:67:fb:
         1d:0e:9a:cb:d4:72:6d:1c:cb:6d:d2:8f:78:ed:45:ae:f0:04:
         bf:d1:10:0a:62:1b:07:27:6c:08:6a:a0:44:97:c4:52:2e:6a:
         3a:32:74:31:ab:ce:89:aa:a6:68:a1:e5:6b:3a:7c:fc:07:aa:
         a2:b5:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:52 2026 by rpki-client