This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File:                     w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier:          XC2W1nRFFsr02yLjcoxj1TdJKFG+49mCiz2W8TqND5g=
Subject key identifier:   E7:43:F0:10:32:F1:9B:34:85:16:87:7C:B4:9F:3B:AE:50:89:4B:32
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer:       /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial:       019C44D9A4B9C25D4C760C5F4119A99135AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number:          0C03
Signing time:             Tue 10 Feb 2026 00:00:39 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:39 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:39 +0000
Files and hashes:         1: dNE3IpmpgpJoxxb7fF4vedmnBj8.roa (hash: qOFeCi7ARkIaRrB0ciIOcij/4wVRPx8UsUEgfrsP7Nw=)
                          2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: eHGyhSHqwy9lpX148EBINkbn321mnLRDNrVy9d0vmSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:a4:b9:c2:5d:4c:76:0c:5f:41:19:a9:91:35:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
        Validity
            Not Before: Feb 10 00:00:39 2026 GMT
            Not After : Feb 11 00:00:39 2026 GMT
        Subject: CN=e743f01032f19b348516877cb49f3bae50894b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:e8:82:68:6e:97:1e:51:d6:b9:4d:fd:47:
                    c5:2a:f0:e9:c8:0b:80:94:3b:62:d8:66:8a:87:1f:
                    86:90:51:f2:c8:cb:d2:4a:8c:cf:0f:36:13:58:65:
                    ee:3c:99:12:bc:b2:c4:53:5b:53:2f:aa:d4:30:73:
                    30:d3:36:8f:66:be:80:b5:5b:c6:8d:ff:b1:f3:c5:
                    a2:33:79:8b:d1:e4:ef:3a:d9:e7:d8:bc:8e:9a:18:
                    12:96:08:8e:9c:d6:b0:37:6d:f6:bc:84:ab:82:75:
                    f0:2a:dc:a8:f8:7f:32:cd:3f:e9:42:3d:34:15:d1:
                    7b:c5:5d:97:27:26:e2:ca:73:fc:28:23:a5:e4:31:
                    9b:a3:f7:22:f9:89:b7:39:4e:56:e9:b6:16:d6:8e:
                    f9:7a:46:93:66:48:46:dc:cb:53:e8:33:d9:ff:b5:
                    af:ac:22:35:03:5a:87:25:1d:f7:e3:a7:48:c7:90:
                    4d:7c:95:1d:da:25:d8:5a:1a:e0:ca:82:99:31:95:
                    6c:cb:2e:4f:19:66:e4:a7:df:01:ba:d5:d6:88:f9:
                    e4:69:82:d4:17:27:de:a9:55:b8:1f:e1:bd:ee:12:
                    39:90:63:5c:26:09:3a:86:4b:44:61:22:fa:8d:30:
                    04:3d:64:ce:83:fd:e9:cb:98:e5:22:65:c9:93:23:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:43:F0:10:32:F1:9B:34:85:16:87:7C:B4:9F:3B:AE:50:89:4B:32
            X509v3 Authority Key Identifier:
                keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:2a:fc:ce:4c:50:d0:91:76:40:07:58:0b:e0:39:5e:98:
         d1:93:00:e0:fd:a4:53:a7:07:fc:79:d2:d0:3e:ea:a6:9c:18:
         84:d1:a7:73:5d:72:a3:3c:9c:f9:e4:9b:17:56:4b:57:aa:76:
         65:43:2f:25:91:90:bf:79:29:ed:b1:25:a6:ea:09:bd:8f:be:
         54:cf:95:97:86:7d:54:d3:db:d5:14:be:6f:34:50:bf:51:57:
         d3:ea:c8:af:7f:28:8a:6a:b5:3a:2f:ec:de:fb:36:1c:c8:f3:
         aa:bc:00:9b:f1:af:43:aa:54:70:1f:70:b6:c0:08:34:1d:05:
         b0:c3:3c:d8:a0:27:bf:80:f4:58:f4:a4:d8:af:ed:98:12:35:
         18:2b:36:d7:11:35:40:6a:10:a1:f9:6f:52:9a:c3:57:0e:a5:
         5f:15:0f:96:5d:80:12:67:c2:3c:5d:9c:53:97:4c:38:8f:86:
         fd:17:61:f7:6a:49:a1:ab:d6:14:c2:eb:c3:e9:85:db:ef:00:
         b8:45:f9:ae:97:c6:c0:e3:01:99:ca:da:4c:d8:f1:7e:aa:33:
         f7:8e:5b:28:91:e2:c9:75:b1:2c:82:42:16:d7:86:be:8d:64:
         b3:ad:24:f3:a0:95:69:c3:ab:83:08:93:8a:e4:29:18:9a:c2:
         c4:70:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:18:48 2026 by rpki-client