This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File:                     UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier:          tbzwZ+i8haoMABSTQMK0RjXPMA0hKVSax+xEBbVpJ3Q=
Subject key identifier:   FA:53:C6:F2:2E:9F:9F:5E:80:FD:B6:86:AC:1B:91:F9:AF:9A:1D:B8
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer:       /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial:       019C421012EE22DD8FB2ECB659EF1C1C8186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 11:01:15 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:15 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:15 +0000
Files and hashes:         1: L5RtN4MYgylQB2sxCXbY7rkj9cw.roa (hash: qjznCSz3UWXsKIxhvu2fQzujS0se59sICJHUHPBxLVY=)
                          2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: LLIMO+IhO14Xbq99HuXK7/NZOrZrS8DPkA8y53rx/Hs=)
                          3: ve2xnNSznR3jgazHd-AYZFn-sds.roa (hash: 23cgt8zKs/gW5LTZzpzr40f5utV3g89KsGnqM+0cNAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:12:ee:22:dd:8f:b2:ec:b6:59:ef:1c:1c:81:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
        Validity
            Not Before: Feb  9 11:01:15 2026 GMT
            Not After : Feb 10 11:01:15 2026 GMT
        Subject: CN=fa53c6f22e9f9f5e80fdb686ac1b91f9af9a1db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:06:6e:8e:dc:59:53:9c:0c:89:70:1a:bd:
                    47:db:d2:98:6c:68:6e:ab:3b:b0:9d:c4:5e:de:3f:
                    75:4f:82:b1:5f:ce:b2:40:d3:d0:21:05:2c:6d:26:
                    90:06:2d:96:b8:15:1c:40:1e:06:3b:b9:f3:5c:de:
                    bd:47:8b:00:6d:e2:34:2f:59:b5:88:e8:5e:f4:0e:
                    34:cb:8c:ce:59:dd:56:ec:00:2b:27:0f:4a:7d:e0:
                    ba:2d:f9:e0:35:ce:0d:06:60:67:32:19:d5:fb:2d:
                    c5:db:70:e1:7c:da:b2:bd:dc:0e:93:05:92:fe:aa:
                    4d:f4:f5:d9:cb:da:3b:05:06:1b:2c:26:63:4d:61:
                    d0:48:21:f7:e3:3f:c6:19:16:72:9c:54:58:03:39:
                    a2:65:b4:c6:b7:b6:e3:1c:38:f3:6e:09:54:a8:04:
                    97:c6:a3:91:a8:23:4c:e2:ae:4c:64:98:cd:e9:6f:
                    dc:a1:62:16:84:1a:3f:03:0c:28:98:dc:1a:3f:46:
                    9e:95:a7:3b:37:73:49:af:0a:aa:2d:3b:f0:9a:8c:
                    73:18:fc:55:9f:94:8c:68:94:24:82:15:fd:28:c4:
                    20:1f:38:d6:8e:6b:66:09:d1:6d:cc:3c:93:1a:6c:
                    c9:0e:5f:81:b7:59:d9:4f:94:59:9b:34:8a:15:01:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:53:C6:F2:2E:9F:9F:5E:80:FD:B6:86:AC:1B:91:F9:AF:9A:1D:B8
            X509v3 Authority Key Identifier:
                keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c3:9d:1d:81:0b:e6:19:cd:37:ac:e1:70:19:69:5d:32:e1:
         0e:8b:76:01:6d:39:ea:9e:4d:b7:7d:52:15:7e:04:c9:e7:a7:
         09:b9:ba:fb:c7:27:5b:44:f1:fb:71:cb:01:21:55:73:d4:b3:
         20:94:47:b3:cd:8f:ff:bc:44:a5:8a:83:1b:b1:fa:69:67:62:
         db:57:ac:13:8e:f0:6b:91:a9:3d:27:64:81:69:a3:92:9c:bf:
         22:c1:37:db:99:24:01:5e:81:4d:d4:07:df:53:c3:b4:04:61:
         6f:35:b1:8f:90:20:57:d1:49:53:8c:ce:fb:63:f1:e7:75:cc:
         59:26:87:04:51:e1:d1:b5:56:c3:55:90:20:59:9f:9b:5f:fa:
         9f:c8:9d:d5:d0:2a:53:39:f3:fe:22:e8:b0:8b:db:4d:29:3d:
         f7:cd:f7:bf:ea:73:b9:d4:f0:42:a9:f9:16:0a:6e:27:ce:f5:
         7f:a5:65:b2:3d:d3:b4:08:7c:ec:84:6a:da:cb:37:1a:ab:0e:
         f7:60:0a:c8:f6:82:5a:87:71:d2:03:f5:ec:c3:10:12:f2:41:
         ab:97:bc:a7:d6:a9:82:a6:3d:e7:a7:28:67:55:ea:10:25:d1:
         67:78:97:8d:fd:06:67:ba:71:97:e6:c9:fb:f8:12:ce:da:04:
         dd:00:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:23 2026 by rpki-client