This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File:                     0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier:          IrvOvU6SrttpPXvKZoqdXZ2Zb/RN+Z9E9Ortf08+8Pg=
Subject key identifier:   68:27:98:CB:E9:88:DD:B0:EC:7F:F5:0C:AA:EB:AC:60:D9:D3:3C:5E
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer:       /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial:       019C41D8761EC9D64203793E3EE040CFBA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number:          03EA
Signing time:             Mon 09 Feb 2026 10:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:30 +0000
Files and hashes:         1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: YR9ULhc7d8i0oaOHtHV4RJKU4xYUwDNZehxPXrw62D8=)
                          2: j330ZQOtQiCZJuxomPWTMdBKcHQ.roa (hash: MzEVW/Ea4Il5bIfwlWQJ+ibRovLnW9XexRlsZqbNutk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:76:1e:c9:d6:42:03:79:3e:3e:e0:40:cf:ba:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
        Validity
            Not Before: Feb  9 10:00:30 2026 GMT
            Not After : Feb 10 10:00:30 2026 GMT
        Subject: CN=682798cbe988ddb0ec7ff50caaebac60d9d33c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:6e:0d:c9:04:47:a1:cf:c2:11:93:24:78:
                    98:52:5e:6a:68:8d:c1:5f:51:fe:a5:20:f7:29:97:
                    21:a4:d9:35:62:95:6f:bc:73:e2:c0:1b:d1:9e:d4:
                    45:43:f3:a8:9f:c8:0a:de:69:09:ab:b2:0d:c1:69:
                    3b:90:00:d3:7a:f7:67:b6:d3:9e:87:b7:58:71:df:
                    4f:67:55:04:c1:61:2d:47:e8:9c:16:c5:31:0e:80:
                    ca:2c:5b:d9:18:7e:1c:e3:97:ec:9a:39:4f:6c:68:
                    a6:92:d2:00:89:a4:9a:0b:e5:37:10:80:58:3a:39:
                    5b:3b:c3:e8:6d:06:6d:93:9f:25:01:9b:f4:f0:41:
                    95:af:03:5c:da:4a:67:a4:79:2b:c6:5b:b0:27:51:
                    02:dd:cc:29:86:81:76:bc:70:e4:82:97:25:f1:3a:
                    cf:55:31:4e:28:4e:76:74:8f:12:24:7f:4a:a5:69:
                    b3:13:62:4d:61:5c:97:8d:16:16:41:f8:a5:40:99:
                    2e:3a:4f:ed:e4:0d:1c:7f:37:fa:86:10:7f:e3:a0:
                    6b:81:15:a8:41:e5:b9:f5:15:fb:0a:c9:46:59:58:
                    93:ab:c5:11:b8:80:49:62:73:92:d7:8c:c2:7f:51:
                    12:21:be:71:7f:16:0c:52:55:3d:2e:06:55:3f:25:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:98:CB:E9:88:DD:B0:EC:7F:F5:0C:AA:EB:AC:60:D9:D3:3C:5E
            X509v3 Authority Key Identifier:
                keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:af:39:9c:bd:9e:1b:53:b6:a2:c4:c0:18:02:7b:01:ef:
         8f:b2:87:ae:d7:82:82:73:28:fc:96:34:7c:f3:24:14:56:4f:
         17:25:71:82:a3:f4:0c:18:bd:7d:1a:27:f9:29:63:e2:5e:12:
         e1:e1:48:f1:dc:df:c6:ff:28:e1:60:4e:10:b6:1a:d8:43:bd:
         7c:e8:d8:c8:63:c4:25:20:f4:c4:ea:fd:89:ec:aa:65:0d:8c:
         74:83:9b:49:8c:ec:f8:b2:bb:02:6b:f3:55:cd:87:4c:b9:e0:
         bd:94:18:8e:c1:9c:62:b0:e7:46:e7:50:c6:9f:94:4f:a2:77:
         fc:d2:eb:04:d4:0c:f4:c0:96:fb:e4:91:26:94:d0:8c:45:0c:
         a0:32:a3:17:7f:2f:4d:96:26:b2:dc:9b:d5:ea:46:3e:51:0a:
         1c:e0:63:63:4a:5c:62:dd:2f:34:36:0a:39:57:9d:cf:5a:76:
         d5:b0:73:2b:52:6e:0b:e3:a6:72:5c:a4:95:c8:3f:07:59:16:
         d2:d3:46:fd:c8:6e:39:b8:fe:ea:4f:f8:08:0b:92:f6:05:96:
         cd:86:70:61:99:e0:ba:4a:a9:64:c1:05:34:f5:2b:ad:6f:86:
         f9:db:f2:74:06:e8:3b:b3:c9:d0:e3:54:0b:7b:94:5c:00:a6:
         e4:a8:38:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:56 2026 by rpki-client