This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File:                     Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier:          LmGtqPKEhg9tPyjfoppMCfXtBZE7gGdj3zC66FsYvGM=
Subject key identifier:   9D:24:FE:D6:95:21:35:A6:E9:D5:18:3E:90:77:0B:2C:7A:24:E6:45
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer:       /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial:       019C4322EABF0D962A26E773FE0DD1ECB3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number:          16E6
Signing time:             Mon 09 Feb 2026 16:01:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:27 +0000
Files and hashes:         1: MGJC7B1Ba42lx5xp2OR9KB_r3CM.roa (hash: 3dEWz8p/HyJK1M8zb2CLGf2EvdGWCjzIW7fX7f0DY+A=)
                          2: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: h6fdOyiPRRSnCsmftrV/pc+hz5wcrAkquZs5BJKjCc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ea:bf:0d:96:2a:26:e7:73:fe:0d:d1:ec:b3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
        Validity
            Not Before: Feb  9 16:01:27 2026 GMT
            Not After : Feb 10 16:01:27 2026 GMT
        Subject: CN=9d24fed6952135a6e9d5183e90770b2c7a24e645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:31:ea:ef:58:00:20:74:38:c4:1c:05:c7:
                    dd:d3:7e:9f:ce:ca:e5:f6:aa:5c:4b:80:2a:bb:dd:
                    aa:e0:13:23:46:dc:a9:4e:c0:63:48:49:22:7e:11:
                    dd:f7:00:29:89:43:f8:44:55:ee:a7:aa:55:f2:36:
                    06:81:6e:6d:b0:65:9c:7b:34:e3:25:05:25:3f:28:
                    ea:52:1c:a0:39:ca:91:cd:33:5b:46:a8:55:a2:2b:
                    8d:8e:47:37:e4:73:d9:5d:73:c9:b6:b0:cc:68:09:
                    83:bd:5f:3c:48:9d:67:e5:a1:bf:68:eb:ee:95:d1:
                    41:02:a8:fe:85:0e:06:f4:93:66:d3:7d:aa:68:1d:
                    18:67:68:be:fc:3a:aa:16:ba:51:7c:76:41:02:a6:
                    34:79:25:35:7d:75:36:86:51:c8:b7:f9:10:09:e6:
                    c9:48:1e:94:5d:5f:d0:ce:44:85:12:66:3a:c9:4b:
                    03:b2:0a:23:ae:38:70:37:ff:b7:f5:61:86:f5:f0:
                    2c:0e:f5:3e:64:c1:8a:a7:fb:46:c7:7d:36:69:2b:
                    c4:b6:cd:e5:9d:44:ff:38:c5:92:2c:58:f2:0f:8a:
                    65:5f:8b:49:ad:6e:76:5e:67:a8:5c:2f:6e:ad:11:
                    e3:6d:b6:7a:79:fa:1f:87:0f:de:82:43:32:8f:7e:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:24:FE:D6:95:21:35:A6:E9:D5:18:3E:90:77:0B:2C:7A:24:E6:45
            X509v3 Authority Key Identifier:
                keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:17:56:54:2f:45:41:01:f8:c0:24:e3:75:45:d2:89:0d:70:
         78:b5:02:32:f5:bd:d6:56:c6:ea:45:54:0e:fa:75:25:1f:c5:
         ff:43:4e:30:2f:df:0d:43:73:d6:6c:5d:d9:18:b1:70:5f:55:
         d1:ae:05:8e:b7:82:33:b6:06:0b:6d:13:36:0d:70:ac:52:db:
         d1:7d:c7:41:d5:ce:f9:f2:f9:6a:3c:93:e7:3d:ef:e8:63:70:
         b0:6e:e2:05:4e:2a:fb:57:45:c2:53:53:ed:71:2d:cb:00:25:
         6b:75:8b:2a:31:8d:35:6a:f5:70:cd:6d:4d:3e:6f:2f:c7:b6:
         1c:ea:64:02:bc:89:e7:3c:00:ab:e5:d8:87:27:1f:5e:ab:c9:
         7e:89:58:06:9d:d4:ce:9e:87:8d:c5:8b:ae:2a:80:37:be:4e:
         52:f5:2a:f1:26:cc:a3:46:63:fb:bb:7b:43:1a:bb:ae:6b:85:
         01:66:46:28:c6:83:ff:eb:51:eb:6c:be:57:90:bf:b6:35:76:
         22:fe:02:38:6d:75:ee:25:16:3e:75:4d:8c:c5:1b:ef:dd:29:
         64:76:9e:8f:59:08:e6:29:6b:53:82:41:76:76:c3:8a:99:8b:
         29:ef:8a:90:dc:c8:74:b0:6e:24:a8:cc:52:1c:11:00:7f:d9:
         1c:c3:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:14 2026 by rpki-client