This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File:                     UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier:          MQm6cyOEPouqM9hzSr3yUvSalnxzUgWjn5/tSlivTug=
Subject key identifier:   DC:B6:10:40:28:F4:D1:3D:FF:0A:3C:9B:08:0E:76:F6:78:C3:3E:E7
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer:       /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial:       019C42B4628AF2D1F52221D09FEDF9EBD2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number:          0266
Signing time:             Mon 09 Feb 2026 14:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:43 +0000
Files and hashes:         1: GjtiA0E9S4pBxZydLJni4jMG7vw.roa (hash: XqhpEYwDihcxsf+WmDyde0ztzBoHTuaJNOIOGqBKgxU=)
                          2: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: eX1dtEB1S811LDK4Uaz4LXjit6XdR29dLermBsQkd0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:62:8a:f2:d1:f5:22:21:d0:9f:ed:f9:eb:d2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
        Validity
            Not Before: Feb  9 14:00:43 2026 GMT
            Not After : Feb 10 14:00:43 2026 GMT
        Subject: CN=dcb6104028f4d13dff0a3c9b080e76f678c33ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:d7:27:e4:48:41:38:82:e4:87:ad:2e:c2:
                    a9:dd:0a:77:50:0d:b6:62:14:30:bd:3f:90:11:12:
                    b7:c3:2b:44:c1:64:f3:a4:5d:83:06:d7:00:8a:d6:
                    14:bf:1b:3d:03:0a:15:eb:fc:64:df:75:ab:1f:01:
                    60:92:b0:82:0d:70:9f:05:a9:f9:55:2f:83:3b:ff:
                    d1:4c:f0:6c:e5:43:ee:ac:96:57:f0:88:39:5f:68:
                    ce:20:47:92:47:20:19:08:a1:18:1e:a7:7e:10:6c:
                    c8:2a:96:20:9d:65:a2:9e:70:23:a5:1d:8e:62:d2:
                    6e:75:4e:b0:0c:03:b6:66:1e:b3:89:5a:2f:22:06:
                    32:36:0c:49:58:6a:1d:45:94:28:e2:b6:90:54:6b:
                    bd:91:7d:bc:c6:cd:0d:05:15:c7:44:3d:77:44:c4:
                    68:bb:bc:cb:0e:47:72:62:3a:d3:63:b8:84:fc:9c:
                    52:6f:f3:88:c8:6c:50:76:33:38:0e:fa:97:31:8c:
                    96:02:9e:97:f5:3e:c1:15:5b:0f:41:66:d4:33:7a:
                    c7:c9:21:67:d1:fb:38:a1:12:c1:97:f9:90:05:e5:
                    c3:03:56:9b:51:bd:30:4a:fd:59:13:60:c1:24:d0:
                    73:b6:6a:77:e6:b5:59:ab:1e:84:9e:38:83:db:36:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B6:10:40:28:F4:D1:3D:FF:0A:3C:9B:08:0E:76:F6:78:C3:3E:E7
            X509v3 Authority Key Identifier:
                keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:60:4a:ca:72:99:0f:78:28:bd:c4:1d:88:c2:3d:96:8e:d0:
         ff:65:cb:72:9b:1f:cc:eb:7e:c4:3a:1d:8f:60:a8:93:f6:be:
         b6:69:6d:f0:49:0a:76:5f:23:69:d4:89:ea:08:d0:c8:dd:aa:
         05:8c:e8:47:a0:32:8e:ab:1f:08:d4:75:06:96:ca:30:75:91:
         f8:a2:ee:99:6d:1c:75:6a:2e:c7:20:60:3e:de:c1:fb:fd:5a:
         1c:b9:2c:98:13:04:80:0f:9a:ed:73:9b:3c:e1:18:70:9d:bf:
         e8:9c:9a:f1:34:75:92:e9:7a:a5:71:14:75:de:d6:cf:36:12:
         78:a8:bd:7a:1c:b4:b8:24:a0:82:1e:6d:c0:fd:8e:c2:72:07:
         9c:56:a3:80:25:de:39:e6:ec:bf:bd:18:dd:55:77:6b:fd:09:
         4a:85:3c:86:d0:a2:2f:c1:7f:cd:47:ea:73:55:be:ac:c5:79:
         c8:27:de:dd:0f:00:dd:e9:b4:76:f0:9a:df:5f:ed:91:94:91:
         d2:85:5d:bf:18:36:82:43:10:b0:18:2d:7b:79:09:fb:62:66:
         2e:20:10:cc:64:af:0d:81:99:78:80:4b:5f:59:c2:c8:c4:2a:
         4a:47:c3:4b:b2:07:78:23:66:11:06:24:8d:15:c8:cf:5e:c9:
         0f:c1:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:23 2026 by rpki-client