This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File:                     U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier:          8EvBKaPSIBAdK9YYeqTL9SgyUuREmd82oLNHyCfZHpg=
Subject key identifier:   53:FB:2E:CC:BD:17:AC:02:3A:08:21:93:C1:F1:D9:ED:7F:40:25:99
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer:       /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial:       019C4358BBAEC0813454E3D0DAFB3789671C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 17:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:14 +0000
Files and hashes:         1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
                          2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: aNejo1Nokceq7jLue7qKNA+k0taJ6PWAR4Ic0Y4yFAw=)
                          3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:bb:ae:c0:81:34:54:e3:d0:da:fb:37:89:67:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
        Validity
            Not Before: Feb  9 17:00:14 2026 GMT
            Not After : Feb 10 17:00:14 2026 GMT
        Subject: CN=53fb2eccbd17ac023a082193c1f1d9ed7f402599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:df:f5:35:9a:97:a3:fe:8c:dd:ec:59:f0:
                    65:3b:09:05:b3:a2:6e:eb:10:67:4c:62:77:58:1a:
                    7e:84:cf:03:2d:9c:1b:16:b4:a2:73:79:e8:2d:01:
                    6d:33:76:69:03:52:8a:84:00:fe:cc:76:4c:65:3e:
                    7d:38:d8:91:47:2f:a3:ee:5d:61:4b:68:00:89:84:
                    e0:96:41:0f:1d:a2:36:3b:a3:d2:9f:6a:2d:66:fc:
                    22:ca:aa:32:20:2a:40:5a:d4:d7:c2:e1:05:c4:1c:
                    db:08:c8:31:9d:d5:f0:a9:7f:f9:61:a3:72:41:50:
                    ed:c7:f8:16:24:96:94:37:56:46:09:18:e8:b0:07:
                    eb:3a:54:8f:46:24:63:d3:5a:15:7a:69:09:e7:3c:
                    8a:47:aa:a1:e6:07:5d:93:75:07:fa:0f:1f:67:cc:
                    8b:e7:c2:05:14:b1:50:54:e0:dc:1f:b3:8f:86:9c:
                    80:bf:d1:2d:1c:32:db:c9:50:ac:78:48:ee:6d:59:
                    7c:7e:59:7f:e6:54:40:8f:9d:a9:e6:ff:a1:b1:2e:
                    08:ab:22:4b:15:fa:81:ae:9c:e1:5a:c9:17:07:a9:
                    d3:f8:2f:2e:f3:89:32:a1:e6:9b:d3:d1:51:62:1a:
                    05:71:78:27:d3:a6:e6:89:15:1b:7f:cc:16:84:1b:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:2E:CC:BD:17:AC:02:3A:08:21:93:C1:F1:D9:ED:7F:40:25:99
            X509v3 Authority Key Identifier:
                keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ad:d8:a0:fd:ed:c4:b3:66:83:1c:63:d3:34:7e:33:8d:11:
         4d:a1:6b:9e:d9:23:13:16:e3:4a:a3:19:a2:45:d1:d5:79:72:
         d0:99:6b:6e:1d:47:45:bf:27:31:f2:da:9e:68:44:a7:ae:f9:
         fb:c2:f0:c9:67:bb:b7:bf:9a:11:28:11:02:ac:a8:12:58:00:
         e4:87:4a:bd:1f:ba:cf:01:80:db:66:b1:08:77:cc:71:5a:50:
         22:ce:ca:86:ee:69:17:f8:d2:2a:13:18:12:ad:09:07:72:32:
         61:52:d5:e2:7d:2d:63:7b:9f:88:04:43:9e:f1:5f:74:1d:58:
         f3:81:77:a0:0a:75:4e:6d:37:fe:c0:c0:22:20:a2:d3:39:c0:
         a9:9e:83:43:d3:44:96:02:46:a2:d2:c9:87:ff:5f:6c:fb:2f:
         e0:c0:d1:49:ef:f6:14:ee:3e:6f:af:9d:c1:82:9d:d7:b6:88:
         83:eb:ee:59:5e:47:db:26:c5:31:55:13:f2:a9:13:ba:cb:74:
         3b:b9:51:71:2e:d5:2a:d9:31:1d:5e:de:c3:07:01:fc:af:c8:
         08:61:82:a5:d1:1a:44:47:d2:30:b8:df:3b:a9:94:3b:a3:49:
         48:f2:59:08:2e:d6:97:58:a9:eb:99:04:2b:88:f4:fd:ea:42:
         bf:00:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:23 2026 by rpki-client