This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File:                     UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier:          EkeP77cDj49FRdS0IYPG2RSFCpf/9Cnx8BJtCKsGTi0=
Subject key identifier:   52:72:16:90:6A:73:05:3D:24:CE:43:C9:63:41:81:45:0B:0D:0B:25
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer:       /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial:       019C4322B7BE5055C66183EA7E807AADE5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number:          102D
Signing time:             Mon 09 Feb 2026 16:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:14 +0000
Files and hashes:         1: 2GdVWpyHcUZuha5almj4Sspe2bE.roa (hash: VRGJz/bJneNeY1Kgq/MA7FsnEvzZjU8NRF6ZfAOUyew=)
                          2: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: uUMoIWFzSARR/NdwBK/eXixS7Cfwb4TMlbMGc/7Qp+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:b7:be:50:55:c6:61:83:ea:7e:80:7a:ad:e5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
        Validity
            Not Before: Feb  9 16:01:14 2026 GMT
            Not After : Feb 10 16:01:14 2026 GMT
        Subject: CN=527216906a73053d24ce43c9634181450b0d0b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:53:24:74:2b:dc:5d:82:0b:a7:e3:5e:e3:
                    3d:fb:b6:7d:4f:cd:ad:79:c4:0e:8f:91:6c:ce:f9:
                    f9:42:d9:41:57:de:d7:8d:32:63:bd:4f:d0:e7:42:
                    54:a3:fe:65:7c:03:d5:57:b9:51:54:d5:d0:72:c0:
                    36:b1:db:c0:f5:9e:87:ef:8b:52:74:94:da:3a:71:
                    b8:07:1b:6f:38:6a:43:01:85:5e:d0:13:4f:5f:bc:
                    e7:c3:07:d1:f6:e4:34:7a:62:4c:b8:07:ff:70:ac:
                    c5:4b:15:91:6e:8c:7d:61:4e:36:78:20:4f:8c:1b:
                    b1:e2:d1:ff:06:63:95:86:bb:28:89:4d:e5:9b:55:
                    52:14:b9:c8:14:36:e9:f7:7b:bf:d5:60:d8:80:55:
                    83:dd:b3:6e:61:0a:2d:24:19:38:42:d1:5b:ae:98:
                    6e:89:ab:ee:15:89:68:49:2f:50:7b:03:34:3d:0f:
                    4e:82:67:2f:a3:5a:d2:8b:c2:92:d0:83:8f:2f:d9:
                    66:c5:62:4e:a9:1b:c4:03:3a:aa:c1:ac:9d:d1:11:
                    90:81:47:a6:1f:35:9d:a7:76:23:31:ca:3d:2c:b4:
                    84:43:56:b2:d6:f7:5e:5a:3b:58:5d:0f:ea:ca:f9:
                    4e:ba:49:08:30:70:aa:93:02:3b:f2:ca:6f:71:b3:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:16:90:6A:73:05:3D:24:CE:43:C9:63:41:81:45:0B:0D:0B:25
            X509v3 Authority Key Identifier:
                keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8c:f7:ea:aa:db:98:03:40:4b:47:d0:bb:09:e1:be:65:56:
         14:8a:2e:48:c0:4c:02:5c:90:b5:a4:60:5b:c0:7d:39:a7:0d:
         5e:5b:c3:68:c3:24:e8:8e:3b:12:b3:54:20:3a:39:a4:cc:41:
         64:2f:77:dc:77:7f:de:c8:a7:9b:05:95:e8:b6:43:7f:ea:e7:
         40:36:d8:f6:55:a0:19:78:ed:41:01:2c:4b:38:96:c7:14:31:
         bd:fc:b3:71:41:21:79:71:58:e1:e1:0e:05:5b:32:17:0e:83:
         b6:00:ef:5d:9b:f3:98:b0:30:b7:b9:29:33:8f:4c:de:01:9d:
         01:c8:2b:be:ce:e4:ab:df:a4:10:d9:82:51:72:5d:54:79:8a:
         4f:94:7c:8b:c7:85:47:ee:cb:5b:cc:13:a8:07:17:2b:86:5d:
         a8:73:36:98:5e:b5:09:2e:21:01:b2:8b:83:1e:ee:44:4a:ac:
         fb:9e:b1:64:4b:bc:8d:26:cd:fd:ce:19:ba:b1:eb:55:1b:64:
         b1:62:e7:e1:8d:37:7f:0a:a6:16:3c:b8:f0:94:78:24:ce:15:
         d3:39:00:36:b2:80:4f:0c:4f:40:35:b2:23:0e:8a:f8:99:d4:
         33:29:ba:23:38:cf:d2:e9:d5:d8:25:ef:38:08:eb:f8:d3:2a:
         22:18:23:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:51 2026 by rpki-client