This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File:                     UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier:          trrdJYcunu3Qftm4Ic9BWkI/XaeAzcUAhCHDJ+qo9rU=
Subject key identifier:   4D:53:80:4E:63:85:75:68:F4:3C:F9:33:FA:F3:AE:83:52:16:7D:FB
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer:       /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial:       019C42463F25C1554D0A1A241C4A1FFC1899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number:          1805
Signing time:             Mon 09 Feb 2026 12:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:25 +0000
Files and hashes:         1: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: wExBeiSSk64OwSfpk0+RIgeWY418M7nGNtAFMqiJtDo=)
                          2: hEpkfnbvGtcIxWjUlVdPllfE-cY.roa (hash: QTunkkr+hN3fQscxIyK1dz5yS0xr1F0v7DcnxHiOT/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:3f:25:c1:55:4d:0a:1a:24:1c:4a:1f:fc:18:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
        Validity
            Not Before: Feb  9 12:00:25 2026 GMT
            Not After : Feb 10 12:00:25 2026 GMT
        Subject: CN=4d53804e63857568f43cf933faf3ae8352167dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:f8:a8:c8:de:f9:ad:af:44:52:4c:bb:39:
                    9f:07:df:dc:33:13:4e:10:9e:89:06:6a:bb:87:7e:
                    2e:b8:f6:68:d8:2b:da:4a:f1:d8:ed:49:25:dc:79:
                    06:ce:ba:33:08:94:60:61:9b:20:e8:3e:e9:f1:fb:
                    4d:30:7a:66:6d:a2:c7:91:b1:28:d8:c8:13:23:7e:
                    2e:49:7e:e5:12:6c:33:fb:30:9d:28:99:ae:dd:85:
                    fc:0a:49:09:7a:27:ca:e1:24:e7:92:32:a0:d8:6c:
                    c6:71:54:26:7c:a7:40:db:9b:18:de:85:2d:15:f9:
                    d1:66:59:a2:f5:24:97:07:1e:35:04:20:94:e2:2e:
                    ed:fc:08:30:2b:ba:3b:a3:b0:37:64:46:f0:ec:86:
                    40:54:33:57:0d:03:3a:16:95:e2:ba:bf:29:3e:38:
                    23:0f:22:8b:57:37:7f:0a:67:60:f1:9d:b4:8c:c7:
                    95:1e:53:8b:8e:ff:b2:8a:8d:02:04:26:5b:a3:df:
                    26:e2:3f:33:a0:d1:d3:e8:16:35:be:42:fd:db:05:
                    c9:14:96:90:71:1d:46:9a:02:93:0e:b5:1e:58:f7:
                    24:1b:9b:19:3d:e1:44:d1:ae:77:46:79:4c:dd:fd:
                    80:3a:0d:0e:0b:12:ac:d5:83:d8:6d:4e:ba:4a:7c:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:80:4E:63:85:75:68:F4:3C:F9:33:FA:F3:AE:83:52:16:7D:FB
            X509v3 Authority Key Identifier:
                keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0e:cf:5a:e2:90:2a:64:d7:3c:ac:53:c9:10:ef:17:83:ab:
         c1:2e:f7:b9:30:a5:4b:08:20:6a:a2:59:7d:8a:97:8f:56:e2:
         da:8f:bb:fb:c3:fd:ea:3f:68:f7:8a:47:da:99:47:2f:73:65:
         8d:51:d7:1a:91:db:f3:78:00:37:cd:ba:ed:2f:ce:a2:0e:c9:
         6d:ef:b1:15:92:f5:20:c0:67:70:4f:ee:59:0c:46:6a:28:42:
         9d:92:83:2a:46:a8:44:da:49:d4:0a:ef:ce:a8:b8:a6:a1:4e:
         d4:05:1e:9c:ea:06:ca:7c:2a:12:e8:69:40:e2:74:38:33:fa:
         63:10:10:6d:4e:b4:a9:b3:72:e0:30:e4:80:ab:3f:dc:d5:9d:
         5e:a7:22:1a:3f:8c:83:e0:0b:f8:a2:72:94:dc:66:bf:f6:0c:
         1a:18:39:3b:7e:2b:af:d1:b1:c0:3e:71:61:f6:36:bb:14:46:
         b2:91:30:8f:5d:77:53:7e:d9:a2:72:77:1c:57:89:b7:ba:b2:
         92:9e:23:0b:90:46:4e:0b:80:8b:66:6e:83:8f:57:5a:66:28:
         75:8c:ea:1b:c1:c2:4c:7e:24:c6:31:39:ac:b5:4e:44:87:d7:
         27:11:40:d2:b6:87:6a:1a:1b:ce:df:2b:e7:a0:66:50:71:31:
         77:cf:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:49 2026 by rpki-client