This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File:                     WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier:          ocLYO07IA1UEorIvtd2MfqR8SJJnqdfq/HABzj7gRYQ=
Subject key identifier:   7A:DF:D3:5B:12:D9:25:03:6D:BA:03:21:3E:9B:73:1A:63:B2:4F:27
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer:       /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial:       019C4390853F1D969AE5464C41D486299B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:10 +0000
Files and hashes:         1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: gveARJhWSoqTHKB0mfFcLZo90H1tTXDZbrzhdElWrHY=)
                          2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:85:3f:1d:96:9a:e5:46:4c:41:d4:86:29:9b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
        Validity
            Not Before: Feb  9 18:01:10 2026 GMT
            Not After : Feb 10 18:01:10 2026 GMT
        Subject: CN=7adfd35b12d925036dba03213e9b731a63b24f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:2e:b2:5f:32:e6:36:b7:db:88:52:85:bf:
                    4a:e2:47:22:f6:15:a2:4b:94:21:f6:11:5b:14:d9:
                    27:dd:30:38:83:23:04:3c:1d:a2:51:dc:ae:34:2e:
                    5b:e1:13:61:98:1b:a0:70:86:4e:9d:70:d0:34:a8:
                    f4:ac:0e:0d:aa:e1:e1:87:d7:00:19:ba:b9:51:96:
                    c4:71:85:87:b2:f3:93:3b:a8:23:ad:5e:59:73:b6:
                    f0:be:15:cb:86:a4:2b:6f:03:4d:34:c6:5a:eb:f2:
                    a9:f4:18:3f:80:96:5b:69:a7:24:16:ef:f2:1d:e5:
                    06:eb:47:9d:69:0a:19:3c:9e:15:5f:7d:2a:7d:b3:
                    d1:4b:92:52:50:97:09:a6:f2:b5:dc:c5:f9:80:01:
                    0c:ad:e6:02:f8:a5:4b:f3:75:a7:35:ee:c4:1b:ea:
                    7b:a2:89:c2:33:fd:6d:b1:34:dd:90:be:d0:a6:d6:
                    5b:fd:99:0b:aa:52:7e:09:78:96:78:13:1f:c9:91:
                    ef:7a:2f:c0:9f:5f:14:cc:fd:fc:bd:4a:6c:ec:6f:
                    d7:14:95:6e:2f:ec:60:5e:9b:2d:78:dc:bc:6b:c9:
                    66:e1:60:80:e7:c5:4b:14:78:ac:e2:7e:66:d5:84:
                    79:dd:9b:c6:b1:ca:0e:e8:58:a6:7f:9f:36:b5:47:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:D3:5B:12:D9:25:03:6D:BA:03:21:3E:9B:73:1A:63:B2:4F:27
            X509v3 Authority Key Identifier:
                keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:45:dc:14:f8:e5:3f:7a:49:c9:80:88:29:93:79:dc:9c:
         d6:5f:ab:51:9d:23:20:15:f8:22:d0:ca:61:9c:15:af:67:5e:
         3a:76:4b:aa:f4:8f:5b:17:aa:2e:56:5f:e4:f2:77:6a:71:e4:
         a0:04:5f:4f:c3:dc:5f:ac:30:95:a8:77:f4:cd:81:d7:cb:bf:
         50:84:c1:37:c9:5e:aa:51:0a:96:49:d2:b7:ac:e2:75:26:13:
         76:5f:31:c9:d5:01:3e:cc:7c:9a:78:14:9d:41:a9:f8:cd:70:
         66:79:a9:ff:5a:25:41:fb:8b:ca:93:da:f2:c5:fe:d5:fd:f4:
         64:83:73:2c:e3:54:f2:e1:5f:61:d2:df:e3:eb:a2:e8:89:6d:
         af:c6:21:24:bb:c0:39:5f:82:f1:5f:1c:c8:7b:bd:19:38:f4:
         06:c6:03:3c:e6:d5:7c:0f:8b:7a:ea:01:d3:08:0b:18:b7:20:
         32:e1:2d:82:5c:f0:ad:4f:2e:35:c4:b1:b2:15:e5:bb:b4:af:
         51:6d:7b:4d:ee:9e:ed:69:8c:58:06:b3:24:27:f7:dc:7e:be:
         a7:fb:99:80:70:cf:d7:b4:72:43:1f:4f:b0:28:31:0b:ed:5f:
         f9:0f:5b:f6:67:cc:81:25:f8:fd:dc:af:ff:cf:c7:e4:0e:82:
         41:38:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:25 2026 by rpki-client