This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          JJegNwuULkkqu4eI+L2t8n1zqNPOl5X4f7cciK3DQs4=
Subject key identifier:   AD:5D:04:78:E4:FA:27:37:B6:04:96:0C:A0:6A:29:73:21:2B:97:D1
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       019C4246432908F9CDD19DC566D18FC26B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0981
Signing time:             Mon 09 Feb 2026 12:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:26 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: smzPjNxfxJR8CZ1XnLE29+GTRP9sChoCedlcjjKvM9k=)
                          2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:43:29:08:f9:cd:d1:9d:c5:66:d1:8f:c2:6b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Feb  9 12:00:26 2026 GMT
            Not After : Feb 10 12:00:26 2026 GMT
        Subject: CN=ad5d0478e4fa2737b604960ca06a2973212b97d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:0d:69:18:15:04:56:1f:e6:cf:8c:94:98:
                    16:64:b4:33:d1:9a:eb:86:63:06:b8:f6:9e:4d:ee:
                    b6:d5:55:11:07:13:8a:48:25:21:ab:89:33:70:1b:
                    ee:17:01:cc:79:ac:b2:10:68:11:00:1a:3b:7e:cc:
                    9b:80:fd:ff:ca:b4:a3:17:88:65:e4:a2:66:98:e6:
                    b8:d1:0b:95:52:e2:2d:fd:a7:31:fe:a8:71:61:6d:
                    f4:cf:1b:b5:76:4c:99:ae:af:86:e7:ad:84:9e:23:
                    30:08:57:92:62:c9:11:81:e8:ff:9f:1b:e7:82:bc:
                    eb:69:f6:4a:82:04:bb:15:6a:54:04:5a:e8:db:0e:
                    a1:f4:6c:64:47:d3:47:34:6f:71:fe:14:62:ba:31:
                    90:22:34:f3:d7:f9:0c:24:36:83:e7:e6:b2:6b:2b:
                    41:10:0b:1f:3f:13:d6:20:12:38:75:e3:86:ba:15:
                    77:0f:2d:69:85:e1:77:ae:bf:ac:d0:4a:d7:6f:c8:
                    af:d6:c7:f1:c5:b2:15:bd:60:7d:0d:e0:69:ca:49:
                    ef:b6:e3:06:44:04:86:5f:f1:35:39:3e:23:0a:8b:
                    e7:d8:3d:b3:97:95:8a:6d:a4:b2:61:ec:cc:64:6a:
                    8b:2c:5b:ce:64:7a:ab:67:96:a3:9a:2f:b0:58:3e:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5D:04:78:E4:FA:27:37:B6:04:96:0C:A0:6A:29:73:21:2B:97:D1
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:72:4f:77:34:7b:f1:9b:5d:d3:a2:6e:54:be:4a:c1:66:
         5b:55:fa:74:44:6d:4f:79:de:69:32:b3:cb:ae:28:6c:06:8c:
         88:93:2c:76:43:91:c7:89:9b:38:1e:03:8b:7f:ae:1d:b9:97:
         22:a0:f5:fd:c8:3b:f4:46:71:4b:e8:8f:ce:6d:9d:ca:0e:e9:
         6e:e2:76:a7:bc:cb:a5:ad:17:81:f5:78:96:0d:b6:7d:61:77:
         8f:3a:bf:07:f3:b5:66:e8:d4:12:01:40:f7:a4:fb:e1:02:71:
         bf:30:6f:28:0f:b2:7f:7e:89:08:f3:7e:b6:68:a6:db:46:31:
         b2:66:60:27:0b:65:ee:d1:95:ab:96:12:47:b2:5c:c9:48:35:
         54:f2:e6:46:95:b9:8d:06:d2:45:53:c2:3b:10:63:a2:99:bf:
         a0:31:95:1b:3f:bb:d3:9d:bd:78:54:bf:88:9f:db:1a:92:36:
         7c:4e:c8:75:15:e3:ab:f7:f4:1a:dd:9e:a2:8f:60:57:77:4e:
         f8:76:e7:e1:05:8e:c0:74:be:65:d7:f5:d8:91:b9:85:80:b8:
         e1:9d:30:89:30:e3:72:80:4d:b8:1d:48:69:6e:67:6e:51:34:
         02:c3:98:62:f5:4a:c0:b4:c0:cb:41:da:bf:1a:32:d9:ba:a9:
         4b:fa:9e:f3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxCRkMpCPnN0Z3FZtGPwms3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD
EyhhZDVkMDQ3OGU0ZmEyNzM3YjYwNDk2MGNhMDZhMjk3MzIxMmI5N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhcNaRgVBFYf5s+MlJgWZLQz0Zrr
hmMGuPaeTe621VURBxOKSCUhq4kzcBvuFwHMeayyEGgRABo7fsybgP3/yrSjF4hl
5KJmmOa40QuVUuIt/acx/qhxYW30zxu1dkyZrq+G562EniMwCFeSYskRgej/nxvn
grzrafZKggS7FWpUBFro2w6h9GxkR9NHNG9x/hRiujGQIjTz1/kMJDaD5+ayaytB
EAsfPxPWIBI4deOGuhV3Dy1pheF3rr+s0ErXb8iv1sfxxbIVvWB9DeBpyknvtuMG
RASGX/E1OT4jCovn2D2zl5WKbaSyYezMZGqLLFvOZHqrZ5ajmi+wWD4mUQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK1dBHjk+ic3tgSWDKBqKXMhK5fRMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPghy
T3c0e/GbXdOiblS+SsFmW1X6dERtT3neaTKzy64obAaMiJMsdkORx4mbOB4Di3+u
HbmXIqD1/cg79EZxS+iPzm2dyg7pbuJ2p7zLpa0XgfV4lg22fWF3jzq/B/O1ZujU
EgFA96T74QJxvzBvKA+yf36JCPN+tmim20YxsmZgJwtl7tGVq5YSR7JcyUg1VPLm
RpW5jQbSRVPCOxBjopm/oDGVGz+70529eFS/iJ/bGpI2fE7IdRXjq/f0Gt2eoo9g
V3dO+Hbn4QWOwHS+Zdf12JG5hYC44Z0wiTDjcoBNuB1IaW5nblE0AsOYYvVKwLTA
y0Havxoy2bqpS/qe8w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:35 2026 by rpki-client