This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File:                     U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier:          vGCxdaaUfHb72LFImoTztS7YfGjPfYPmB5RpUcijy94=
Subject key identifier:   6F:71:C5:37:74:52:62:5C:7A:67:0B:45:65:70:41:D2:A3:FB:63:0B
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer:       /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial:       019C427E03B442D3B97175DE2D2768C40EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number:          1044
Signing time:             Mon 09 Feb 2026 13:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:20 +0000
Files and hashes:         1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=)
                          2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=)
                          3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=)
                          4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: UKZtQgrSVzXZzZ0+8+tYb4KeYcQ89ASz1IK01bzG1hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:03:b4:42:d3:b9:71:75:de:2d:27:68:c4:0e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
        Validity
            Not Before: Feb  9 13:01:20 2026 GMT
            Not After : Feb 10 13:01:20 2026 GMT
        Subject: CN=6f71c5377452625c7a670b45657041d2a3fb630b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:3c:5b:67:e2:ce:a2:6e:1d:c7:13:ad:e7:
                    82:25:8e:6b:fe:fa:63:dd:08:0a:f8:a6:9d:91:b1:
                    6b:91:85:0e:04:8b:9e:15:f2:07:27:dd:60:08:02:
                    ec:94:de:7a:b5:32:29:2e:4c:5c:d0:3d:35:ca:88:
                    52:59:a2:fd:ca:ee:46:25:a0:95:e9:68:ef:8e:54:
                    a2:73:64:ce:21:40:06:b4:14:49:39:c9:5f:61:16:
                    b3:f3:1b:17:0f:0a:fc:db:d9:6d:42:ca:e2:6a:1e:
                    09:af:56:0b:96:c0:e7:b2:a1:82:41:65:76:52:5b:
                    a2:40:39:36:22:16:ce:27:e0:37:0f:38:09:1c:1a:
                    42:7c:38:e1:0c:c4:72:2a:92:24:35:15:52:44:b3:
                    74:ea:e3:2d:1c:1e:36:41:ce:9e:df:45:9e:0c:cc:
                    04:8a:52:7f:7c:b6:a9:15:c3:53:55:3d:0e:a7:ba:
                    56:18:e5:f4:39:2b:1d:25:23:1a:7d:fc:0a:a3:c0:
                    23:8b:fc:87:40:1c:cc:70:f2:cf:37:0f:04:48:14:
                    7e:5e:2c:fc:1a:b8:02:4d:c1:18:31:d0:a5:0f:2f:
                    97:4f:e6:97:c1:21:3a:aa:d1:58:75:6f:38:3c:87:
                    4d:26:48:27:f7:12:f3:eb:ce:85:be:e5:a2:69:46:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:71:C5:37:74:52:62:5C:7A:67:0B:45:65:70:41:D2:A3:FB:63:0B
            X509v3 Authority Key Identifier:
                keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:70:8f:59:61:ba:3e:5f:15:23:47:72:03:5a:bd:88:bb:32:
         65:69:3f:7f:4c:2b:9a:4c:9d:f0:c8:ff:75:80:36:70:56:9c:
         de:8f:94:59:ac:0c:f0:52:2f:9a:56:d7:bb:0a:3d:86:26:78:
         41:a0:3d:89:a8:ec:6d:10:53:d8:50:03:dc:1a:30:af:3a:b8:
         e5:66:cb:f3:55:62:c2:0f:b0:d8:bb:c3:2f:20:f8:64:24:eb:
         56:f3:74:0b:e5:32:93:37:8f:2e:04:7c:1c:a2:aa:17:2a:25:
         22:3e:33:38:50:00:44:cc:f5:af:d2:25:19:35:f6:3e:6f:b2:
         90:32:b3:6b:e8:39:43:4f:71:f7:91:01:54:6d:7f:aa:c0:7c:
         9b:29:c1:f6:85:76:9f:90:dc:b7:6d:dc:38:31:d7:51:73:2a:
         db:2c:a0:20:70:a2:40:92:b7:14:5c:06:48:6b:6e:f5:bf:48:
         76:63:06:69:48:cf:f4:52:07:33:7f:4d:68:bb:ea:ef:44:5b:
         e8:bb:84:d0:3d:f8:95:32:33:24:46:39:ed:dd:ea:ee:54:08:
         44:4a:45:7e:bd:45:b7:6e:f2:4f:f2:12:14:12:f9:80:0f:d6:
         36:8a:13:1c:58:cd:09:3f:ad:31:23:ad:27:f3:6f:7c:98:60:
         ab:5f:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:34:00 2026 by rpki-client