This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File:                     UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier:          FCQdLX0JeLsg3QPZiQvm4/yf0KBpK3NXvp0j8A9yiEo=
Subject key identifier:   0E:44:B9:86:D9:82:6A:7B:86:F8:7F:82:4B:63:FC:8F:C7:E0:D2:D3
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer:       /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial:       019C435913D02CBF2648BF929CD499112BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:37 +0000
Files and hashes:         1: 1C87-YoMU3E-DWxYQ0HoaaKkai4.roa (hash: D7kY1Dcux9TiG7PKR2Pb7es9yDu4CucVa5I7EWiBNZU=)
                          2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: jl+lgLTtKQ45OyzQy1qNVvxqokF3ceUHiZg0c70TtHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:13:d0:2c:bf:26:48:bf:92:9c:d4:99:11:2b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
        Validity
            Not Before: Feb  9 17:00:37 2026 GMT
            Not After : Feb 10 17:00:37 2026 GMT
        Subject: CN=0e44b986d9826a7b86f87f824b63fc8fc7e0d2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:e3:d0:57:f8:22:2a:c3:d4:05:56:8c:9e:
                    e7:3f:b0:6c:c1:04:f2:37:55:b2:3d:e3:7d:14:b6:
                    8f:bd:24:58:ef:7a:a6:33:ab:43:22:ef:58:a7:d0:
                    74:44:f7:b8:32:76:33:24:78:22:20:1f:d1:e9:0c:
                    b3:3f:bc:11:a9:c2:24:77:41:e3:49:61:31:16:76:
                    75:34:e3:e7:8a:b7:d2:5a:a2:85:1c:2e:14:67:7f:
                    6f:06:53:e1:45:1d:73:23:1a:46:74:cc:ae:a1:35:
                    39:1c:4e:d1:c7:77:e5:1a:69:e4:10:11:6e:8b:2f:
                    b5:96:12:c9:a6:de:6a:bd:ac:c1:5b:fb:60:99:0e:
                    54:d9:44:01:fb:21:bf:75:99:43:7b:72:87:bb:13:
                    62:af:3d:67:48:dc:8a:24:cd:34:e9:5f:05:39:5b:
                    46:a8:a0:c2:c7:12:57:f9:6a:e0:bd:0a:c9:bb:a0:
                    62:f1:44:d2:68:7a:6d:90:03:9c:e5:4d:c1:a7:23:
                    e5:7e:c5:d8:2e:95:a8:92:97:9a:d5:e5:d5:c0:15:
                    44:33:67:75:8f:da:9c:09:1a:2d:e8:34:1a:b2:f8:
                    26:90:43:eb:05:f2:6c:66:60:ef:18:5f:66:52:28:
                    33:d1:2e:d3:05:87:d6:1a:16:e8:8a:81:a2:34:0d:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:44:B9:86:D9:82:6A:7B:86:F8:7F:82:4B:63:FC:8F:C7:E0:D2:D3
            X509v3 Authority Key Identifier:
                keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:7a:db:48:16:0e:ea:ae:89:61:28:1e:61:e1:2c:ad:94:
         9b:69:3a:48:d3:d2:24:38:0f:13:9f:76:db:63:ce:71:be:99:
         45:54:92:8b:5d:e2:7d:ef:a2:14:4c:3d:76:d3:71:56:6b:98:
         b9:b7:82:74:c5:cb:45:7a:3d:ff:8f:cc:9c:32:f8:87:11:68:
         0e:47:92:9b:38:b5:26:62:d5:b1:91:b5:4c:2b:d2:96:8c:62:
         2d:99:47:bc:e3:06:94:94:11:df:f3:b1:bd:68:8f:96:7d:fd:
         cd:87:14:50:7a:13:c3:cc:80:9d:61:84:de:d4:91:2d:6b:59:
         67:aa:5b:ad:d5:1c:21:8b:70:7f:fb:35:27:e6:ba:63:23:68:
         3c:3b:ea:88:77:a5:91:57:7c:78:81:05:5c:00:ac:1f:d1:c9:
         ec:45:0b:7d:59:cf:1f:52:a5:b6:6e:cf:fd:0e:18:40:cd:54:
         23:eb:4d:fd:c9:be:23:d4:7b:6b:96:6b:c6:fd:e2:66:3f:03:
         8b:65:2a:f9:aa:ec:81:15:7f:2e:a0:0b:ab:a8:3c:af:2c:e7:
         ab:2c:73:e6:e9:c0:4f:90:26:09:31:c3:71:1d:35:a3:c3:2a:
         1b:3a:0e:43:39:fa:d0:d3:cb:02:90:2d:44:07:de:62:ca:89:
         10:c9:91:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWRPQLL8mSL+SnNSZESu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjJjZjc0OWFmNjk2NzA3OGMwNGJkMGM3MGI1MTQxZjRl
NWE2MGEwHhcNMjYwMjA5MTcwMDM3WhcNMjYwMjEwMTcwMDM3WjAzMTEwLwYDVQQD
EygwZTQ0Yjk4NmQ5ODI2YTdiODZmODdmODI0YjYzZmM4ZmM3ZTBkMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UPj0Ff4IirD1AVWjJ7nP7BswQTy
N1WyPeN9FLaPvSRY73qmM6tDIu9Yp9B0RPe4MnYzJHgiIB/R6QyzP7wRqcIkd0Hj
SWExFnZ1NOPnirfSWqKFHC4UZ39vBlPhRR1zIxpGdMyuoTU5HE7Rx3flGmnkEBFu
iy+1lhLJpt5qvazBW/tgmQ5U2UQB+yG/dZlDe3KHuxNirz1nSNyKJM006V8FOVtG
qKDCxxJX+WrgvQrJu6Bi8UTSaHptkAOc5U3BpyPlfsXYLpWokpea1eXVwBVEM2d1
j9qcCRot6DQasvgmkEPrBfJsZmDvGF9mUigz0S7TBYfWGhboioGiNA3vLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5EuYbZgmp7hvh/gktj/I/H4NLTMB8GA1UdIwQY
MBaAFFGyz3Sa9pZweMBL0McLUUH05aYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYt
Y2QxNGZlMmQ5NTcxLzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYtY2QxNGZlMmQ5NTcx
LzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolV620gW
DuquiWEoHmHhLK2Um2k6SNPSJDgPE59222POcb6ZRVSSi13ife+iFEw9dtNxVmuY
ubeCdMXLRXo9/4/MnDL4hxFoDkeSmzi1JmLVsZG1TCvSloxiLZlHvOMGlJQR3/Ox
vWiPln39zYcUUHoTw8yAnWGE3tSRLWtZZ6pbrdUcIYtwf/s1J+a6YyNoPDvqiHel
kVd8eIEFXACsH9HJ7EULfVnPH1Kltm7P/Q4YQM1UI+tN/cm+I9R7a5Zrxv3iZj8D
i2Uq+arsgRV/LqALq6g8ryznqyxz5unAT5AmCTHDcR01o8MqGzoOQzn60NPLApAt
RAfeYsqJEMmReA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:24 2026 by rpki-client