This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File:                     uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier:          U9iG1ePXTDjQ+u/sT9vnsK/We7RCYGrTXLtR2MtN79I=
Subject key identifier:   99:D1:13:4A:B2:87:43:68:CD:96:BB:C1:67:55:9D:C9:61:C6:47:67
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer:       /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial:       019C41A1FD9D7176F3D402FF54493E7F07A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number:          0601
Signing time:             Mon 09 Feb 2026 09:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:01 +0000
Files and hashes:         1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
                          2: s28CR1gLazBENQfv0iRlHI-K3WE.roa (hash: Tp9gbqVHSFtjO/KmeIi7tCsMEDD0ASIghsoQ31CGOes=)
                          3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: 5C3LxJH59C7vogoahmVA2YOCYEmV44+Li+3LSNbzUU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:fd:9d:71:76:f3:d4:02:ff:54:49:3e:7f:07:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
        Validity
            Not Before: Feb  9 09:01:01 2026 GMT
            Not After : Feb 10 09:01:01 2026 GMT
        Subject: CN=99d1134ab2874368cd96bbc167559dc961c64767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:6c:0f:91:a1:9f:13:7d:fd:3a:2f:16:06:
                    5a:96:58:21:33:a1:04:bf:68:ef:67:8f:18:44:30:
                    aa:1d:43:34:85:b1:f0:eb:38:3d:ce:79:cd:b0:92:
                    a8:00:44:ee:6c:41:71:be:35:7c:c0:5b:4f:64:fd:
                    ca:d7:9d:5a:ba:af:31:a5:81:e6:a0:70:61:85:14:
                    3b:63:bb:2a:9c:f2:ae:c1:cd:63:05:f7:cf:8e:a9:
                    5c:a5:c5:ce:eb:a8:c4:d7:6d:c5:48:37:36:ef:bc:
                    a9:f0:9b:f8:13:17:f4:a4:78:d6:64:d2:ab:32:6f:
                    ec:09:9c:3d:33:74:f5:f4:8c:d7:16:7c:23:68:f3:
                    36:69:e0:ad:c8:c2:bb:f0:48:71:de:0e:25:a1:a6:
                    dd:de:d7:2a:66:c8:de:35:ae:e1:f1:96:24:06:bd:
                    19:07:62:6c:8c:d8:a5:c6:ce:6b:10:51:d3:ef:38:
                    97:01:1c:d6:1a:cf:9c:bc:a0:f6:62:dd:b2:b0:84:
                    ab:37:67:6d:37:15:90:46:7c:6a:a3:23:cb:8b:80:
                    66:3c:25:fd:64:fe:5e:10:c2:40:20:a0:31:1e:c8:
                    26:1d:8a:fb:14:21:a5:01:83:2d:3b:c3:10:db:9e:
                    a3:e3:4f:b7:f4:d2:13:d1:4c:03:d2:ca:5d:fe:af:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D1:13:4A:B2:87:43:68:CD:96:BB:C1:67:55:9D:C9:61:C6:47:67
            X509v3 Authority Key Identifier:
                keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:1a:d4:2d:dc:b7:c9:63:3b:50:74:00:49:c6:af:a5:5e:
         a8:11:12:8d:75:6f:6d:6e:63:a6:de:1a:56:5a:dc:59:6f:33:
         67:07:7d:90:11:e2:6c:5e:0e:e1:34:a2:dc:ad:d7:5d:4f:70:
         f5:ce:15:ec:89:ea:88:c3:35:56:c6:52:1d:ce:16:df:9a:90:
         bf:a8:22:32:3f:00:84:d8:41:d7:8f:30:a2:e8:5a:06:6a:bc:
         09:0e:f1:3a:01:ca:9b:17:c5:11:a2:8b:f2:81:23:90:21:47:
         a9:df:85:a8:72:d7:4d:ee:4d:e7:3f:e9:25:dd:6a:f7:03:c5:
         9c:29:09:5e:c7:c3:b3:c7:2c:87:98:59:dc:96:06:be:27:cf:
         98:97:a4:60:43:87:8d:5e:51:fe:01:e0:d4:d7:4e:db:f8:6b:
         f0:0d:ae:0f:bd:d9:d5:5d:46:ef:3a:5f:88:35:91:bc:0f:e1:
         87:24:60:42:7a:65:e9:8e:8e:b1:b2:05:64:a0:6f:ba:54:94:
         54:1d:cc:47:4c:96:ed:c2:a8:51:b6:6d:2d:01:2c:5e:2f:62:
         ca:ac:50:75:9a:11:39:0a:44:fa:e0:eb:62:0c:fe:d4:46:60:
         dc:fe:24:0a:3c:49:32:a2:ea:7e:af:fb:04:c0:fc:6b:29:cd:
         42:4b:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:02 2026 by rpki-client