This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File:                     sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier:          /M1x2iGmejBEdvdLMZtE0EnFLWdek357KkywLdSy65k=
Subject key identifier:   4C:59:71:AE:9E:57:95:69:C4:E4:66:4D:4E:72:0A:CC:8A:23:26:F1
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer:       /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial:       019C43FE67FBEB2F4F5868A02163EAB5F77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 20:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:11 +0000
Files and hashes:         1: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (hash: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY=)
                          2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: 3dv6sjfRZsSrwvn/YMB/AGs8KmznunPCNnmfraOcCeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:67:fb:eb:2f:4f:58:68:a0:21:63:ea:b5:f7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
        Validity
            Not Before: Feb  9 20:01:11 2026 GMT
            Not After : Feb 10 20:01:11 2026 GMT
        Subject: CN=4c5971ae9e579569c4e4664d4e720acc8a2326f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:0b:a2:ce:c6:b0:f2:05:e6:6a:e2:07:14:
                    47:76:54:cd:ad:4e:7b:92:84:02:b8:dd:18:9b:a4:
                    35:13:5d:59:32:cd:f8:1e:c5:bc:7d:83:69:bd:7e:
                    11:f0:87:b3:a6:64:f7:df:98:8e:23:ed:4a:18:44:
                    20:db:86:df:e0:a6:ba:51:cb:c6:32:ca:cf:c4:43:
                    e0:30:6a:58:7c:af:63:b8:4d:af:61:e5:3b:99:c3:
                    42:e4:16:23:94:a2:73:9e:db:67:93:80:65:e5:3e:
                    eb:4b:8c:27:d6:82:11:78:f5:1f:0a:76:cb:8f:e0:
                    fb:68:c7:2f:95:c1:0a:45:aa:67:41:62:b6:9f:53:
                    bd:78:5f:77:e8:12:bd:25:5d:1e:21:11:29:02:53:
                    25:43:20:bc:0b:ca:7d:59:dc:98:8d:58:ba:b6:d6:
                    42:f2:8d:72:b4:5e:e9:db:98:d6:cf:20:0d:f1:25:
                    0a:a7:bf:f5:b5:0d:74:d7:f3:f9:eb:4b:c5:cd:dc:
                    06:f8:29:32:92:e9:99:e2:77:c4:02:ef:80:68:e3:
                    d0:55:5d:0f:f8:d3:84:4c:b2:c2:74:d4:e2:89:17:
                    77:37:49:34:49:dc:50:5d:08:65:47:ef:a3:de:d1:
                    7e:a7:23:bc:37:d2:5b:cd:d2:8e:5a:58:a8:51:f8:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:59:71:AE:9E:57:95:69:C4:E4:66:4D:4E:72:0A:CC:8A:23:26:F1
            X509v3 Authority Key Identifier:
                keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2e:5d:95:05:37:f2:85:f1:67:ac:92:76:6f:63:e5:50:a7:
         8b:57:2d:e0:b2:f4:9e:b6:35:e4:31:f1:79:fe:e8:a5:8c:a2:
         33:fb:1e:a9:73:1f:56:fc:9d:ae:1f:b7:52:a8:91:a0:07:a0:
         d8:25:91:e7:cf:09:45:84:20:34:2a:69:25:c7:3f:3c:5a:3b:
         ec:31:9c:b4:03:ca:5e:fe:a5:30:39:44:58:2b:ba:b7:67:4a:
         d2:d3:d4:57:2d:e8:ea:72:5a:50:d4:f5:2d:56:de:4f:2e:a6:
         1b:c0:ca:08:86:54:83:f7:39:52:72:8c:92:59:69:ea:08:69:
         f7:76:43:9d:ed:0a:ac:b2:80:8b:eb:0a:9e:c3:7f:70:91:b3:
         67:48:8e:fc:d0:e9:38:90:63:c3:90:ba:d8:86:0d:c7:61:a5:
         55:1c:9c:c4:2f:13:d9:46:13:80:f1:55:d2:98:b2:40:b9:35:
         eb:1d:cd:99:94:53:53:2a:08:23:dc:b7:3b:9c:01:21:e2:14:
         97:84:69:dd:6d:5b:db:f3:db:ad:74:45:c6:ce:2d:c6:51:02:
         75:91:9a:00:0f:bd:0f:62:4e:b0:4a:6a:0d:ae:9f:2f:96:74:
         ae:67:6e:ee:29:27:ce:e1:12:eb:49:e9:9a:2a:67:79:7d:9a:
         88:07:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:47:11 2026 by rpki-client