This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File:                     UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier:          B2yx3Eedv/7yUwh1LZD29R19MsW+YcGnrTAGXanMq7Q=
Subject key identifier:   17:75:C3:2D:51:31:4B:70:06:DF:8A:5B:49:17:85:79:C5:81:6B:D9
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer:       /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial:       019C43906C214952C6C95399CF7332276BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number:          0B74
Signing time:             Mon 09 Feb 2026 18:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:03 +0000
Files and hashes:         1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: rT+UOA2g2zS9H3amNiFK1CnMlfAiCbvkxM6mV9336pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:6c:21:49:52:c6:c9:53:99:cf:73:32:27:6b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
        Validity
            Not Before: Feb  9 18:01:03 2026 GMT
            Not After : Feb 10 18:01:03 2026 GMT
        Subject: CN=1775c32d51314b7006df8a5b49178579c5816bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:90:60:28:b1:fe:38:fb:ec:71:99:76:7b:
                    ed:41:29:c2:7a:7f:c6:19:ff:dc:52:53:ee:47:66:
                    4d:6c:8f:38:51:d2:67:e6:f6:88:7e:ac:d0:9b:fc:
                    da:ce:0a:45:4f:7e:51:7e:b4:91:77:5e:5c:90:cc:
                    7f:96:06:1a:83:43:1f:ee:e3:6d:3e:8e:2a:1f:3f:
                    4b:49:84:7c:d8:2f:22:12:c3:82:ea:9b:67:ea:ea:
                    ad:9d:53:ed:e2:e0:8f:10:18:7e:0c:4c:c6:34:e8:
                    b5:d1:17:4f:1f:08:3b:94:e8:e7:be:c7:a3:ba:95:
                    0e:8b:02:74:62:c4:cd:3b:36:48:ce:5a:81:82:25:
                    fa:9b:51:6e:cd:0e:11:cf:46:bb:6a:18:9d:d8:e2:
                    6a:91:63:a9:3c:56:44:fc:ec:b6:1f:91:7e:17:c8:
                    3c:ce:c6:81:75:4b:8b:6f:5c:59:85:97:93:8e:ba:
                    54:d0:a7:5a:bc:e2:3f:d3:a7:69:39:c5:b2:11:a3:
                    ee:13:38:70:e9:8b:fa:b9:57:f7:98:a0:d6:2f:29:
                    9f:a1:28:f5:9a:6c:07:32:34:1d:7c:29:65:8b:d5:
                    6c:95:69:4c:aa:ca:63:e0:52:74:76:a3:af:03:b1:
                    f6:cc:06:0c:dd:f1:5d:04:a9:b8:98:03:a0:c9:5c:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:75:C3:2D:51:31:4B:70:06:DF:8A:5B:49:17:85:79:C5:81:6B:D9
            X509v3 Authority Key Identifier:
                keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:99:d0:76:c0:28:05:07:c2:64:46:1a:ec:0a:aa:89:be:cb:
         75:43:60:6d:ff:06:8a:33:dc:b6:b9:9f:8a:3c:08:0e:10:5e:
         46:69:1d:2a:3c:3e:c9:14:87:72:1e:8a:14:83:68:0f:8e:72:
         01:39:9f:ef:2d:f8:5b:c6:9b:d3:1d:ed:29:20:c2:dd:d5:4f:
         e3:8f:15:7e:35:5c:4f:cd:f6:50:57:cc:ae:cd:fc:cf:0c:a4:
         65:57:0f:5e:33:db:a7:07:da:c9:8c:7b:9f:28:a7:71:e5:77:
         c8:0a:1e:2a:d8:bc:2a:b9:96:85:ef:8e:1a:ef:c3:8c:66:95:
         0e:dd:f7:f0:92:3f:31:b7:a9:e3:38:45:83:44:d6:bc:f5:b9:
         1d:d1:b1:42:d6:72:97:17:92:1f:29:8b:49:ff:c7:25:dd:af:
         62:14:7e:cf:1b:d7:4d:c4:23:43:7c:cb:70:53:70:ad:1a:db:
         13:bd:21:b3:79:77:20:ed:e8:de:9d:1c:f2:6d:08:e1:4e:28:
         cb:1e:d7:5c:95:b4:56:52:7b:fe:58:bb:e1:ef:4d:8d:74:8e:
         f0:d8:36:24:4f:d5:8b:6d:68:1b:8f:5f:15:ba:89:85:d6:b1:
         c1:01:f0:66:54:4b:61:24:41:82:e2:5b:09:ac:b3:e0:cf:9f:
         7c:a4:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:23 2026 by rpki-client