This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
File:                     wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json)
Hash identifier:          fC4IVjikktDEGVmQdMwJwiy7QjgZrvA2UJ2RiqoCccE=
Subject key identifier:   83:AB:C2:9A:AF:03:EE:7C:D5:22:E1:DC:86:23:E5:0A:DE:E1:0E:D5
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Certificate issuer:       /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial:       019C43FE94ABC190571D003BF14AD8F15095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
Manifest number:          089E
Signing time:             Mon 09 Feb 2026 20:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:23 +0000
Files and hashes:         1: R84wROoCeZRCPbUs7Ib0UyTuxC4.roa (hash: Q6YMEZButrOoIhObHP4dYcfrrzpuagES1oIBIzupcEU=)
                          2: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: IjW5g0zg45u7UkK+D93roDbNGPbI74lwACAbofESLBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:94:ab:c1:90:57:1d:00:3b:f1:4a:d8:f1:50:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Validity
            Not Before: Feb  9 20:01:23 2026 GMT
            Not After : Feb 10 20:01:23 2026 GMT
        Subject: CN=83abc29aaf03ee7cd522e1dc8623e50adee10ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:31:7f:d3:9c:26:73:66:e8:36:d9:1d:15:
                    f1:60:a2:f4:29:82:81:79:df:f9:c0:cf:e8:07:0d:
                    b1:7a:87:e8:bf:94:f1:f7:ee:ed:8e:d2:d4:6c:c4:
                    27:24:2f:05:64:c0:df:d8:58:da:7e:72:ab:cf:c6:
                    3e:2e:e9:46:a5:db:65:d0:e9:73:e1:09:bc:f5:98:
                    17:d4:cb:cf:24:ee:35:d1:c6:a0:72:04:93:b3:55:
                    87:16:4a:23:60:ba:04:02:6f:8a:87:60:11:b9:e4:
                    54:93:56:1e:33:0a:70:b1:7e:f4:46:ce:9d:09:10:
                    92:05:01:bb:64:4c:2e:d8:b7:46:f4:5d:bb:e4:45:
                    98:3c:3a:6f:c1:a3:65:02:7a:29:6e:70:ce:be:3b:
                    e6:b2:4c:ae:4e:50:36:ce:87:75:f5:dc:0c:24:15:
                    af:87:33:01:6b:9b:86:bd:c3:28:47:f2:2e:56:7f:
                    07:e8:23:56:e7:e6:f1:b5:fa:1a:96:34:08:29:f9:
                    c1:fc:75:1c:34:2e:c4:2a:59:42:02:91:8e:c3:8a:
                    d9:54:1f:9f:49:28:0a:05:8d:6c:93:b5:d1:19:ab:
                    fb:44:bc:37:af:5b:b7:90:62:4e:1e:94:02:c2:cd:
                    76:74:44:d5:32:3d:ef:4e:72:7d:42:70:c1:44:a4:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AB:C2:9A:AF:03:EE:7C:D5:22:E1:DC:86:23:E5:0A:DE:E1:0E:D5
            X509v3 Authority Key Identifier:
                keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:8d:8d:97:85:57:c7:1f:6c:37:32:37:05:0a:55:4c:fc:
         7f:26:ef:b8:01:11:2e:95:26:a5:e4:eb:1e:74:11:b1:34:57:
         f8:96:fd:62:e5:5c:c0:a5:9a:6c:6a:3d:e0:75:f2:d6:fc:7a:
         9c:85:2d:44:ec:d7:7a:25:c5:56:73:6f:04:86:e9:f7:f9:09:
         b1:7f:23:fe:d6:45:4d:dd:06:91:41:d7:19:08:38:51:7e:6a:
         ca:f4:2a:11:98:08:5d:e1:19:1d:13:bc:38:d3:79:60:d7:eb:
         3d:ec:6d:42:f4:79:c2:62:3c:a4:83:4b:8f:3a:aa:6f:3a:f3:
         e2:60:b5:b5:7e:7f:76:8a:13:41:7c:a2:05:e7:80:85:15:eb:
         68:30:58:8f:a5:20:25:8c:e6:99:55:3d:5a:b4:42:70:f3:d8:
         5b:e0:cb:7f:e5:bd:ed:68:00:bf:e9:b8:91:e0:d7:af:9b:02:
         22:3b:83:26:e0:8d:cd:df:15:c7:cc:7b:f1:70:e4:56:70:f9:
         02:31:53:27:18:5f:53:6d:e8:76:fd:28:e1:d3:c9:2d:48:b9:
         ea:01:b1:68:e1:f6:bb:68:52:f9:c4:e4:8b:81:5f:ae:b4:bc:
         83:07:5a:4c:75:83:46:dd:16:b0:cf:f3:6c:57:05:31:2f:85:
         56:21:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:08 2026 by rpki-client