This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File:                     UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier:          IRQD+AgCqJ3E0eCrwkqKKfHR3myPuNIE//XRIq2incs=
Subject key identifier:   35:AA:10:14:00:03:B9:EE:BC:5C:05:13:36:3D:FF:54:8D:20:8A:51
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019C1CB9B02F9BF107E13B28C93D702BE416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number:          02CE
Signing time:             Mon 02 Feb 2026 05:00:57 +0000
Manifest this update:     Mon 02 Feb 2026 05:00:57 +0000
Manifest next update:     Tue 03 Feb 2026 05:00:57 +0000
Files and hashes:         1: 1-qOjuIvYGjckksNPHVjpgwpDL5c.asa (hash: IDU7S6qcZcLrhRpcWw7crD/aj5dTeMeZ0RTCJFumpRA=)
                          2: 9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa (hash: HpaZI7kuC6hl/mDsBhvQTtPfFBQMuUpypzbtW9UHoK0=)
                          3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: NVMlOdPAVnjwPCla8gHknxe+NwyGUztP5OaLPs1e8yY=)
                          4: WEtqNCrBdP1-xOqBUemEbeb1epY.asa (hash: HoM1BbtgBuk87uJLxu3lvRVRX6rEkL9yzf8EqEQYeqA=)
                          5: _rTEx-t_NdmfT_FVcasSap5SuvE.roa (hash: ENf9Zsg8pxzpa14iNxpPB+x6wfIxOC0IvZvTlmEuMS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:b9:b0:2f:9b:f1:07:e1:3b:28:c9:3d:70:2b:e4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Feb  2 05:00:57 2026 GMT
            Not After : Feb  3 05:00:57 2026 GMT
        Subject: CN=35aa10140003b9eebc5c0513363dff548d208a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:d4:ce:70:d0:17:43:20:11:cb:ec:b6:51:
                    27:a8:45:2c:f9:47:d2:1c:f5:b3:9b:d2:30:e9:c1:
                    11:c6:ae:cb:4b:04:6f:72:69:cb:bd:99:37:ec:ad:
                    fa:7a:c4:1a:2d:d7:c6:82:e5:38:0a:53:74:a8:a0:
                    47:43:4c:66:df:17:9f:ea:09:76:be:01:90:e3:87:
                    97:96:9c:39:3d:76:8e:c1:41:3c:18:d5:f8:b8:f2:
                    4e:a4:12:ad:4d:b7:f0:98:46:c1:21:1c:7d:f1:e3:
                    f9:fa:5b:2b:e3:54:83:5c:b3:4f:5b:f7:08:57:02:
                    be:59:0f:a6:01:f4:47:06:ae:49:9b:8d:c1:0b:f6:
                    d8:ea:9d:d1:92:18:7d:d1:d2:42:3d:04:9e:d4:9e:
                    dc:43:83:e3:2b:b2:86:69:4d:f1:02:34:06:16:ed:
                    4e:ea:95:56:d7:c0:83:9f:0c:a5:ed:93:bd:d9:b4:
                    17:28:bd:6d:2f:df:9f:4b:8d:89:10:13:53:9b:d4:
                    3e:42:18:20:04:aa:c3:5b:5a:6a:e8:a7:4b:0b:f5:
                    bc:56:94:5c:5a:90:8b:6c:f4:0e:15:f5:70:a7:df:
                    61:ea:12:94:12:00:e4:b5:6c:d7:33:1a:b6:ec:15:
