This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File:                     Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier:          1AwA+FIhNsWZchQU0RfvTRH2Jew+rG30/SgV0Gk2xPk=
Subject key identifier:   3B:7D:DC:0A:2C:D8:07:E8:CB:63:90:E3:5D:16:BA:0E:E8:32:73:61
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer:       /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial:       019C420FC123D1626915A0E962D894B759B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 11:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:54 +0000
Files and hashes:         1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
                          2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: h5G+AwXHvfUUDPy8Txet2ssyp184xn+Dfj8eh0a/Q7E=)
                          3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
                          4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c1:23:d1:62:69:15:a0:e9:62:d8:94:b7:59:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
        Validity
            Not Before: Feb  9 11:00:54 2026 GMT
            Not After : Feb 10 11:00:54 2026 GMT
        Subject: CN=3b7ddc0a2cd807e8cb6390e35d16ba0ee8327361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:30:5f:c9:5e:7d:5e:73:6f:c2:bf:2a:2a:
                    2c:5f:4c:ef:7a:90:ef:92:1b:f7:f0:66:c9:ad:24:
                    06:59:8e:7f:40:5d:4d:25:c6:f2:83:c6:87:be:f6:
                    91:3f:a7:72:5f:04:97:90:a5:6f:19:5b:99:84:c0:
                    24:25:da:ae:f4:f1:35:f2:e4:a4:ae:67:00:90:73:
                    3f:5b:d4:df:6d:d2:d4:0d:89:33:d4:d5:be:34:48:
                    bb:3a:b0:f9:7b:b3:5a:8b:b8:a9:8d:08:13:83:64:
                    0d:a3:f1:49:43:20:d0:1c:71:17:9d:b0:39:9b:a5:
                    c8:5f:de:d7:bd:e6:3d:50:d6:90:bc:bf:44:3b:0f:
                    e9:6a:52:f0:cb:a6:19:b5:9b:49:38:a2:5b:f0:5c:
                    7e:d7:3f:e2:fd:4c:30:46:82:4b:92:8e:c9:1c:e2:
                    d1:ce:ba:7e:7f:51:24:61:45:fb:e8:7f:c3:a8:9a:
                    7a:2e:20:ab:a2:1a:c3:10:51:1a:b0:63:3a:d7:15:
                    85:42:a2:d8:c3:27:82:77:21:b5:23:a3:04:dc:88:
                    8d:ed:91:17:79:e0:fb:49:86:36:d0:10:e4:84:1c:
                    c5:95:10:5c:74:f4:77:65:14:97:75:98:1f:a7:02:
                    cf:7c:2a:97:40:1e:4a:9d:47:75:b3:80:18:2c:95:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7D:DC:0A:2C:D8:07:E8:CB:63:90:E3:5D:16:BA:0E:E8:32:73:61
            X509v3 Authority Key Identifier:
                keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:36:91:91:d4:0f:1f:06:01:de:60:5e:8d:34:61:e4:a3:a6:
         2f:9d:8d:c4:bf:0b:cf:99:67:f6:0c:0a:63:32:49:f1:81:31:
         f9:fa:c7:d3:94:cf:3e:40:27:c0:ca:3f:6d:e4:71:f8:bd:72:
         0c:ed:4a:c6:f6:96:cf:5b:f2:a6:a2:a6:37:a5:2c:9d:a2:6c:
         37:07:ab:fe:e7:11:11:56:ed:78:94:94:ce:ad:d8:e8:55:2b:
         32:3a:46:bb:11:c3:17:a2:27:26:5d:29:c2:ec:8e:e8:7d:d5:
         42:79:d1:9c:e0:18:6f:0b:24:4d:f6:19:cd:7a:9f:1d:39:12:
         88:d9:c6:cc:47:59:b0:6f:0f:c1:97:fa:e9:e3:19:2d:f6:4f:
         11:be:00:f2:8c:b4:61:e7:82:9b:7b:0c:e7:81:ff:be:95:ec:
         fa:ff:d0:85:c7:12:c8:9e:0b:43:58:5d:00:63:0f:27:bf:da:
         e4:01:3c:44:4c:ea:b5:9f:2a:48:d4:21:00:17:97:b6:77:4b:
         e0:e2:7d:6f:56:6e:06:08:35:cf:0f:e6:18:41:93:f6:ae:11:
         e4:99:81:2e:67:07:72:5b:78:06:a4:a8:8d:82:c0:e0:af:bb:
         5c:3f:bb:c5:6e:89:79:44:65:6f:e3:79:5f:6a:c5:73:dc:24:
         6b:c3:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:32 2026 by rpki-client