This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File:                     cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier:          keT5rMdlgXe8os6YS6at6VbCkCGZTCnz2AxpP3nM88A=
Subject key identifier:   0F:E9:0A:E7:EA:29:C0:0A:A9:24:D5:FE:AC:CA:27:A0:1B:FF:50:E7
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer:       /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial:       019C432304D903C508337BC50CB99F7E9A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number:          10E3
Signing time:             Mon 09 Feb 2026 16:01:34 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:34 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:34 +0000
Files and hashes:         1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: MaelHcQaDwjU1uJIN9w0yxgkQb7Fu+TbfHbhDhkLYmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:23:04:d9:03:c5:08:33:7b:c5:0c:b9:9f:7e:9a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
        Validity
            Not Before: Feb  9 16:01:34 2026 GMT
            Not After : Feb 10 16:01:34 2026 GMT
        Subject: CN=0fe90ae7ea29c00aa924d5feacca27a01bff50e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:96:5e:17:9e:42:97:eb:87:ff:65:0c:1f:
                    d9:d8:3b:89:5f:4e:f5:63:0b:7e:2b:60:00:dc:64:
                    2c:1a:79:41:4e:08:80:a7:8e:74:04:be:83:fc:ea:
                    f9:18:ef:cf:9e:98:ab:7e:8b:fc:33:a8:47:24:72:
                    1a:54:b8:2a:97:31:6d:d2:12:6a:3e:83:2a:aa:8f:
                    6e:c6:63:cf:f3:1f:41:c8:3c:63:a3:5f:b2:86:3d:
                    18:a9:06:41:f7:a5:ad:75:e2:6b:d4:15:8e:6d:1c:
                    48:54:b8:80:e1:a3:93:a9:38:8a:a3:d8:0f:e4:8e:
                    34:74:6a:c3:e2:af:fb:3a:14:3b:57:aa:3d:36:87:
                    b2:2d:ff:12:62:1d:6c:52:c8:4e:0c:07:59:2f:f1:
                    5b:d9:ee:37:fe:e6:19:5f:bd:2c:39:94:31:c4:00:
                    4d:18:64:67:ae:91:3a:1e:e8:2c:86:02:d9:12:3e:
                    87:8a:10:53:d7:87:51:fb:16:1f:64:50:88:83:4a:
                    7d:12:44:2e:96:7d:3b:7d:50:c8:8a:35:40:9e:b8:
                    a2:b4:93:f4:de:d0:be:07:17:7e:e4:b5:45:f6:c9:
                    52:71:61:f3:4e:d8:5d:09:e3:27:f9:cd:9b:0d:73:
                    ad:c7:05:e5:de:5c:73:4e:c9:85:f6:a0:a4:86:4c:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E9:0A:E7:EA:29:C0:0A:A9:24:D5:FE:AC:CA:27:A0:1B:FF:50:E7
            X509v3 Authority Key Identifier:
                keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:d9:17:15:0f:2c:0c:14:0c:68:7d:6a:54:f6:29:e9:35:6c:
         67:03:23:34:13:67:b0:c5:1f:50:35:5a:5a:84:7a:7a:73:c3:
         f0:cc:f3:c9:cc:3f:66:bd:25:70:da:ca:6d:e0:d3:cd:02:1c:
         c7:12:c2:27:d5:e9:4e:0b:db:24:39:25:9b:34:4f:f6:fb:3a:
         ac:36:15:d2:76:68:69:4d:72:5d:14:9f:df:41:14:10:54:57:
         3a:4b:88:06:67:37:c4:a0:d1:3e:c8:f9:70:a0:a1:af:ae:36:
         09:bb:86:58:37:22:3f:96:63:6a:f0:1c:82:7a:15:2c:8f:21:
         47:5d:8f:68:b9:94:cf:fd:06:6e:04:5b:15:18:6e:5a:6f:84:
         56:1a:24:b7:41:41:cc:d5:37:51:71:e9:12:fe:dd:0f:fa:91:
         65:44:73:2c:05:77:62:f6:33:56:9a:a0:cd:52:8b:30:c8:d5:
         6a:7c:f9:96:1d:5b:92:60:47:7a:ad:c9:1b:03:7c:b5:fc:15:
         fc:11:f6:8b:2a:50:da:ff:66:b1:9c:15:9c:3b:ae:52:37:82:
         4d:a7:cf:33:95:57:69:b8:3d:63:64:61:ac:90:de:69:6c:e9:
         f8:92:eb:19:cf:bf:92:65:cd:51:7e:c0:91:ad:26:16:44:89:
         af:7a:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:41 2026 by rpki-client