This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File:                     cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier:          80WEgi6bllqaMfzv9CNZw+aV6qlRgvXRp7CKi+NobnY=
Subject key identifier:   D3:33:CD:BB:CA:33:3B:AA:85:07:D1:E4:FE:E9:1F:A5:89:43:46:7B
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer:       /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial:       019C43FE48B67504879D340FC77076ABED4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number:          04AB
Signing time:             Mon 09 Feb 2026 20:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:04 +0000
Files and hashes:         1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: tEUt1sbC7jxxvmvWEDVec6210pLuVQU1PzswahshpP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:48:b6:75:04:87:9d:34:0f:c7:70:76:ab:ed:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
        Validity
            Not Before: Feb  9 20:01:04 2026 GMT
            Not After : Feb 10 20:01:04 2026 GMT
        Subject: CN=d333cdbbca333baa8507d1e4fee91fa58943467b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:c8:d9:55:02:0f:11:f8:ab:14:e4:94:ac:
                    db:3c:c9:16:2e:25:aa:9b:3a:5e:85:6a:bf:70:de:
                    5d:f2:31:12:02:f5:66:d3:2c:6b:2e:41:2e:5e:c6:
                    bd:0e:11:87:14:85:d4:0e:00:bd:2c:09:6a:d1:e0:
                    b6:76:3b:2c:1b:85:e5:20:97:67:ed:76:44:65:ed:
                    b9:01:fd:36:38:2c:bf:7d:57:b2:7f:28:eb:e3:da:
                    5a:1e:a2:11:73:16:7c:fa:22:d3:15:db:7f:6b:e3:
                    58:ed:9c:0a:86:41:66:c2:41:7b:d2:68:73:12:22:
                    31:4b:0e:02:b5:c5:83:7a:11:7c:55:8b:4a:8a:88:
                    eb:20:12:6b:50:b2:d5:d2:3a:04:e0:19:be:a2:3f:
                    8c:03:16:61:f9:96:8c:ef:7c:73:f6:49:6e:30:6e:
                    61:97:d1:ed:1e:a7:6c:ce:98:87:30:11:83:eb:11:
                    ac:34:5b:ea:3a:57:68:98:6c:0a:05:dc:9d:f0:d4:
                    dc:a9:7e:95:c8:f2:f6:70:f5:98:b4:12:bd:a1:de:
                    a2:36:2b:d3:fa:34:3d:f3:75:d8:37:60:1f:ca:88:
                    bc:d0:e4:3d:1a:d8:c3:47:22:c5:f8:94:84:8e:c6:
                    7a:81:9c:7b:9a:0f:c0:83:7a:2e:ba:e6:b3:25:f6:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:33:CD:BB:CA:33:3B:AA:85:07:D1:E4:FE:E9:1F:A5:89:43:46:7B
            X509v3 Authority Key Identifier:
                keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:66:dd:0b:1e:ee:bb:a9:db:3c:77:5a:61:1a:30:01:18:
         a1:c2:b0:f5:f3:24:8d:07:21:d3:66:d5:98:a8:9f:32:08:87:
         8e:9c:ec:a1:c9:14:b8:e1:00:14:c7:28:61:5e:6a:f7:67:12:
         2d:72:1e:0b:5a:37:68:f3:ce:b3:3a:53:5b:8e:d7:a0:77:8b:
         5b:1b:2a:02:2a:ae:6d:fb:a4:7f:59:bb:bc:9e:4b:28:aa:78:
         cf:18:cf:53:8d:ef:95:77:d5:52:59:73:d2:81:65:9a:17:3e:
         9d:58:a3:63:39:45:b9:3d:2c:b3:2d:61:69:46:5d:12:51:8a:
         7d:c5:e9:86:03:c7:b7:ff:11:60:8c:38:80:fa:1b:1a:42:85:
         31:01:7b:b3:a1:ee:4d:67:50:9b:b0:ce:b3:7c:1a:b6:a0:fa:
         21:bd:21:32:1e:60:3e:85:29:8e:80:04:7a:95:71:97:1a:61:
         19:1a:15:b2:5b:0e:f1:44:cf:d7:1a:27:5b:07:1a:9a:84:14:
         6b:8f:d2:11:f4:42:bc:0e:02:05:03:3e:97:47:ab:89:9e:32:
         d0:ca:aa:f2:ef:10:f6:d8:92:d7:46:dd:67:41:3f:aa:a4:0e:
         31:28:94:05:f4:05:84:83:1e:e3:cd:53:50:9c:95:69:7a:21:
         a3:d7:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:09 2026 by rpki-client