This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File:                     UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier:          C0HXHUi0eEbhW928o7r3TvYznzKGjLLRf76aoS3Bksw=
Subject key identifier:   7C:17:8B:CE:10:3C:8B:D6:C7:10:85:D1:6F:42:B0:D2:B5:AE:4E:97
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer:       /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial:       019C420F23DBEDF72984932B9FA5712F11D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number:          0AAA
Signing time:             Mon 09 Feb 2026 11:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:14 +0000
Files and hashes:         1: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: ga+5QOBuhpWfcxXHMHyx/x0zSAO1QGdctdbki0HS/gE=)
                          2: ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa (hash: cLPzRbnAmpDPM25/ehEAiv6PVrI6yHFxO/FTdnRAlow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:23:db:ed:f7:29:84:93:2b:9f:a5:71:2f:11:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
        Validity
            Not Before: Feb  9 11:00:14 2026 GMT
            Not After : Feb 10 11:00:14 2026 GMT
        Subject: CN=7c178bce103c8bd6c71085d16f42b0d2b5ae4e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:db:f1:e2:43:e3:e8:c3:4a:cb:43:9a:1d:
                    8b:21:79:0a:a9:95:5a:93:55:7f:e6:65:ba:8a:eb:
                    fe:de:40:22:76:6b:d4:a9:2e:1b:2a:55:4b:65:19:
                    84:1e:ee:96:35:39:b0:86:db:a6:f3:6f:5e:66:f0:
                    3c:f7:93:21:49:c3:4f:aa:a1:68:e8:0f:02:ff:94:
                    a6:53:ef:d7:06:74:9c:d1:42:f5:f2:6d:de:81:0d:
                    09:4d:0b:62:0b:25:ff:37:df:f9:ba:6d:72:62:ba:
                    21:4a:03:ff:fa:72:e9:59:e5:3e:12:c9:2e:64:22:
                    d5:e8:9e:30:2d:e7:b0:26:72:78:30:97:3c:b2:40:
                    d2:89:84:58:fd:83:05:c7:67:e4:93:ba:d5:7d:6c:
                    34:d7:cc:c5:40:0c:c1:43:a8:8c:76:e1:81:d2:81:
                    92:e8:3e:3a:ed:88:f8:82:65:16:fe:47:6b:5e:a8:
                    dd:26:33:21:73:da:9d:ac:db:58:38:5e:33:02:a0:
                    40:d3:1e:02:7a:54:ef:c7:fe:c5:8b:5a:80:93:dd:
                    ec:a0:86:1a:cc:07:2f:51:2e:b3:3e:d5:cc:e8:80:
                    2c:95:50:6e:12:37:55:eb:9a:94:b1:26:87:80:a7:
                    29:23:a7:df:53:36:cf:d9:91:ee:5c:7c:c4:bf:b1:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:17:8B:CE:10:3C:8B:D6:C7:10:85:D1:6F:42:B0:D2:B5:AE:4E:97
            X509v3 Authority Key Identifier:
                keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:4d:59:1f:3e:ca:ed:f2:44:24:59:3b:9d:a3:db:c3:51:
         bc:a3:4f:d6:18:71:35:35:96:da:65:5b:c7:f8:12:35:9d:74:
         68:12:ef:ad:d4:a3:47:21:c1:df:12:08:c4:f2:61:dc:55:f3:
         32:6f:b7:bb:51:ba:3f:57:17:77:64:5d:dc:00:ad:37:5c:91:
         d8:b0:05:d9:df:a3:af:74:29:15:0f:bb:71:09:92:21:17:5c:
         7d:ae:0a:54:2c:a9:d6:2d:24:c0:f0:9d:b1:10:ee:66:44:1f:
         d4:e8:90:08:5f:da:47:7c:b4:b1:01:3b:cd:40:74:76:a4:03:
         e2:c9:12:55:30:e8:11:a1:7b:4f:22:56:23:ea:7c:fe:c3:35:
         c8:03:57:0b:e2:4c:56:f5:6f:33:8f:d5:51:87:50:62:43:d2:
         5d:52:66:39:a0:e3:8b:ac:b8:bc:76:19:2a:1d:53:f1:51:6e:
         ec:d2:ba:00:06:c7:cb:11:84:5a:3a:18:51:e7:ec:68:59:9e:
         31:38:e8:e9:fa:7f:bb:57:b9:4e:44:6d:d0:61:39:73:52:13:
         84:63:f1:38:a0:ea:42:08:19:c6:5f:79:8d:69:00:fb:ac:5b:
         46:1d:6f:5b:2f:35:27:07:64:8e:b2:11:93:f9:8e:18:af:04:
         a6:df:0d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:17 2026 by rpki-client