This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File:                     UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier:          PhHid1BQq97m3+6epBzzYpFGc5I3SpBslDcXjA26Dec=
Subject key identifier:   35:8F:EA:36:33:73:46:D2:77:C1:B5:33:AD:04:B6:91:D1:DC:B7:74
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer:       /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial:       019C43C7062316F802326D17AEBBC5ABF9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 19:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:42 +0000
Files and hashes:         1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
                          2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: g7xlrb2tnJ0LEK9B/Uw0sYEAEMgZfFlwMtm3s0WXOm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:06:23:16:f8:02:32:6d:17:ae:bb:c5:ab:f9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
        Validity
            Not Before: Feb  9 19:00:42 2026 GMT
            Not After : Feb 10 19:00:42 2026 GMT
        Subject: CN=358fea36337346d277c1b533ad04b691d1dcb774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:67:51:6a:66:33:cd:df:60:09:05:8f:57:
                    1b:24:e0:d3:5e:d2:a2:5f:64:43:27:b9:fd:14:2d:
                    8f:88:15:b3:18:24:92:42:69:c1:b6:46:99:6a:0c:
                    b1:3b:8c:1f:74:45:b2:99:9f:8d:ba:71:2c:2b:14:
                    ca:01:13:79:cd:1e:66:19:02:c3:c8:95:e6:3b:f2:
                    cc:ed:07:97:bb:ec:cc:9b:e9:16:0a:0c:5e:07:67:
                    c4:d4:63:7a:7b:f6:de:a6:f4:ad:7e:45:38:76:9b:
                    f9:51:f4:d4:a7:54:82:3e:f4:2d:b7:cc:03:e3:5c:
                    3a:2f:1a:8c:a7:03:e9:dc:80:2e:c3:d7:8e:65:e4:
                    09:b6:d2:b9:8c:1f:96:a6:7d:40:9c:a5:c2:15:75:
                    17:4d:87:d2:35:94:c5:5a:83:93:ea:d8:78:cd:b8:
                    ce:05:75:ac:5c:a6:c1:a0:20:e9:a5:31:98:ac:a9:
                    7b:33:51:1c:0e:7a:2b:e1:b6:b7:f3:97:56:3b:ac:
                    0c:01:f8:8b:69:65:cf:a1:b0:00:ea:ec:bc:bb:09:
                    d3:58:05:7a:f8:e0:eb:58:74:65:25:02:eb:2b:66:
                    cd:0a:02:be:b6:ea:1b:ec:90:e8:06:a1:ee:db:1d:
                    9f:f2:4e:36:85:2a:cf:7e:18:41:81:ca:b3:a3:cc:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8F:EA:36:33:73:46:D2:77:C1:B5:33:AD:04:B6:91:D1:DC:B7:74
            X509v3 Authority Key Identifier:
                keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:21:db:b9:a1:6a:bc:80:0b:04:71:92:09:2a:b4:f6:8d:
         7f:90:de:b0:c2:55:8d:85:88:bd:56:bf:ba:fe:46:0a:d9:79:
         8f:97:d9:fe:0b:fe:34:91:2c:fc:a7:c5:6b:5a:01:4c:a2:d6:
         14:02:c9:4e:b8:5f:ff:6e:48:6d:3e:c7:19:0b:ce:a2:8d:68:
         3d:9b:c3:a5:67:57:ed:3f:8a:56:29:d2:0c:76:ff:40:fc:c0:
         ed:34:ec:a5:7a:3c:d6:8e:96:a7:05:ac:c2:aa:0e:71:27:2d:
         ef:45:0b:a8:ae:82:a0:e1:4d:4f:ff:f3:27:0a:7a:23:42:7d:
         d4:1e:31:87:6b:76:d4:73:95:71:14:c2:56:f9:ab:36:38:49:
         d8:e2:a0:a5:ac:a0:6f:1f:43:31:53:02:b2:96:db:0c:f9:77:
         a2:b7:54:6a:d2:9c:56:87:f6:10:02:aa:d9:96:89:0f:c2:ca:
         e1:b7:75:99:86:cc:70:1b:b3:18:dc:ea:ae:9e:66:9f:8a:35:
         6b:36:46:0f:9f:2c:0f:52:4c:e7:79:98:38:b5:1e:58:ba:33:
         21:41:9c:bb:ac:da:60:b8:0a:7f:5b:de:57:72:af:8c:df:2d:
         e9:57:53:31:8e:11:4d:14:f1:a1:f6:0e:f5:6b:03:71:e5:55:
         b8:77:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:19 2026 by rpki-client