This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File:                     UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier:          wcZDB/z3ac0QNwfHy8SMpa4eI+Bd9xrytBIzzohdRdE=
Subject key identifier:   58:D5:86:F7:F7:3D:41:34:FC:50:AD:82:39:D9:04:B7:F3:B4:83:A4
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer:       /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial:       019C44D991A0E119C0899D1CA816DA7733B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number:          17A2
Signing time:             Tue 10 Feb 2026 00:00:35 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:35 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:35 +0000
Files and hashes:         1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: 1Dfuj58yWrx29g4fJtJP9o0NPylaT3FblJZL77mOkIM=)
                          2: ecFOCtyMPZjujJaE-20dAfii9DM.roa (hash: 2c3Yb3DHYLd5Kr4mOCYbpGtoKCki3dzbhWvRjPGqV24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:91:a0:e1:19:c0:89:9d:1c:a8:16:da:77:33:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
        Validity
            Not Before: Feb 10 00:00:35 2026 GMT
            Not After : Feb 11 00:00:35 2026 GMT
        Subject: CN=58d586f7f73d4134fc50ad8239d904b7f3b483a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:af:b1:7d:ca:01:4e:d0:6e:5e:c9:17:54:
                    ce:76:a8:41:38:da:6c:08:54:8f:7b:62:c0:bd:9f:
                    36:e4:cd:a7:c8:53:7a:be:d5:e5:89:da:16:65:ac:
                    b7:95:37:bc:e1:26:34:05:5f:b1:13:b6:aa:dd:1e:
                    be:9a:fa:63:18:15:a5:0e:7a:e6:26:8c:16:07:de:
                    d3:b8:83:c8:14:11:45:7a:ca:65:4b:a1:70:da:22:
                    4f:b5:32:40:65:45:f2:59:18:24:3d:15:c5:ff:b1:
                    cc:f8:e1:58:ea:13:f8:e7:43:65:a8:c4:60:c5:45:
                    4a:9d:ba:80:84:3e:7f:27:4a:81:6d:71:ec:94:fc:
                    e6:9b:f4:fb:b5:fb:f5:57:ca:40:9f:ca:1a:70:d4:
                    92:c7:38:7d:10:ff:de:e0:b5:f8:5f:b8:cd:18:25:
                    19:95:98:b6:83:2d:65:26:5f:90:93:02:96:fc:ff:
                    67:30:b6:b0:55:db:ea:f0:5b:6d:3e:77:fe:55:3f:
                    38:de:c5:eb:ea:43:e1:03:80:b1:63:e2:d3:96:e8:
                    96:ad:6c:6e:68:37:de:f8:8a:1f:99:80:5f:98:29:
                    a4:01:cf:60:91:ac:09:24:ed:b5:f7:50:3c:ff:aa:
                    66:92:d5:24:3e:21:1a:41:e5:fc:33:96:46:84:82:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D5:86:F7:F7:3D:41:34:FC:50:AD:82:39:D9:04:B7:F3:B4:83:A4
            X509v3 Authority Key Identifier:
                keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:24:8e:d0:53:55:2e:e0:82:38:fb:52:03:d7:0a:99:db:3e:
         54:9e:54:ba:e1:89:13:c4:92:19:82:da:dc:9b:a0:03:87:28:
         a4:cf:7b:fb:a2:6f:4d:09:e1:9b:7c:fe:f3:72:8c:5d:be:1e:
         26:5d:02:73:9c:1d:9e:4b:55:36:9d:f5:19:12:28:52:4b:6a:
         eb:3d:83:67:d0:a5:d4:3a:2a:d5:f8:db:a5:8c:4e:92:6b:85:
         15:02:fc:35:37:7c:ea:97:c0:5e:d7:1e:cf:70:b3:78:55:67:
         6e:f0:57:8e:0c:a8:09:63:cd:9f:bb:af:c6:c5:33:1c:15:7c:
         f8:6e:ae:38:c3:dc:b7:c3:5c:29:a5:c1:07:61:89:3f:10:a6:
         4d:e1:40:bb:df:17:2b:eb:b2:f8:f7:75:e9:5d:6b:93:d4:1f:
         31:9e:0b:ac:7f:22:58:af:93:83:a1:1c:61:db:b8:22:d8:90:
         73:3e:20:64:f1:69:e1:dc:3a:51:d5:f2:92:7a:92:d4:a2:50:
         2f:6e:72:c3:95:ec:4e:68:e9:c9:7c:b2:5f:eb:2e:f4:8d:55:
         f9:d0:18:e5:08:2b:9a:53:fe:9b:f8:4a:5e:91:f1:36:59:75:
         ea:62:9d:f6:57:b7:60:84:3d:02:79:4d:c4:fa:5b:4f:91:96:
         35:e9:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:38 2026 by rpki-client