                    68:5d:d0:46:98:46:ce:76:3e:42:65:2e:3a:bb:0a:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:10:14:00:03:B9:EE:BC:5C:05:13:36:3D:FF:54:8D:20:8A:51
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:81:e1:76:99:d1:3d:18:7e:b9:7c:42:fc:18:e9:dd:d5:75:
         dc:c1:f8:f8:af:03:8f:0f:2b:30:27:8d:a1:a1:92:60:4f:df:
         08:36:52:58:d6:74:e7:90:37:49:f4:81:2c:05:2c:24:9d:38:
         cf:7c:ac:9f:58:d4:cf:11:dc:4e:4d:42:65:01:5b:31:ed:77:
         ac:dd:a3:b3:7a:b1:25:73:ec:06:1a:50:a8:21:93:ed:e4:ae:
         96:38:b2:61:e0:4b:4f:79:32:e1:d5:21:2c:3a:e7:1d:26:05:
         e8:46:51:24:56:5b:d8:3c:cb:ca:e6:dc:e2:8a:8a:2f:81:ed:
         5a:56:23:f3:64:6a:79:be:11:80:dd:35:86:86:ad:17:1a:74:
         33:01:20:26:20:b5:f8:eb:e9:2e:e6:8e:ad:2b:dc:31:57:ba:
         18:78:79:c6:9d:31:63:3c:07:b3:e1:0e:ff:a6:0b:f9:3c:bb:
         7c:a3:11:66:ab:b2:7f:7d:3c:6d:f6:38:08:dd:b8:fa:d0:d8:
         b8:f4:be:8b:79:da:3c:bf:07:4d:94:7a:a2:86:9b:14:e5:41:
         1d:55:33:c8:86:e5:dd:85:e5:68:ee:d7:90:a2:0e:01:86:6d:
         a7:01:af:f2:70:93:68:a4:12:33:6f:eb:46:b8:ea:9a:83:d2:
         4c:cd:71:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcubAvm/EH4TsoyT1wK+QWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwN2M3NzBiYjZiMDhkY2I0ZDZlYTliMGM5NjI3MmFmM2E2
ZjljNzEwHhcNMjYwMjAyMDUwMDU3WhcNMjYwMjAzMDUwMDU3WjAzMTEwLwYDVQQD
EygzNWFhMTAxNDAwMDNiOWVlYmM1YzA1MTMzNjNkZmY1NDhkMjA4YTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8fUznDQF0MgEcvstlEnqEUs+UfS
HPWzm9Iw6cERxq7LSwRvcmnLvZk37K36esQaLdfGguU4ClN0qKBHQ0xm3xef6gl2
vgGQ44eXlpw5PXaOwUE8GNX4uPJOpBKtTbfwmEbBIRx98eP5+lsr41SDXLNPW/cI
VwK+WQ+mAfRHBq5Jm43BC/bY6p3Rkhh90dJCPQSe1J7cQ4PjK7KGaU3xAjQGFu1O
6pVW18CDnwyl7ZO92bQXKL1tL9+fS42JEBNTm9Q+QhggBKrDW1pq6KdLC/W8VpRc
WpCLbPQOFfVwp99h6hKUEgDktWzXMxq27BVoXdBGmEbOdj5CZS46uwoZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWqEBQAA7nuvFwFEzY9/1SNIIpRMB8GA1UdIwQY
MBaAFFB8dwu2sI3LTW6psMlicq86b5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAt
NThiNzliYzliY2M3LzEvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAtNThiNzliYzliY2M3
LzEvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYHhdpnR
PRh+uXxC/Bjp3dV13MH4+K8Djw8rMCeNoaGSYE/fCDZSWNZ055A3SfSBLAUsJJ04
z3ysn1jUzxHcTk1CZQFbMe13rN2js3qxJXPsBhpQqCGT7eSuljiyYeBLT3ky4dUh
LDrnHSYF6EZRJFZb2DzLyubc4oqKL4HtWlYj82Rqeb4RgN01hoatFxp0MwEgJiC1
+OvpLuaOrSvcMVe6GHh5xp0xYzwHs+EO/6YL+Ty7fKMRZquyf308bfY4CN24+tDY
uPS+i3naPL8HTZR6ooabFOVBHVUzyIbl3YXlaO7XkKIOAYZtpwGv8nCTaKQSM2/r
RrjqmoPSTM1x9Q==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:18:12 2026 by rpki-client