This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File:                     A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier:          pdi4odeCg/R554nac0rIWzDPlTEGjYU+hSVIJY+hdLw=
Subject key identifier:   09:67:11:60:13:33:D1:A1:A9:69:3F:02:76:33:4E:B8:C1:C6:93:A8
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer:       /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial:       019C4434CBE09FBC07017F1EAE959E53765C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number:          0F94
Signing time:             Mon 09 Feb 2026 21:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:36 +0000
Files and hashes:         1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: waHUBIc4qFksZcnAd36TXHWLPUN1QrRHyn/8/02odMI=)
                          2: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (hash: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:cb:e0:9f:bc:07:01:7f:1e:ae:95:9e:53:76:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
        Validity
            Not Before: Feb  9 21:00:36 2026 GMT
            Not After : Feb 10 21:00:36 2026 GMT
        Subject: CN=096711601333d1a1a9693f0276334eb8c1c693a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:8a:e2:df:cd:05:27:0a:f1:57:6c:45:bb:
                    41:07:02:49:6a:89:ab:6b:01:1b:8c:2e:59:c8:98:
                    a5:73:ef:94:df:c7:3a:6e:e9:b5:75:70:4d:89:13:
                    ec:b6:62:3b:a9:1a:ee:57:ba:d2:c8:d1:f0:e6:3c:
                    dd:62:1e:81:fd:a0:56:ab:75:50:7c:d5:de:07:3b:
                    3c:cf:6a:67:9d:c6:a3:0b:09:e2:57:4b:0a:df:b7:
                    6e:1f:28:6c:6f:36:26:b2:26:93:5e:36:97:fb:87:
                    87:ff:aa:4f:9b:22:67:ae:c0:e9:99:2e:7b:51:f0:
                    f2:37:da:5e:3c:ef:07:a2:72:76:1c:52:47:69:4b:
                    b1:fa:86:25:51:0c:88:dd:c2:11:86:19:66:6f:87:
                    43:29:4b:55:b4:dd:8c:8e:8d:63:8e:7a:5f:8c:dd:
                    ae:74:4b:66:cd:8f:99:19:80:b7:d0:cf:bd:91:f2:
                    7f:62:11:0d:dc:0c:a4:de:32:d5:0f:cb:c3:d5:30:
                    a7:35:78:30:8b:13:d8:ac:7c:f6:88:ae:5f:57:d4:
                    c0:65:31:56:24:fe:89:71:81:e5:5f:a7:b1:f1:90:
                    ea:57:13:ea:56:1e:ee:c9:63:b4:d1:cd:46:b1:1e:
                    d0:ca:a1:5a:6d:e6:9c:86:de:98:83:54:28:7e:23:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:11:60:13:33:D1:A1:A9:69:3F:02:76:33:4E:B8:C1:C6:93:A8
            X509v3 Authority Key Identifier:
                keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:e0:fb:97:58:15:4e:25:90:69:a7:ca:55:5d:bc:3a:37:
         07:90:c9:12:ca:9e:13:86:5b:87:36:5a:cb:94:c3:a6:27:97:
         45:89:eb:16:77:83:d5:ee:47:52:a7:b2:9f:1a:9a:a4:32:81:
         9a:78:1f:8e:2c:74:2d:cf:85:3b:14:bc:ca:ba:2b:8f:4f:ab:
         88:c6:7e:cb:c7:84:e8:67:b7:0d:b6:4e:e6:cf:97:ff:c5:2b:
         30:34:65:05:12:fb:f9:d9:a9:e0:5f:7b:92:d0:2f:26:a2:87:
         3b:8b:17:03:f8:ce:0a:7c:ba:42:2f:eb:5a:bd:ba:f6:86:94:
         cd:85:f4:d1:29:18:20:52:c9:03:a5:68:01:6a:88:80:93:4b:
         89:ae:64:6d:b9:33:40:c7:ce:b0:a0:4b:70:f7:ca:48:6a:a9:
         e3:15:70:d3:f1:58:9f:08:0b:ce:b7:86:4f:13:5b:f6:c9:9e:
         55:aa:ca:58:8e:66:e7:0b:f4:3f:61:68:56:69:98:b4:f2:96:
         e1:d0:c1:4b:be:2b:d7:53:81:90:66:23:7b:3d:75:0e:7a:0e:
         af:c7:cb:1a:a7:40:52:88:07:93:c4:1d:87:db:24:f3:1a:ab:
         3c:b5:ca:ac:84:06:77:79:42:91:58:d6:f2:4e:43:88:ee:88:
         f5:c1:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:04:53 2026 by rpki-client