This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
File:                     uQBjLU-AFX1p71tT_mJNv4rf768.mft (raw, json)
Hash identifier:          QqGm7030DY0ohgvwMlf0Eqw+pef46ylXGys1iXYEMPM=
Subject key identifier:   AC:50:76:8A:67:D4:FB:03:D6:07:FB:A7:E3:33:82:21:A8:20:EE:67
Authority key identifier: B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF
Certificate issuer:       /CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
Certificate serial:       019C44A276705525F4A3BBB20A38BF3C12D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
Manifest number:          0EDD
Signing time:             Mon 09 Feb 2026 23:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:23 +0000
Files and hashes:         1: uQBjLU-AFX1p71tT_mJNv4rf768.crl (hash: pjj0wUGdpl3kF3SWcUZzDvM2GNPg0gtcMDW4hMV6/Tc=)
                          2: wM4IP5DC1DgveuDoXirlpMRIHqc.roa (hash: ORIxf9cRPlx51odo5iTaqyNV6pwUbzloT9uYflN665I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:76:70:55:25:f4:a3:bb:b2:0a:38:bf:3c:12:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b900632d4f80157d69ef5b53fe624dbf8adfefaf
        Validity
            Not Before: Feb  9 23:00:23 2026 GMT
            Not After : Feb 10 23:00:23 2026 GMT
        Subject: CN=ac50768a67d4fb03d607fba7e3338221a820ee67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:37:37:8e:67:a3:b1:f7:4c:2c:ad:46:9a:
                    0a:88:12:fa:f7:31:dc:79:70:1c:af:9d:3c:59:2e:
                    0e:a7:1b:97:1a:df:84:7e:6b:be:06:0f:4a:22:4d:
                    0a:91:f8:16:bf:ee:9b:f6:2a:c4:2b:54:e0:9f:f5:
                    2e:92:03:90:bd:6f:3b:b6:ee:f7:89:b9:9b:30:27:
                    ab:2f:d7:4f:67:13:93:87:5a:30:3b:77:d2:43:fa:
                    f3:d8:a5:a1:c4:74:62:68:a5:0f:5a:c8:21:c1:65:
                    04:43:14:21:eb:4a:1a:19:9e:76:39:9c:1f:8a:7f:
                    4b:a2:34:43:ec:74:f9:70:c9:3e:f1:02:c2:fa:0d:
                    71:91:d8:34:30:a0:1c:1b:1e:b9:5e:02:c6:c2:a2:
                    11:d1:21:3a:98:ec:54:64:13:59:b7:26:50:d1:17:
                    78:ae:5d:66:10:d9:97:c2:f7:1a:fc:d6:60:66:67:
                    2c:3e:69:d2:9b:df:b6:62:0f:ce:0d:3f:ed:5c:d0:
                    3a:11:1e:a3:b5:5e:7d:cf:6c:25:ca:3e:8c:2c:2c:
                    b2:35:1f:f7:87:af:2c:2c:b0:a4:b2:95:a3:cd:76:
                    9f:13:43:50:f7:c1:d9:d3:a7:dd:c5:93:c9:4c:3e:
                    c8:20:08:a4:9e:08:ce:26:36:02:67:02:2b:08:bf:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:76:8A:67:D4:FB:03:D6:07:FB:A7:E3:33:82:21:A8:20:EE:67
            X509v3 Authority Key Identifier:
