This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File:                     UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier:          3mwuUnBluMTtxeHwkhOOEhxbsZu+SGSMc/9shv/v6R8=
Subject key identifier:   5A:E7:F9:FB:20:CB:22:0E:61:1F:17:B2:67:35:91:2D:DD:08:A1:1E
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer:       /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial:       019C42EB2A3A58DF1FFCB8789F7AFE39AC17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number:          1117
Signing time:             Mon 09 Feb 2026 15:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:33 +0000
Files and hashes:         1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
                          2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: jfIKhCEBxowcZ7Xt97Nzmrv4Ota3x/HdCYmXMSTaOa8=)
                          3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
                          4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:2a:3a:58:df:1f:fc:b8:78:9f:7a:fe:39:ac:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
        Validity
            Not Before: Feb  9 15:00:33 2026 GMT
            Not After : Feb 10 15:00:33 2026 GMT
        Subject: CN=5ae7f9fb20cb220e611f17b26735912ddd08a11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:e2:fc:f6:c4:81:3e:6e:59:e7:ea:cb:59:
                    6d:06:e0:c1:90:58:2d:fa:f0:31:be:58:80:52:ac:
                    0d:de:8c:97:9a:b8:2f:f6:ed:b9:c6:b4:54:0d:49:
                    c9:c3:41:2a:73:84:59:50:fc:f8:79:60:df:df:ad:
                    8b:f4:b5:90:86:86:c7:16:45:b4:70:d3:00:64:3c:
                    1a:25:6e:72:10:fb:4a:54:2b:97:f5:31:9c:43:10:
                    3a:98:86:50:bf:99:3d:b9:2d:91:dd:6d:18:6d:47:
                    eb:40:60:da:1c:55:6f:1c:6d:e8:43:4c:a1:52:84:
                    e3:d5:a0:a2:37:a2:30:83:1f:11:83:21:69:46:af:
                    27:38:2c:80:d2:2e:e4:5d:b7:da:d1:6a:39:6d:73:
                    08:b7:d0:c3:9c:13:90:c1:de:9c:41:0c:58:ff:70:
                    82:b0:4e:bb:23:62:6c:40:af:25:46:eb:3e:6d:c4:
                    44:84:b2:e5:03:6d:ef:fe:d5:01:2f:af:8f:56:62:
                    ec:02:b8:79:20:ba:c9:d7:08:5d:01:36:92:73:dc:
                    9f:cb:b5:dd:71:5e:8a:44:81:71:78:e8:16:21:49:
                    c6:cf:ec:1e:a9:b3:ba:7c:66:1b:16:a4:b6:83:87:
                    58:39:2d:13:8f:8d:cf:04:7b:e1:b1:b0:ca:ec:31:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E7:F9:FB:20:CB:22:0E:61:1F:17:B2:67:35:91:2D:DD:08:A1:1E
            X509v3 Authority Key Identifier:
                keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:50:e5:b1:4b:0a:6e:33:ff:d8:cf:49:84:a8:e4:01:db:
         be:b1:da:37:cc:65:fc:68:fb:06:9f:b7:3c:42:22:ec:b9:0a:
         a7:cd:0f:6d:01:ad:94:27:cd:10:25:ae:ac:05:3b:1f:80:08:
         06:0d:84:cb:ec:e2:35:1d:3b:d8:bb:13:f2:80:10:cf:6c:8d:
         bf:79:6e:a5:1b:40:70:35:f8:f2:a0:8a:c9:5b:87:56:f3:2f:
         4c:be:83:cd:fa:56:7c:cf:f4:a2:13:b3:43:68:00:f5:97:ef:
         04:9f:63:96:eb:ff:c9:4d:0e:ec:ed:4f:b2:21:99:d4:fe:4e:
         45:8c:a4:6a:75:0f:b8:e8:ec:01:5a:33:6b:82:db:f7:1b:81:
         37:6d:26:62:08:78:ec:14:d4:e5:8e:7c:b2:7b:3c:0c:62:00:
         af:a1:82:4b:87:eb:9d:9c:3e:36:3a:ee:27:d7:db:24:8c:7c:
         63:a8:e5:7c:07:ff:a7:2e:c0:5d:b8:77:4a:bf:36:ed:83:78:
         f0:56:d2:d1:e4:35:fc:6a:07:5f:b5:0b:a9:8b:00:4e:e8:25:
         83:08:8d:37:bc:d0:8b:c8:f7:97:42:96:aa:37:33:7d:d6:53:
         64:af:b4:dc:92:93:e6:e1:3d:14:f0:8b:7b:03:cc:09:b7:44:
         0b:3c:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:42 2026 by rpki-client