This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File:                     UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier:          3c5F9jvD7Ecf06crY5+3yKoSc4bOQD+Fpu9rRbGH+Aw=
Subject key identifier:   B4:E1:E1:08:42:B7:42:2C:FD:F3:C8:25:21:26:EA:AC:2E:89:A3:13
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer:       /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial:       019C4358CB8749B25D4F9296DA15B322DB90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:18 +0000
Files and hashes:         1: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: 1OefPd0VAYls/+D3Ie8k3BZxU+yPLMWbOnC++vqEzx8=)
                          2: j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa (hash: HhU7n7OhPQgUoe1hdC5otibZ4YzWb9TWF6sNGUEEoek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:cb:87:49:b2:5d:4f:92:96:da:15:b3:22:db:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
        Validity
            Not Before: Feb  9 17:00:18 2026 GMT
            Not After : Feb 10 17:00:18 2026 GMT
        Subject: CN=b4e1e10842b7422cfdf3c8252126eaac2e89a313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:92:65:86:94:70:cc:34:1a:82:9a:f4:fb:fa:
                    be:94:ab:db:be:21:b6:a5:70:d2:f8:20:ed:db:7d:
                    32:6c:36:be:2e:fb:c9:95:f7:47:e5:22:a6:ee:9c:
                    6c:51:59:5c:53:4e:af:e5:ae:01:99:cc:81:eb:f3:
                    6c:1f:e1:21:61:f0:5a:9d:57:70:5b:85:0f:63:98:
                    8c:40:f9:fc:af:4a:23:6d:77:6e:67:e0:90:3a:77:
                    25:54:5c:29:34:e2:f5:30:5a:69:b8:21:a7:7e:39:
                    11:7d:3e:42:0b:6c:94:09:77:e2:81:d3:bc:66:29:
                    32:f3:b5:fd:3c:ee:ba:a0:68:2f:44:c5:cb:bc:8b:
                    10:fe:26:44:c5:9b:8f:9a:fa:06:5b:1f:64:57:44:
                    b4:e8:72:17:87:e8:0c:5b:5f:41:ad:94:d7:67:b1:
                    2a:41:c3:cc:18:ea:91:48:47:50:0f:05:08:45:72:
                    ee:b3:9e:51:2f:f9:44:d3:b2:91:57:a5:35:a8:80:
                    2e:62:13:72:ad:03:11:5e:39:c5:b4:c0:ae:a4:7b:
                    d4:0d:59:4f:17:d4:39:d4:31:76:8b:6f:1f:ec:d3:
                    38:10:dc:83:17:4b:ff:bd:cc:53:11:c1:23:53:be:
                    bc:56:26:73:89:01:6d:d0:61:43:52:15:85:4c:80:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E1:E1:08:42:B7:42:2C:FD:F3:C8:25:21:26:EA:AC:2E:89:A3:13
            X509v3 Authority Key Identifier:
                keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:fe:31:ff:ff:c4:c0:a1:f4:85:bd:6b:85:f4:b7:25:5c:01:
         dc:fd:e3:d8:36:ad:ed:81:82:9c:5b:9e:d3:91:2a:bc:d7:5a:
         c6:11:4b:49:36:e3:1d:6f:19:1c:6b:28:6a:96:44:1c:db:12:
         4c:65:2f:f2:60:af:b1:d8:1f:16:fc:2d:e7:36:57:00:f9:0c:
         e8:ac:27:d8:2d:79:32:5c:c3:65:d3:2a:2e:59:6e:2d:7c:6f:
         e2:65:d2:87:37:47:b6:20:1c:d1:90:41:74:f5:61:91:ef:6c:
         9d:d3:99:47:b8:47:25:46:29:db:13:40:62:5b:a6:06:a0:f9:
         98:91:62:11:42:c1:15:2e:5e:f0:dd:be:50:64:ec:be:67:6f:
         2b:a6:af:d9:3c:4d:21:47:74:09:0b:ec:fa:99:aa:8c:c3:94:
         36:f2:77:c7:72:39:29:a6:82:ce:35:3b:88:b5:42:13:88:38:
         a3:d2:9e:7f:87:13:1b:9d:f7:38:ab:2c:98:f2:12:9a:51:fd:
         ae:45:69:75:9c:2e:51:83:80:9c:d8:25:33:d5:8d:75:3d:7a:
         b3:ce:e0:8a:1d:2b:e5:e8:10:32:d9:66:ba:52:8b:17:f4:21:
         45:21:55:ea:5a:44:17:47:65:4c:ec:5e:0b:b7:62:06:32:3a:
         da:c5:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:16 2026 by rpki-client