This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File:                     Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier:          qq01M4re0KeB5uza5ohM5+x22C/RCZtoBTzBSNQ+/q4=
Subject key identifier:   7A:62:3A:70:B5:36:D1:9C:30:9E:22:4A:29:05:E6:EF:2E:20:A5:5C
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer:       /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial:       019C432244853D836C0C6367ECFDFF9447C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number:          1732
Signing time:             Mon 09 Feb 2026 16:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:45 +0000
Files and hashes:         1: DkKDajpTHwTuNMIpxKTAMDGQDDo.roa (hash: X10Ua4dlXVpqCEjX6L/K3mZaPDpI5fuPVZc9nBQdT8k=)
                          2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: FtIUIJFLNfij8qn9+eK7YIHSTAZPgjHK54VbWs6uz5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:44:85:3d:83:6c:0c:63:67:ec:fd:ff:94:47:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
        Validity
            Not Before: Feb  9 16:00:45 2026 GMT
            Not After : Feb 10 16:00:45 2026 GMT
        Subject: CN=7a623a70b536d19c309e224a2905e6ef2e20a55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:91:64:93:5d:41:b5:40:76:0c:06:79:89:
                    f3:63:10:4f:6a:8f:08:c0:7d:25:40:6b:f6:ef:74:
                    57:86:99:e0:03:3b:f4:ce:be:cf:88:ef:55:77:6c:
                    78:4f:61:55:89:88:24:dd:2c:1e:80:da:30:bc:c0:
                    1a:8a:64:de:94:4e:f8:56:2c:b4:40:25:e6:19:80:
                    34:c7:9a:28:27:88:15:7c:01:36:a2:81:1c:43:8c:
                    ea:94:61:34:4b:b0:54:67:f6:a5:a6:52:b5:bf:35:
                    65:5e:26:1d:03:13:8e:f9:69:57:5d:fe:d0:21:e7:
                    c4:67:25:31:4b:a7:cf:9d:d5:e9:29:f3:ec:cc:57:
                    ba:e8:62:54:22:62:ad:2c:62:47:5a:c6:6c:a3:04:
                    eb:1f:bd:36:37:ed:29:13:44:1d:c4:35:36:96:b1:
                    d1:b9:b2:8d:10:cd:d2:f3:7d:bb:77:72:ae:ee:a4:
                    33:57:4f:65:7f:14:09:86:45:39:e9:e5:b7:60:62:
                    67:95:3d:30:f0:ac:bd:53:f8:2f:d2:ed:53:01:d0:
                    eb:56:bb:bb:76:e5:9b:ee:94:9e:6d:8c:f2:17:36:
                    87:62:32:ba:a4:2b:53:55:02:2c:21:20:35:c0:71:
                    dd:f5:53:a4:f3:ed:36:3e:8b:10:53:1b:c2:a8:ed:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:3A:70:B5:36:D1:9C:30:9E:22:4A:29:05:E6:EF:2E:20:A5:5C
            X509v3 Authority Key Identifier:
                keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:da:cd:41:18:d7:ff:89:f4:28:ca:59:31:89:af:20:8d:03:
         99:fe:1a:b4:3d:ac:62:db:47:a5:d2:73:8e:08:1f:e9:c6:da:
         0f:c5:6c:7d:a3:7e:dd:a3:79:df:98:8c:e0:d1:80:7f:29:3e:
         ae:b0:50:20:4b:b3:1b:e8:1a:88:45:42:14:01:da:ed:a6:ca:
         0d:6f:49:15:a1:f0:4b:f1:b5:5b:a0:60:ff:5a:20:96:d0:34:
         73:2d:fe:67:9e:36:cb:18:84:b0:49:b0:78:96:13:40:7b:2a:
         b5:be:4d:de:5b:52:1e:cd:e5:52:8a:fb:60:c6:fd:5a:8d:f4:
         57:c3:ca:97:1f:13:cf:4a:4f:45:8f:5b:d9:60:48:aa:c6:3c:
         44:7e:7f:14:8a:9a:e2:0b:9f:14:b1:90:8d:5b:6d:70:74:f7:
         05:a8:41:07:4e:0f:51:01:40:8f:f6:8b:32:e8:3f:7e:2d:38:
         27:24:8b:51:83:aa:f0:24:d6:d7:b4:1f:8b:89:c1:bb:43:d8:
         8f:14:a5:da:3e:df:aa:f7:bd:4c:5b:17:b2:10:8a:c7:14:ff:
         7f:0c:5d:29:12:e1:03:0c:e1:23:55:67:24:e7:de:96:80:ba:
         68:d3:fd:48:45:b1:7b:63:a5:83:1e:5e:db:bf:d8:24:20:14:
         f6:40:9d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIkSFPYNsDGNn7P3/lEfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWVkYzU3NmJkZjU2MDBiZmU0YzQ3OTAzODVmYWNlZGM0
NmYwMzQwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD
Eyg3YTYyM2E3MGI1MzZkMTljMzA5ZTIyNGEyOTA1ZTZlZjJlMjBhNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDeRZJNdQbVAdgwGeYnzYxBPao8I
wH0lQGv273RXhpngAzv0zr7PiO9Vd2x4T2FViYgk3SwegNowvMAaimTelE74Viy0
QCXmGYA0x5ooJ4gVfAE2ooEcQ4zqlGE0S7BUZ/alplK1vzVlXiYdAxOO+WlXXf7Q
IefEZyUxS6fPndXpKfPszFe66GJUImKtLGJHWsZsowTrH702N+0pE0QdxDU2lrHR
ubKNEM3S8327d3Ku7qQzV09lfxQJhkU56eW3YGJnlT0w8Ky9U/gv0u1TAdDrVru7
duWb7pSebYzyFzaHYjK6pCtTVQIsISA1wHHd9VOk8+02PosQUxvCqO1rFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpiOnC1NtGcMJ4iSikF5u8uIKVcMB8GA1UdIwQY
MBaAFFGu3Fdr31YAv+TEeQOF+s7cRvA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQt
YjE0ZTU5OWMwY2MyLzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9iNWQzYjgtYmRiZi00NmZiLWFhOTQtYjE0ZTU5OWMwY2My
LzEvVWE3Y1YydmZWZ0NfNU1SNUE0WDZ6dHhHOERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9rNQRjX
/4n0KMpZMYmvII0Dmf4atD2sYttHpdJzjggf6cbaD8VsfaN+3aN535iM4NGAfyk+
rrBQIEuzG+gaiEVCFAHa7abKDW9JFaHwS/G1W6Bg/1ogltA0cy3+Z542yxiEsEmw
eJYTQHsqtb5N3ltSHs3lUor7YMb9Wo30V8PKlx8Tz0pPRY9b2WBIqsY8RH5/FIqa
4gufFLGQjVttcHT3BahBB04PUQFAj/aLMug/fi04JySLUYOq8CTW17Qfi4nBu0PY
jxSl2j7fqve9TFsXshCKxxT/fwxdKRLhAwzhI1VnJOfeloC6aNP9SEWxe2Olgx5e
27/YJCAU9kCdTg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:47 2026 by rpki-client