                keyid:B9:00:63:2D:4F:80:15:7D:69:EF:5B:53:FE:62:4D:BF:8A:DF:EF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQBjLU-AFX1p71tT_mJNv4rf768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bb548e-5c91-4658-8e01-b80ff2f1552b/1/uQBjLU-AFX1p71tT_mJNv4rf768.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:62:b6:5a:e8:6c:b8:ad:15:f9:e9:37:8b:f6:f2:ea:95:18:
         53:45:18:07:da:a0:76:af:e0:8f:86:9f:4e:38:fc:31:80:89:
         b2:42:dd:25:96:06:83:d6:fc:2c:4f:5a:df:fd:7e:cf:83:fe:
         df:2c:84:65:0d:27:ba:c6:c8:49:7d:98:a2:29:01:38:53:21:
         71:f3:e2:7a:71:cf:a5:63:6b:b2:dc:95:09:8b:83:e9:c6:9b:
         20:ea:e1:5f:b3:50:cb:54:10:5d:50:f8:f8:37:87:30:ee:6f:
         8e:c1:2d:87:12:b3:41:25:0a:18:ae:4d:d3:73:65:6e:9e:ed:
         b5:97:bb:de:ef:b1:c0:11:a8:59:2e:71:7e:37:26:90:cc:71:
         a0:fc:87:02:fb:2f:d2:5f:b5:1f:0a:b4:ce:68:2c:f4:0d:b7:
         ea:f5:29:63:b2:e7:62:87:bc:68:d6:a5:b6:e6:e8:b2:02:b4:
         17:55:00:d3:74:48:2a:76:e1:a2:b3:71:ed:87:99:89:7d:74:
         d9:16:f9:fc:9b:62:bc:cb:93:c5:b5:28:eb:43:81:6a:09:ce:
         57:57:75:4d:b7:7c:20:2b:13:2b:38:68:b7:99:df:fa:d4:3a:
         32:14:11:38:b4:7c:9d:99:13:3d:bb:b3:25:de:6d:f9:8d:81:
         6b:07:b3:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEonZwVSX0o7uyCji/PBLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDA2MzJkNGY4MDE1N2Q2OWVmNWI1M2ZlNjI0ZGJmOGFk
ZmVmYWYwHhcNMjYwMjA5MjMwMDIzWhcNMjYwMjEwMjMwMDIzWjAzMTEwLwYDVQQD
EyhhYzUwNzY4YTY3ZDRmYjAzZDYwN2ZiYTdlMzMzODIyMWE4MjBlZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvQ3N45no7H3TCytRpoKiBL69zHc
eXAcr508WS4OpxuXGt+Efmu+Bg9KIk0KkfgWv+6b9irEK1Tgn/UukgOQvW87tu73
ibmbMCerL9dPZxOTh1owO3fSQ/rz2KWhxHRiaKUPWsghwWUEQxQh60oaGZ52OZwf
in9LojRD7HT5cMk+8QLC+g1xkdg0MKAcGx65XgLGwqIR0SE6mOxUZBNZtyZQ0Rd4
rl1mENmXwvca/NZgZmcsPmnSm9+2Yg/ODT/tXNA6ER6jtV59z2wlyj6MLCyyNR/3
h68sLLCkspWjzXafE0NQ98HZ06fdxZPJTD7IIAikngjOJjYCZwIrCL+eKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxQdopn1PsD1gf7p+MzgiGoIO5nMB8GA1UdIwQY
MBaAFLkAYy1PgBV9ae9bU/5iTb+K3++vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEt
YjgwZmYyZjE1NTJiLzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9iYjU0OGUtNWM5MS00NjU4LThlMDEtYjgwZmYyZjE1NTJi
LzEvdVFCakxVLUFGWDFwNzF0VF9tSk52NHJmNzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2K2Wuhs
uK0V+ek3i/by6pUYU0UYB9qgdq/gj4afTjj8MYCJskLdJZYGg9b8LE9a3/1+z4P+
3yyEZQ0nusbISX2YoikBOFMhcfPienHPpWNrstyVCYuD6cabIOrhX7NQy1QQXVD4
+DeHMO5vjsEthxKzQSUKGK5N03Nlbp7ttZe73u+xwBGoWS5xfjcmkMxxoPyHAvsv
0l+1Hwq0zmgs9A236vUpY7LnYoe8aNaltubosgK0F1UA03RIKnbhorNx7YeZiX10
2Rb5/JtivMuTxbUo60OBagnOV1d1Tbd8ICsTKzhot5nf+tQ6MhQROLR8nZkTPbuz
Jd5t+Y2BawezIw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 06:04:14 2026 by rpki-client