This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File:                     Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier:          4O7EU1nf6wjfzeU5UpW5N7UT/Kr/Wbxz8Ak/gG1JfAU=
Subject key identifier:   F8:27:1F:86:E5:06:D6:E5:10:B7:EC:20:FC:8D:5C:C7:26:D9:2C:49
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer:       /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial:       019C4321E417F6A298F5CEA4F8153C544C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number:          0EF5
Signing time:             Mon 09 Feb 2026 16:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:20 +0000
Files and hashes:         1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: c7MorzhMxl8qDw+Lxx3yneYdMxZMhJPLBogipqiFMoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e4:17:f6:a2:98:f5:ce:a4:f8:15:3c:54:4c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
        Validity
            Not Before: Feb  9 16:00:20 2026 GMT
            Not After : Feb 10 16:00:20 2026 GMT
        Subject: CN=f8271f86e506d6e510b7ec20fc8d5cc726d92c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:f3:0b:cb:a8:c0:c4:b4:17:98:cb:e1:d9:
                    82:22:cd:df:e8:3f:86:b2:1a:05:07:64:4c:4c:2b:
                    a7:9b:94:1e:cc:2b:9c:0a:10:cf:1d:9e:d1:d3:db:
                    6b:ab:ee:6f:4e:e8:ef:50:49:eb:df:fb:f7:71:be:
                    96:5f:9f:4e:90:6f:e0:07:ee:64:19:1a:d4:aa:c0:
                    c3:65:13:11:2f:ce:fd:22:b1:68:3a:96:89:54:6d:
                    59:10:3d:70:08:83:7b:68:8b:b1:70:fd:98:69:84:
                    df:9f:e1:41:cb:4f:e9:2d:8b:a5:03:76:99:24:80:
                    76:79:46:1f:48:c1:46:27:42:da:5f:3a:52:00:85:
                    70:75:60:f3:6a:5f:2b:f9:96:9c:4e:d8:7b:11:91:
                    31:39:5c:22:9f:7f:65:25:82:01:cb:aa:e4:c8:e7:
                    b2:a6:43:85:76:62:aa:0e:99:3d:02:13:34:6e:79:
                    b5:12:d4:e1:64:44:20:78:21:63:38:ab:5f:bf:d9:
                    00:6e:2c:6e:34:cb:bf:9f:53:21:c6:e1:11:fe:59:
                    bb:2e:6c:e7:64:fe:99:98:78:d3:13:86:e3:17:0e:
                    ae:df:1f:3b:fc:a2:9c:c7:c5:4c:ee:38:ad:0e:3b:
                    76:c1:36:c4:de:f4:6d:af:7f:79:46:3a:06:17:1c:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:27:1F:86:E5:06:D6:E5:10:B7:EC:20:FC:8D:5C:C7:26:D9:2C:49
            X509v3 Authority Key Identifier:
                keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:6e:f7:41:a4:d7:ff:2b:d3:c2:76:37:ce:78:06:39:7e:
         12:a6:05:8b:ff:78:91:53:fd:51:28:24:93:80:7d:40:58:d8:
         5f:52:13:17:bf:f8:77:02:70:d6:aa:a6:8a:97:7f:e6:7c:ea:
         09:bd:58:61:6e:7f:18:3c:24:dd:ef:5d:91:02:79:30:b3:62:
         30:42:1d:c8:78:f5:0d:90:aa:25:33:fa:b0:55:58:07:b3:df:
         e7:29:94:87:f3:41:99:84:37:c8:c2:0e:c4:05:3c:fb:ca:cf:
         37:e6:da:6e:ea:e4:f5:5f:f0:23:ab:d7:80:77:f2:fe:79:b1:
         82:39:b2:d0:69:19:e2:9f:34:05:f9:1c:cc:45:2c:de:7b:ef:
         c0:69:ed:32:f3:9e:81:bf:e6:45:50:a2:d6:6a:fc:57:52:ec:
         f1:06:96:6b:c1:52:ce:bd:10:83:aa:d0:4d:d0:4f:0e:ed:b2:
         ec:e9:e2:21:63:30:8e:0c:ce:af:c6:30:19:20:50:58:91:86:
         35:c1:bf:26:0c:03:8a:65:ea:6f:8d:fe:10:fb:da:d6:d8:81:
         ee:0e:2f:0f:04:88:84:41:0a:a9:7e:e0:4c:e2:56:92:47:1e:
         1d:6e:2a:a4:9d:80:2f:07:60:3a:0e:de:44:3d:9e:64:a4:8d:
         41:0a:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:29 2026 by rpki-client