This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File:                     UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier:          drU2WWEYUXWxWJ2kJVA9h0Ko6KrTuP/DotlUXjYx+Us=
Subject key identifier:   9C:26:31:11:A0:6C:37:1D:BE:A2:4F:7F:51:6D:3F:15:3B:93:23:03
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer:       /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial:       019C427DE1666BBD2F494193110E11C50904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 13:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:11 +0000
Files and hashes:         1: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: L0/GNkhQI3HttHa9sYoaltPkX84eQ+ULJPJlRZ8yAfs=)
                          2: m66pD5NNoTudVlprN23DFJpyQNo.roa (hash: Zi+SOs/s829OkjmiRlWIKt2XYMZgmPRVGnqrx7IEkng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:e1:66:6b:bd:2f:49:41:93:11:0e:11:c5:09:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
        Validity
            Not Before: Feb  9 13:01:11 2026 GMT
            Not After : Feb 10 13:01:11 2026 GMT
        Subject: CN=9c263111a06c371dbea24f7f516d3f153b932303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:c8:e6:bf:95:a4:f8:0a:1c:95:12:eb:57:
                    cd:f1:44:d2:78:25:d0:2e:8b:7e:36:23:5c:a5:ba:
                    43:7f:24:2f:51:b7:6f:34:05:41:3a:6f:58:be:d8:
                    7d:ef:ef:40:14:28:f9:aa:44:2f:03:fd:06:78:4c:
                    88:10:1e:d2:e6:32:cf:8a:10:4d:af:11:4b:4d:9a:
                    70:99:15:d0:52:cc:59:c1:fb:d9:ca:2b:ba:eb:51:
                    29:dc:1c:79:16:94:4e:cd:50:cf:62:b6:81:ce:2a:
                    97:f7:a7:f4:71:f4:68:22:83:3c:f2:19:dd:19:3a:
                    fe:d2:d2:2e:fb:db:dc:88:9c:27:90:e8:c2:1b:da:
                    16:05:ea:83:8d:a3:0a:9b:3c:0d:ec:53:2c:9b:88:
                    3e:39:ba:40:dd:6f:5c:10:ee:15:5e:43:1b:a7:61:
                    88:cf:67:f7:ad:c9:76:86:c7:85:75:be:68:48:2b:
                    6c:f9:28:43:4b:f1:e7:c1:37:15:49:47:fe:7e:de:
                    64:31:53:89:2f:4b:b2:00:ab:21:30:90:f5:94:88:
                    51:5b:45:c1:54:58:72:7a:72:0e:64:13:ea:b1:6b:
                    05:1c:4a:b9:3d:e6:58:a7:5d:c0:86:96:f7:44:8f:
                    30:62:77:02:aa:4b:26:ec:ff:f1:2b:f8:1b:19:c2:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:26:31:11:A0:6C:37:1D:BE:A2:4F:7F:51:6D:3F:15:3B:93:23:03
            X509v3 Authority Key Identifier:
                keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9d:32:49:43:c0:64:4c:91:8c:bd:98:fc:b3:3f:9c:c7:22:
         df:1d:5d:df:a9:f0:85:d3:4a:d2:1d:da:c3:24:49:73:f6:ad:
         49:9e:b5:b0:49:9f:8e:a7:cc:28:05:4f:85:a5:ff:55:2d:fa:
         00:97:d1:9a:86:cc:ec:3e:f2:0a:d0:ad:66:bf:ef:ed:da:1e:
         b2:5a:a3:6a:73:27:16:ad:cf:f0:22:73:46:f8:5e:a9:42:bd:
         93:d8:58:bf:6d:7c:5e:7e:df:78:23:bf:6f:1a:40:63:7b:e2:
         5f:30:6d:e3:45:3e:13:2c:74:27:34:63:36:27:bc:74:89:a7:
         a0:d1:67:f2:34:71:22:2c:b2:e8:7c:dd:e6:05:ef:d6:80:07:
         5e:45:28:f9:4d:ec:ef:9c:80:cc:e4:1f:69:82:82:5e:11:a2:
         4c:8a:8c:25:43:ef:16:d1:6d:38:4f:7f:95:e5:44:0b:64:9a:
         3c:c5:cc:a6:96:a9:89:db:28:6c:d6:bc:1f:88:7f:d0:d0:62:
         34:47:96:b8:02:ea:53:ba:5f:39:da:c2:fd:c9:bd:70:c3:40:
         1f:d8:11:ca:17:69:8c:6a:c0:fc:bc:7e:18:3b:ee:6b:5d:e1:
         d7:db:d1:2c:d7:b4:28:52:68:94:dd:95:4d:e4:13:18:81:70:
         2d:da:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:35 2026 by rpki-client