This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File:                     uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier:          EeAe3azSHrEzTkMid+lP1TQKtQywgsbZk+OejJ0e1Ww=
Subject key identifier:   7D:7E:57:5B:9A:27:9A:A7:3A:53:BC:CC:50:2F:3D:79:03:03:8A:3A
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer:       /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial:       019C476CD94643CF3301CD73DCF4934B850E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number:          01CD
Signing time:             Tue 10 Feb 2026 12:00:41 +0000
Manifest this update:     Tue 10 Feb 2026 12:00:41 +0000
Manifest next update:     Wed 11 Feb 2026 12:00:41 +0000
Files and hashes:         1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
                          2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: GTfpjGd32PsIFjjOFgwfNY2qYR2Ev/Ne/MfZyTE1Vok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:47:6c:d9:46:43:cf:33:01:cd:73:dc:f4:93:4b:85:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
        Validity
            Not Before: Feb 10 12:00:41 2026 GMT
            Not After : Feb 11 12:00:41 2026 GMT
        Subject: CN=7d7e575b9a279aa73a53bccc502f3d7903038a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:ed:24:4b:34:07:ce:ba:3d:c4:de:58:01:
                    18:29:fb:f5:11:cd:75:5d:11:6d:a4:9c:03:78:2b:
                    3c:47:91:09:de:ac:37:10:66:6f:db:0a:02:d9:cb:
                    22:9d:5f:a2:13:81:51:18:ea:45:93:0d:53:5e:47:
                    a4:08:2c:d6:3f:7f:92:ad:fc:fa:0f:5f:6c:77:d8:
                    56:4a:6c:c7:a4:99:fb:91:19:37:6a:d1:52:c2:5d:
                    af:bb:11:b1:5c:cb:d6:38:04:a4:f2:8e:00:c0:51:
                    71:0d:2c:e2:cf:d0:ec:21:92:17:d3:81:66:dc:65:
                    9f:13:db:9d:07:bc:9a:f7:3b:d7:7c:f3:1c:dc:b8:
                    dc:9d:b7:b3:fd:3e:96:f6:4e:da:49:01:b3:ea:f3:
                    50:9e:bf:67:ca:53:24:90:6c:a0:00:1a:e9:6c:79:
                    c8:7d:02:59:75:e7:96:3a:48:8c:56:eb:47:4e:51:
                    25:d6:d8:e2:b0:f6:0b:73:c0:19:f7:1c:9b:07:2e:
                    b5:13:d8:32:0e:64:3e:68:3a:a8:3c:78:4c:ee:81:
                    25:8a:b6:0a:9a:92:e9:28:54:46:b4:76:d3:25:69:
                    18:5a:de:86:e2:0e:18:91:c6:04:74:0e:21:10:b4:
                    47:ee:84:69:b3:de:f5:17:34:2e:9b:19:d4:f0:28:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7E:57:5B:9A:27:9A:A7:3A:53:BC:CC:50:2F:3D:79:03:03:8A:3A
            X509v3 Authority Key Identifier:
                keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:b3:e9:4f:6b:c4:1f:75:e3:d6:f3:96:a6:00:50:04:1e:
         a0:94:4f:b3:19:8e:a6:0b:f6:f1:e1:0d:82:53:47:ef:03:41:
         87:07:95:00:a1:31:dc:b0:c3:c5:6a:d3:2f:63:7a:8d:00:aa:
         88:5b:19:9c:78:a9:20:57:9f:27:6d:1c:4f:5c:ca:63:b3:9c:
         27:02:dd:63:e2:18:d1:2a:77:18:9a:48:ce:f1:01:86:cf:7f:
         11:81:1b:f5:80:f0:96:4b:e6:bd:40:66:ae:5d:fd:6d:62:63:
         da:74:2e:70:df:7e:1d:34:69:30:58:3b:4a:78:de:75:4b:cf:
         45:61:a9:4d:6c:e9:98:a5:b3:eb:66:7c:15:05:18:58:47:5c:
         82:07:e7:09:f7:19:bc:86:b3:08:ce:da:3b:f8:81:56:86:cc:
         4f:c3:e7:1f:0c:97:1b:8e:4c:d6:1c:b3:e1:21:23:78:2d:06:
         78:67:aa:c3:9d:1a:b3:92:a6:5c:f4:ca:ba:76:18:7e:69:38:
         bb:bc:55:e1:77:7c:e0:c3:b1:60:a0:f9:9a:15:cf:bf:d1:a9:
         9b:d1:47:1b:19:78:80:5e:98:fe:51:ef:b2:65:9e:0d:03:12:
         0b:2f:a9:31:78:e2:9c:aa:63:10:58:dd:40:ad:73:48:15:ba:
         cf:89:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 13:33:26 2026 by rpki-client