This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File:                     UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier:          8UtgVn7+1AwLcRJQT0tuPJsOWA18NPSu69zlqg7+O/A=
Subject key identifier:   27:33:97:91:FD:B8:E9:BF:FF:7A:E9:A8:9B:DC:64:BD:1F:34:59:DE
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer:       /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial:       019C40FD45557853302C738CE6999B37C4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number:          066F
Signing time:             Mon 09 Feb 2026 06:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:05 +0000
Files and hashes:         1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: +oY9unkqdGkSTilfHA+f6wSeXGjKPTf033jg1tkn9dI=)
                          2: Zw0BJ60leHVrZJiWPzlXTx_gu-g.roa (hash: zMGa6j4ctCusyJp2LtMLsXdNvm0G2MCLxoW8FpfFI3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:45:55:78:53:30:2c:73:8c:e6:99:9b:37:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
        Validity
            Not Before: Feb  9 06:01:05 2026 GMT
            Not After : Feb 10 06:01:05 2026 GMT
        Subject: CN=27339791fdb8e9bfff7ae9a89bdc64bd1f3459de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:df:c0:77:95:e1:de:21:91:5a:67:e6:a3:
                    d6:ed:34:83:62:01:6b:b0:c9:9b:43:35:f9:0c:ba:
                    d7:b3:05:36:0c:4f:5c:86:05:f9:d9:0b:b9:7d:46:
                    3a:ff:72:80:c1:b1:be:96:5e:e3:ca:ce:77:0a:71:
                    5a:06:de:c0:b4:70:3c:06:c7:e4:23:48:c5:0d:eb:
                    f2:6c:e8:e1:69:36:c4:e2:1f:58:5f:f3:8d:37:fd:
                    b6:e1:9e:b4:4a:68:6d:14:e6:0b:e1:0c:22:6f:ba:
                    52:12:e6:c7:66:ef:66:f1:5b:10:c4:87:52:10:8a:
                    4b:cf:5b:1c:49:4b:13:e4:a7:95:58:67:45:31:81:
                    6f:53:cc:5b:72:1b:11:a4:5c:a4:13:43:fb:e6:92:
                    42:3b:ef:3c:08:ea:e6:c0:04:b5:84:2d:6b:ec:63:
                    50:d4:ce:dc:ad:eb:ad:e4:2a:7b:32:28:4c:a2:c7:
                    d7:fc:e0:26:38:30:77:e0:d3:60:33:0b:a2:97:a3:
                    fb:a9:62:74:d7:c8:4f:72:09:4a:48:c6:eb:de:d5:
                    05:e7:b2:3c:cf:cc:88:c3:56:b0:f8:03:88:55:1c:
                    7d:6f:9a:bd:b2:05:22:87:0a:d8:92:14:f4:60:3d:
                    1d:11:6e:19:c5:d8:cb:20:88:ab:ec:35:69:f3:23:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:33:97:91:FD:B8:E9:BF:FF:7A:E9:A8:9B:DC:64:BD:1F:34:59:DE
            X509v3 Authority Key Identifier:
                keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8c:d4:02:09:33:df:e4:c3:82:45:8f:3f:16:cf:68:e7:d0:
         82:40:3c:df:ba:6c:dc:81:e4:f3:0f:1d:94:1d:61:9e:6f:ec:
         08:c2:6d:3e:51:4a:7f:ce:a7:c9:fe:8e:81:ed:32:e8:08:04:
         01:67:26:2c:74:82:0b:eb:8a:5c:69:7f:b3:df:b3:0b:3c:77:
         99:bc:60:17:a9:af:f8:74:eb:83:a3:a7:cf:03:fd:ea:9b:bf:
         8e:15:d9:71:0a:88:a9:8d:52:e9:6a:64:96:72:8b:c3:4a:12:
         0c:d1:57:b2:cb:b2:09:c6:34:c9:94:61:ba:2b:72:e2:9d:f7:
         8c:ab:27:b1:77:84:78:10:62:a4:60:1c:4e:d4:92:48:4f:ba:
         61:77:90:8e:15:99:62:e8:2c:c8:a7:3b:1a:48:f9:70:f6:e7:
         60:1a:68:4f:d5:41:c8:26:d7:ad:59:43:f9:44:78:5c:e3:5f:
         ba:e2:ab:ad:2e:47:d7:83:da:2b:c3:08:1f:db:b8:bb:9a:70:
         9e:09:f5:4d:6d:e7:ff:a1:66:4b:16:1f:2d:ab:e7:ba:a5:cc:
         c7:48:2d:29:30:02:3c:2c:d3:67:4d:dd:17:a3:3f:31:00:dd:
         7a:cb:27:45:68:13:f0:4a:f1:52:06:41:54:03:29:e8:cb:18:
         3d:c0:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:45 2026 by rpki-client