This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File:                     ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier:          SJStr429BJ9A+kFqq9aaM8Jq39mWYunBgdern+3nZ7g=
Subject key identifier:   E3:49:6B:60:57:C6:2A:20:D1:5C:5E:2B:FE:BF:25:4D:26:D5:05:46
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer:       /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial:       019C44D9C8C66B4CA3D377123241F080C857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number:          17A5
Signing time:             Tue 10 Feb 2026 00:00:49 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:49 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:49 +0000
Files and hashes:         1: NuqvGLGVW54T2_CK4Y8l2k93wFg.roa (hash: DT5naWAM2r0ZiUJDhX9HJ7rLzQINkgWuAJdmInUQ/sA=)
                          2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: eJ/FaLZXwVCsAcemeQI2lhYUGYKfPL60r7IRqGFqwfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:c8:c6:6b:4c:a3:d3:77:12:32:41:f0:80:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
        Validity
            Not Before: Feb 10 00:00:49 2026 GMT
            Not After : Feb 11 00:00:49 2026 GMT
        Subject: CN=e3496b6057c62a20d15c5e2bfebf254d26d50546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:b9:65:f6:3f:d9:1a:0d:92:b0:26:d0:23:
                    5d:fc:75:3d:07:33:39:bc:26:3c:67:29:a5:b0:bd:
                    d1:d8:23:ec:10:e7:9a:e6:60:f2:99:3b:5a:2b:36:
                    e8:d2:d1:59:af:06:5c:8c:45:32:6a:ea:ab:ee:bb:
                    32:bb:43:4f:fd:96:1f:74:e4:4d:33:46:74:cf:c9:
                    15:7a:ff:91:52:d6:4b:99:92:3e:df:34:af:87:93:
                    48:40:fa:40:f1:fb:35:69:c9:b9:0b:a2:63:af:3c:
                    29:56:e4:6d:de:a1:bc:46:9a:6b:21:7d:fa:b4:78:
                    f4:43:ee:8d:83:58:10:8e:25:c3:ef:d3:b3:a5:a7:
                    10:e3:5f:a6:dc:2a:c7:2b:8f:49:13:be:98:a5:92:
                    a4:f6:c9:8e:c1:2a:96:99:36:02:6f:85:b0:73:2b:
                    7b:d4:bb:ce:08:a2:07:ff:0a:95:40:f0:10:96:d6:
                    37:4b:b4:f8:a9:b1:92:d4:be:31:30:5d:8e:e8:11:
                    0d:fe:e2:4d:2f:43:ba:f4:8e:1f:ab:1e:29:ee:73:
                    47:65:af:53:0f:e5:cb:b6:b6:02:f0:3b:ef:c9:5f:
                    5b:e8:41:9d:f4:80:88:cf:d2:a3:24:b5:77:34:76:
                    81:df:7a:71:0c:05:e5:ec:18:7f:97:e9:0b:22:2f:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:49:6B:60:57:C6:2A:20:D1:5C:5E:2B:FE:BF:25:4D:26:D5:05:46
            X509v3 Authority Key Identifier:
                keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:b2:e7:cb:b9:6d:3c:4d:98:53:2d:dc:6a:ec:da:ab:6f:
         7d:2b:88:a3:04:de:9a:e1:bf:ca:f2:9a:67:73:35:45:96:a0:
         54:74:34:10:b2:a2:73:4c:f2:dc:12:c1:d3:f9:c5:31:38:65:
         cf:59:c5:ff:27:2c:c4:ce:a1:a1:e0:d8:c6:29:e3:b7:14:bb:
         ad:47:2d:ad:76:06:7a:92:ee:87:e8:e0:e6:e6:d3:b4:84:3c:
         7c:18:b2:0c:0d:0e:23:15:f8:4d:71:82:43:9e:1d:d5:99:39:
         c5:ba:c6:04:17:61:26:ba:96:11:27:55:e7:5b:74:d0:95:de:
         07:b2:5f:bb:f5:02:91:53:a8:7f:ca:03:36:fa:6c:54:0a:e9:
         17:d2:8e:69:e0:fe:61:f9:c6:6f:65:12:ee:45:9d:1b:c0:a2:
         cd:12:95:c4:f0:35:09:f0:de:e6:2e:a8:2c:b5:e5:34:76:98:
         d2:6f:38:5a:2f:6d:d4:3c:b2:81:20:ca:18:f3:c6:11:30:ef:
         7a:e0:6f:78:93:3a:fd:bc:99:4f:8d:a4:2b:10:59:3a:2d:78:
         45:43:84:2e:c1:8e:ff:ba:ab:78:5e:f8:b0:70:e8:30:75:89:
         92:5e:db:b7:56:c4:01:47:78:dd:d5:d9:96:c4:66:7f:ea:74:
         42:0d:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:33:28 2026 by rpki-client