This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File:                     uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier:          lJI2GSv7GAqSyLB6qhaelY0F+gHk2Oe/75BMvko5hJU=
Subject key identifier:   87:4A:78:90:63:5F:C4:EF:B0:08:13:66:FA:F2:A2:FB:F5:D7:18:6F
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer:       /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial:       019C42434E2038838642DEFB8910EDADB067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number:          055B
Signing time:             Mon 09 Feb 2026 11:57:13 +0000
Manifest this update:     Mon 09 Feb 2026 11:57:13 +0000
Manifest next update:     Tue 10 Feb 2026 11:57:13 +0000
Files and hashes:         1: jsXB1_Evk2bXKsUupQPQbFGrazU.roa (hash: 8QAkEyu1UIst1+gg42SpGW6/4GMWh5W0HPfdMc3fzM8=)
                          2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: OaoV3AcGsdwx9wfC6acJqcfqMycfZsju14YcDf1OG+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:43:4e:20:38:83:86:42:de:fb:89:10:ed:ad:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
        Validity
            Not Before: Feb  9 11:57:13 2026 GMT
            Not After : Feb 10 11:57:13 2026 GMT
        Subject: CN=874a7890635fc4efb0081366faf2a2fbf5d7186f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:36:14:4c:1a:f7:79:82:8b:70:90:34:9c:
                    ba:72:2a:df:a9:0e:be:b2:41:fd:b2:1f:ef:05:d5:
                    fe:74:bb:15:b3:e5:33:ab:b1:f2:19:05:ac:ef:7e:
                    0a:a2:9e:38:f6:f4:bd:e9:ae:ba:53:54:19:37:35:
                    34:37:b5:e2:62:62:2f:9a:06:69:20:a4:0b:99:b7:
                    41:c6:a2:4a:46:dd:8c:17:dd:b7:9f:bb:e9:52:32:
                    5e:45:cc:96:5b:42:0d:b7:e1:d2:5c:fb:6c:2d:2e:
                    48:1f:18:fa:5f:b0:e6:13:ab:61:a2:23:c3:d0:0f:
                    3e:7d:ce:88:93:dd:d4:70:11:4b:4f:32:49:26:29:
                    7d:7e:a7:d0:09:f7:80:09:c9:a4:98:e2:87:06:d9:
                    7c:29:f8:67:34:c8:ad:45:6e:7c:49:bd:74:4b:2b:
                    a0:1d:f0:53:25:3d:9e:fa:b8:a8:b9:c8:e3:62:1b:
                    5b:b5:90:3b:38:ce:6c:e0:47:97:0d:82:41:85:e7:
                    42:e4:d7:92:22:9c:d9:7b:a2:4e:0c:86:1d:8a:79:
                    81:0a:c8:1e:9e:5a:cc:09:b4:54:45:81:ce:cd:4d:
                    1f:cb:db:7d:b7:50:4e:5f:9f:23:8a:de:6e:94:72:
                    5a:e6:75:14:2a:0f:50:91:83:11:64:04:f7:a8:8e:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:78:90:63:5F:C4:EF:B0:08:13:66:FA:F2:A2:FB:F5:D7:18:6F
            X509v3 Authority Key Identifier:
                keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:4a:c4:e6:50:b3:52:81:92:4e:36:a2:3d:43:6a:44:35:
         9c:cc:e7:7d:66:77:ef:6b:c8:fb:72:90:e2:8b:76:1a:b2:a5:
         5d:88:2e:84:bb:6a:de:96:13:46:78:ef:a6:39:e7:18:ab:e7:
         a6:a5:82:19:7e:cb:14:dd:57:7b:ff:dd:09:33:07:6f:2f:06:
         7e:98:60:36:76:86:50:12:22:91:54:0b:1d:59:cc:65:fe:dd:
         10:ae:8f:e5:78:b6:2c:20:87:f8:a4:63:f4:ec:c9:2b:41:79:
         27:96:ad:10:9e:d8:02:65:74:c4:59:df:c8:45:ef:57:ef:d5:
         49:d9:74:59:47:3f:21:3e:71:a7:9b:1b:85:b2:b5:01:5b:50:
         fd:f9:69:0e:35:a1:45:90:b1:7e:00:bf:b0:97:bf:b7:b1:84:
         59:f3:9f:44:f5:d4:73:3d:ec:2e:23:88:d5:c3:d9:09:a6:66:
         38:24:3e:05:98:28:e5:b2:b0:77:e9:b9:06:11:48:1c:e9:39:
         9b:a4:b2:19:38:72:2c:0c:15:f2:8d:0d:11:7c:da:71:0a:00:
         1f:df:2a:4b:70:e7:e2:68:a7:4c:48:80:eb:46:61:9d:15:cb:
         dd:be:83:8d:5c:0a:21:bf:ab:a8:37:20:30:ef:a3:e8:ba:d1:
         09:ce:bc:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCQ04gOIOGQt77iRDtrbBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy
ZWQ4NjIwHhcNMjYwMjA5MTE1NzEzWhcNMjYwMjEwMTE1NzEzWjAzMTEwLwYDVQQD
Eyg4NzRhNzg5MDYzNWZjNGVmYjAwODEzNjZmYWYyYTJmYmY1ZDcxODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDk2FEwa93mCi3CQNJy6cirfqQ6+
skH9sh/vBdX+dLsVs+Uzq7HyGQWs734Kop449vS96a66U1QZNzU0N7XiYmIvmgZp
IKQLmbdBxqJKRt2MF923n7vpUjJeRcyWW0INt+HSXPtsLS5IHxj6X7DmE6thoiPD
0A8+fc6Ik93UcBFLTzJJJil9fqfQCfeACcmkmOKHBtl8KfhnNMitRW58Sb10Syug
HfBTJT2e+rioucjjYhtbtZA7OM5s4EeXDYJBhedC5NeSIpzZe6JODIYdinmBCsge
nlrMCbRURYHOzU0fy9t9t1BOX58jit5ulHJa5nUUKg9QkYMRZAT3qI40ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdKeJBjX8TvsAgTZvryovv11xhvMB8GA1UdIwQY
MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt
ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl
LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMh1KxOZQ
s1KBkk42oj1DakQ1nMznfWZ372vI+3KQ4ot2GrKlXYguhLtq3pYTRnjvpjnnGKvn
pqWCGX7LFN1Xe//dCTMHby8GfphgNnaGUBIikVQLHVnMZf7dEK6P5Xi2LCCH+KRj
9OzJK0F5J5atEJ7YAmV0xFnfyEXvV+/VSdl0WUc/IT5xp5sbhbK1AVtQ/flpDjWh
RZCxfgC/sJe/t7GEWfOfRPXUcz3sLiOI1cPZCaZmOCQ+BZgo5bKwd+m5BhFIHOk5
m6SyGThyLAwV8o0NEXzacQoAH98qS3Dn4minTEiA60ZhnRXL3b6DjVwKIb+rqDcg
MO+j6LrRCc680Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:08 2026 by rpki-client