This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File:                     uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier:          r+0/R+SUvGe8w45zmS57/esCcNBUXNxoe1buzA+135M=
Subject key identifier:   24:92:64:31:D8:70:E1:68:BF:86:8D:76:32:B4:59:F7:58:86:BE:9A
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer:       /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial:       019C41A26E4AA47C86A7E48056B4F7AD0F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number:          0655
Signing time:             Mon 09 Feb 2026 09:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:29 +0000
Files and hashes:         1: TSjfj-QisRfZKTbvFvagtYYtljU.roa (hash: aXZ9GQHn0MfhoPq/DrK3cj/6rgXogLzvprkNtDCtBy0=)
                          2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: xmijoMqwTg1cJBvbIbe3WMBeJwS9vPVed06JXPb81L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:6e:4a:a4:7c:86:a7:e4:80:56:b4:f7:ad:0f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
        Validity
            Not Before: Feb  9 09:01:29 2026 GMT
            Not After : Feb 10 09:01:29 2026 GMT
        Subject: CN=24926431d870e168bf868d7632b459f75886be9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:b2:ef:e9:1c:44:70:fc:4a:27:4c:5e:32:
                    1d:90:26:68:0d:e5:23:b0:f6:b8:e2:f9:6a:26:5d:
                    bd:81:56:ce:2c:fa:20:2b:5c:e8:84:b3:d4:e7:ac:
                    ad:d3:8e:1c:ec:24:77:9a:99:47:48:c8:3d:46:fd:
                    aa:d2:a6:c6:17:bb:8a:89:48:f7:d8:bd:7c:b9:43:
                    f4:f0:5a:30:56:3d:c1:94:49:98:f1:45:b8:f1:7d:
                    58:78:5a:40:3a:38:b0:98:ce:9f:7e:d1:4f:36:07:
                    50:d5:5e:7e:de:c0:a1:f8:c1:45:a9:38:60:49:82:
                    ce:3a:a4:de:80:a4:48:ba:41:ef:34:d2:51:c1:2b:
                    19:c0:62:af:6a:45:fa:37:ba:c1:28:f6:93:e9:0e:
                    3a:1e:84:c6:05:62:05:06:78:ea:7e:16:fa:1e:28:
                    7e:0b:dc:75:ed:d6:d9:8a:c9:e5:de:8f:6f:81:b7:
                    2c:57:8b:8a:d9:6e:1f:f3:94:1e:c0:c3:86:e5:2d:
                    59:75:08:04:3e:18:9d:39:6e:0e:78:d1:28:dd:ab:
                    39:7c:2c:15:94:a9:e6:8d:c6:c6:64:cf:5a:cd:77:
                    57:16:1f:79:c3:65:4c:6e:96:81:b3:e5:43:6f:21:
                    72:92:2f:e9:c9:a9:eb:58:08:28:9a:7e:1b:d2:e7:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:92:64:31:D8:70:E1:68:BF:86:8D:76:32:B4:59:F7:58:86:BE:9A
            X509v3 Authority Key Identifier:
                keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:92:6a:2a:5a:0f:69:d8:58:b0:b9:8b:90:ba:cb:3a:b9:fb:
         17:f9:a1:d5:99:df:5e:ba:c8:53:7c:10:12:88:3f:ea:37:54:
         8d:51:e8:f3:75:de:f2:4c:32:89:30:3f:9f:1c:b5:e2:50:93:
         6c:38:0f:2a:4a:d4:54:d3:3e:be:e9:be:42:cc:bc:29:ec:03:
         5a:e3:cc:4d:d1:46:74:cc:b3:f0:79:52:38:75:4e:55:85:aa:
         1e:c7:6f:75:ec:dd:9b:e3:92:45:71:84:1c:cc:f4:f1:56:cf:
         c8:73:fa:f6:5c:73:0c:8d:71:cf:cd:c9:e3:0d:85:5e:a9:ca:
         5b:05:f5:0f:fe:45:ab:43:2b:56:4e:40:2b:eb:c1:c8:33:47:
         17:d0:fa:2f:ff:01:31:e6:c7:e4:02:fa:bf:9a:73:2f:23:9e:
         bb:7a:d7:b0:10:b5:67:b3:69:b9:66:81:72:e2:78:ac:3a:46:
         9b:49:92:7b:38:6e:07:39:92:51:e2:7f:79:87:19:02:4c:f9:
         f9:35:82:1f:12:0b:35:b6:ef:36:6e:19:88:99:45:f1:2e:7e:
         27:32:59:e7:e9:57:4e:3c:c8:98:f2:59:23:dd:92:0a:28:7b:
         ae:e1:e9:14:df:86:ac:e4:77:ba:90:ea:fa:89:3c:11:03:dc:
         98:46:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:15 2026 by rpki-client