This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          JLp7NGzFwpZ+eFzhkP+K8w9dbXxN2+QMEDLUWlzTpZA=
Subject key identifier:   61:E3:88:3C:03:BB:D1:52:0F:7C:CB:77:CD:DF:90:62:00:47:C0:02
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       019C438FF83CA179F683976B29556E286F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          1818
Signing time:             Mon 09 Feb 2026 18:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:34 +0000
Files and hashes:         1: t-RajiZKm0I7iCnwIQb972khycw.roa (hash: lmVvfyej95ql6NLfgrWbpzZ9Tr5bIz/3Pg6eV1wNV+E=)
                          2: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: /3DPuTsL9gipuUMrLyzzCCaTwyqyZOtgFAT/waG7PWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:f8:3c:a1:79:f6:83:97:6b:29:55:6e:28:6f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: Feb  9 18:00:34 2026 GMT
            Not After : Feb 10 18:00:34 2026 GMT
        Subject: CN=61e3883c03bbd1520f7ccb77cddf90620047c002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:e2:1b:78:de:bb:60:50:64:40:7e:93:37:
                    91:43:04:01:3e:c2:ef:3d:cd:c9:89:f0:74:b3:e4:
                    bc:62:92:9b:b0:15:e9:a1:dc:b6:19:b9:35:89:f3:
                    e4:6e:62:79:b5:b5:0d:13:47:82:4c:1f:72:d8:ef:
                    27:e2:ec:d0:d5:2c:50:5f:7a:0c:47:a8:85:0e:61:
                    09:2c:ef:ae:76:d1:ac:ea:b0:54:9f:43:44:de:3b:
                    49:14:d0:1d:b1:62:84:3a:1f:73:a8:46:40:0d:63:
                    3b:8b:99:3c:f2:50:71:76:51:0c:70:1c:65:89:81:
                    e5:82:72:49:07:d3:8a:55:1c:3f:d8:79:97:29:ba:
                    cf:e5:cb:44:8c:f3:d2:75:8a:48:e3:fd:a2:6a:e3:
                    76:07:8c:1f:1e:d9:f0:86:b3:e9:dc:c9:19:f5:0c:
                    d6:77:88:89:93:9d:b7:3d:74:cb:d2:64:15:3e:d3:
                    2c:0a:55:e8:77:6a:91:46:d8:e9:d9:31:94:fb:fc:
                    57:ad:e4:bd:46:28:e1:56:28:53:ed:0c:a3:36:d7:
                    98:9d:34:9f:c7:02:bc:36:36:1f:dc:75:dd:d3:d9:
                    a2:ef:d4:db:31:9e:c1:fb:f4:f0:9e:fd:84:bf:69:
                    0d:c7:9a:2b:f0:52:a2:16:51:d6:c9:9c:25:8b:3a:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E3:88:3C:03:BB:D1:52:0F:7C:CB:77:CD:DF:90:62:00:47:C0:02
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4c:a6:52:e9:f3:3c:cd:50:2e:14:2d:cb:42:dc:af:ef:0e:
         8e:46:fa:aa:5d:12:b6:e9:46:4c:14:35:d4:eb:d5:2a:27:17:
         05:5a:71:6d:00:68:68:2d:a4:19:82:08:32:b0:f0:b7:e2:09:
         aa:bb:bd:d3:dd:ca:fc:76:b2:21:15:ac:a5:26:07:b0:4d:cf:
         1c:a5:ca:44:8c:33:44:d8:0e:43:03:b9:d0:3a:e6:80:43:a0:
         f1:8a:d4:c3:02:75:10:7f:95:43:1d:da:56:93:1b:14:f9:b8:
         7a:38:64:8b:c8:c1:fe:37:b8:02:39:4a:01:75:e2:c2:0b:21:
         8e:3b:40:e8:b9:fa:88:f0:b8:c0:e9:d4:1a:7c:e6:4c:35:5e:
         d8:96:21:69:d0:40:c5:63:2c:7e:b7:d8:48:93:e6:40:b7:d5:
         19:b9:f2:42:f8:2f:80:65:aa:78:18:c7:b0:93:f6:80:db:89:
         bd:1b:46:2c:c2:54:45:8e:cb:50:1e:1f:0f:f6:06:bf:67:b7:
         da:9b:5b:8e:69:8b:f3:44:29:48:02:13:c7:f3:b1:4d:27:70:
         09:4a:2b:3e:70:0d:47:22:c8:97:41:d8:10:33:66:9d:41:09:
         61:aa:79:36:d7:63:0b:00:c1:9b:97:90:0c:8d:91:b5:fd:e4:
         0c:46:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:10 2026 by rpki-client