This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File:                     ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier:          iVIVL2HN7762N/EUGMfv5IjS+HrK93c3DpNn/iw26xI=
Subject key identifier:   5E:30:F0:23:17:C2:F5:C3:C6:A9:9A:15:C5:FC:47:2F:A1:96:A9:C4
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer:       /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial:       019C44D9AB3938E55D42838100825041E24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number:          1295
Signing time:             Tue 10 Feb 2026 00:00:41 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:41 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:41 +0000
Files and hashes:         1: sdks8TCsvDa1jYkE0cZ1sXdA91U.roa (hash: 0MDGve+WYhOqia0+8JPSj/YzTSmHLemKWZ32TZAhSqQ=)
                          2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: qoReaauz8bBRDqqb2dA9doHzWABIDWvlsgOS+Zrplcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:ab:39:38:e5:5d:42:83:81:00:82:50:41:e2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
        Validity
            Not Before: Feb 10 00:00:41 2026 GMT
            Not After : Feb 11 00:00:41 2026 GMT
        Subject: CN=5e30f02317c2f5c3c6a99a15c5fc472fa196a9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:e9:39:b7:8e:bf:58:3e:b3:f0:f1:a2:ab:
                    c2:82:e9:35:e1:7f:79:22:29:40:8c:9b:48:71:39:
                    a1:c7:16:97:e6:f1:c1:47:07:76:be:1e:38:72:f1:
                    af:ae:fa:fb:00:f6:f2:55:8f:f6:89:b5:6b:d7:4c:
                    5c:87:9b:a1:84:c2:c3:cc:cd:da:ef:2b:7e:59:87:
                    c5:93:b8:ea:f2:36:92:c0:5e:6e:c6:14:79:e5:e3:
                    f9:a9:4c:92:81:9b:11:2b:49:99:94:ae:2e:80:17:
                    5f:d3:45:73:96:ba:50:79:79:3d:9e:30:e8:ec:ec:
                    dc:8f:74:b7:ff:50:ca:34:74:84:ea:ab:aa:a0:04:
                    0b:69:1e:f9:c2:0f:66:61:f1:c2:7c:49:9c:08:e8:
                    17:d1:0c:99:26:b9:ac:74:d7:b2:b4:5a:51:a2:61:
                    b7:9c:6f:e6:5c:d4:e0:fd:f7:3d:bf:99:18:5c:b8:
                    d2:20:1d:35:8b:53:15:90:cc:20:d9:fc:35:c6:a4:
                    3b:f8:65:08:c0:d0:3d:72:3f:16:de:d0:e5:6a:c8:
                    99:a5:be:d9:b8:01:48:61:65:2b:35:75:3d:c3:49:
                    66:c0:9f:e1:c3:28:8a:bf:bd:91:ff:39:d6:5d:c7:
                    a5:38:dc:7a:94:ce:37:e8:de:95:00:51:df:f2:94:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:30:F0:23:17:C2:F5:C3:C6:A9:9A:15:C5:FC:47:2F:A1:96:A9:C4
            X509v3 Authority Key Identifier:
                keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:48:cd:25:19:be:7c:70:9c:70:f2:7f:60:79:eb:73:a1:cd:
         b7:77:b5:f2:af:9e:c4:b1:86:69:8b:a0:90:69:54:5f:86:6b:
         0b:f0:4c:0f:e5:f1:9e:1f:77:21:f3:7e:6d:3d:b1:f5:cf:99:
         29:c0:5c:57:7a:c5:7f:62:43:f6:67:38:e2:da:57:6b:0f:a2:
         89:7c:28:ed:c1:0b:f0:12:a7:ae:04:47:fb:30:6b:31:c6:72:
         00:55:48:15:a7:40:e2:27:ed:c7:3f:15:9c:78:8d:af:87:63:
         1f:20:92:7e:48:c1:6d:55:79:c1:08:5d:46:f4:9d:c0:1b:a9:
         63:9d:16:09:c8:f4:07:d8:6c:b5:5f:56:03:68:b5:c6:fa:f1:
         08:62:9f:36:04:d3:d5:29:55:fe:3a:28:01:1e:73:e8:9e:1f:
         40:56:77:2d:de:e2:3c:df:42:fa:ee:cc:c8:1f:80:5d:0e:9b:
         5e:3f:9e:6d:18:db:fa:1e:02:92:dc:c0:28:47:78:a1:45:c0:
         29:e4:f9:b8:40:bb:1b:31:e5:2e:44:40:f1:15:b1:a2:f7:8b:
         7d:aa:3a:9b:35:8e:ad:ab:50:c6:9d:62:97:4a:06:1b:2c:c9:
         5f:b8:23:19:05:29:db:99:8d:1b:37:15:39:65:00:48:6a:51:
         5e:64:4c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:06:15 2026 by rpki-client