This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File:                     UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier:          3U0Gf/ZQJPNmcTxHnrqbI8LGbAccK+GPjjiG4k1FdnA=
Subject key identifier:   0C:F9:05:30:66:04:10:5F:01:EE:52:BB:4B:A3:B0:59:21:C4:63:69
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer:       /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial:       019C41A15ACE1C28705E01A7B6D2EE170718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 09:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:19 +0000
Files and hashes:         1: H962oq62C4HZ1q-2ZR6ka9i7iTk.roa (hash: BBJJ5WWdTfXTRvB9xlvrZCxW2c0xyH6m419fkAsKFyU=)
                          2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: my1xbM4S1bjwhY7hlA+Xqvg3izIfpbCU5iZpqqsEFMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:5a:ce:1c:28:70:5e:01:a7:b6:d2:ee:17:07:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51626068942586ce95702103bac899d23fcf7242
        Validity
            Not Before: Feb  9 09:00:19 2026 GMT
            Not After : Feb 10 09:00:19 2026 GMT
        Subject: CN=0cf905306604105f01ee52bb4ba3b05921c46369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:48:67:c2:12:da:cc:66:a2:fc:88:fd:e2:
                    92:27:a5:f1:3c:e5:f5:d6:eb:cd:24:50:ed:64:5c:
                    7e:27:f8:be:c9:68:7a:a9:65:b4:74:c9:83:c3:96:
                    5f:d1:b1:d3:39:3e:87:16:72:ea:a6:4b:11:2b:dc:
                    c7:f8:b2:b6:47:60:ca:9c:74:10:3b:4a:1f:a4:33:
                    cc:6b:ad:cc:21:7e:76:fc:13:e8:60:f1:85:1c:3c:
                    c8:da:68:57:3e:21:98:a6:72:4c:01:8b:93:18:22:
                    69:2a:23:47:ea:c9:67:3e:86:11:96:99:40:5d:c9:
                    a4:26:6e:af:3b:46:3c:54:f8:f1:d9:db:b4:35:d1:
                    a8:90:82:36:ff:45:4d:87:ce:9a:92:4a:ff:37:f1:
                    25:35:73:98:c6:13:9d:3e:e4:74:2f:52:7d:e0:49:
                    b3:d0:3a:9e:d8:13:2e:e3:b1:aa:ff:48:b6:05:dd:
                    6d:aa:7a:c7:99:00:b5:c7:1e:4f:a1:73:05:5a:9d:
                    90:51:29:ab:d0:b1:4f:e2:8b:d4:f5:a4:44:ba:43:
                    71:8e:78:24:74:44:35:78:6c:3e:7b:6a:82:02:7a:
                    e3:ec:b3:ea:6f:1f:d7:20:c8:58:23:46:37:72:d9:
                    9f:11:e9:d0:26:f1:e4:5d:b4:cf:03:f9:30:58:d9:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:05:30:66:04:10:5F:01:EE:52:BB:4B:A3:B0:59:21:C4:63:69
            X509v3 Authority Key Identifier:
                keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:03:ef:59:75:63:16:c7:30:b2:f4:14:cc:88:93:88:ac:09:
         73:c3:df:d7:dc:ea:2f:a7:79:5b:95:7b:27:4f:66:66:e2:c5:
         e0:b0:f6:2e:11:ce:ae:78:e4:83:c6:cc:aa:3f:d3:04:47:62:
         f9:e7:15:86:ca:a8:2e:d6:b7:01:af:8e:d2:dc:7a:fe:c0:f5:
         cb:67:09:83:89:90:be:ca:be:d5:a8:1c:1a:4f:5c:41:75:ce:
         17:12:24:b1:d2:27:48:86:df:d9:c8:f0:f1:90:6c:64:74:a9:
         e6:28:cd:42:ad:97:64:c3:6c:95:e7:36:6e:a5:e4:ff:45:9b:
         0b:4a:1d:bf:1c:a0:2f:01:af:23:fa:da:0c:3a:ac:b3:62:40:
         c8:1d:30:79:7f:e5:d0:47:d7:9a:01:26:cd:c4:04:ed:25:7c:
         43:cb:6c:d5:6d:21:c8:9e:42:01:30:69:bd:1a:c3:9a:c7:f5:
         96:fe:c7:26:51:ef:be:11:8d:1e:34:9b:16:77:a1:d4:34:52:
         90:e3:da:43:d2:ad:23:68:1a:2c:2b:00:f1:8c:7a:4b:1e:42:
         4c:6d:8f:35:3d:6c:75:90:8b:20:9f:a2:6e:64:0a:b8:88:c0:
         71:82:8b:ea:2d:47:53:9d:d9:8b:81:e2:22:cf:24:c4:31:76:
         1e:88:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:36 2026 by rpki-client