This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
File:                     UuZ47pYouTW-JXzsw_siiYOdnlw.mft (raw, json)
Hash identifier:          de/5fcveytxfafszVPy2VdAmnzwUHdMQQ01ck14Epbo=
Subject key identifier:   B5:E5:00:1C:94:F8:43:ED:77:66:24:8A:39:81:7D:DF:EA:CD:C1:32
Authority key identifier: 52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
Certificate issuer:       /CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Certificate serial:       019C427D5E2639C31B7087FDFDE672504A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
Manifest number:          12A6
Signing time:             Mon 09 Feb 2026 13:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:38 +0000
Files and hashes:         1: UuZ47pYouTW-JXzsw_siiYOdnlw.crl (hash: By6ViXiMixB0EqgMMV9f5qvqxLNXhI5X2mxaJx+HxEA=)
                          2: awSUblYoi0uR-Qce-vsLGT4n938.roa (hash: hHM4gOkF2eXvtJlaJJ+ugAV+qUcnK5bYGtz3UK4BoKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:5e:26:39:c3:1b:70:87:fd:fd:e6:72:50:4a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e678ee9628b935be257cecc3fb2289839d9e5c
        Validity
            Not Before: Feb  9 13:00:38 2026 GMT
            Not After : Feb 10 13:00:38 2026 GMT
        Subject: CN=b5e5001c94f843ed7766248a39817ddfeacdc132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:22:21:3a:d8:d7:ae:3e:90:43:a2:e7:d7:
                    bc:71:b1:41:20:fc:77:b0:0a:69:73:e7:b1:8a:e0:
                    66:bf:27:58:b6:a0:e0:44:34:2b:b1:e9:25:8f:6a:
                    06:1e:73:20:16:f1:b2:2d:87:53:1f:47:04:ac:9e:
                    45:c9:4e:4d:89:f8:e1:9e:bd:81:73:60:9e:77:07:
                    fa:43:79:d5:15:f7:19:26:f3:03:2d:29:1d:b3:98:
                    b1:ed:98:db:9e:5a:40:b9:9a:6b:b5:2a:d2:37:55:
                    48:e4:ac:fa:8a:77:fa:27:47:22:0c:e9:01:ba:fe:
                    8b:77:8c:59:32:2b:ec:ff:d6:7d:75:be:3c:09:ff:
                    79:98:6e:ec:24:38:41:94:f9:81:ae:e6:7f:c8:20:
                    c5:01:c8:97:16:84:70:23:04:87:1c:7a:23:95:7c:
                    a5:36:39:92:a0:44:1c:81:be:11:30:01:3e:cd:43:
                    a3:d1:d3:a0:a8:de:0d:62:b6:56:28:d4:4c:d5:1b:
                    7d:1f:b4:51:7a:b6:5b:8a:8f:8d:7d:fe:de:c0:4f:
                    24:d0:5a:62:51:c3:08:ea:7f:54:2c:df:65:6b:00:
                    c4:8d:60:b7:95:02:78:39:fa:1c:09:f9:91:ee:11:
                    fa:38:74:0b:d1:ef:01:35:85:82:f9:67:3b:81:f2:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E5:00:1C:94:F8:43:ED:77:66:24:8A:39:81:7D:DF:EA:CD:C1:32
            X509v3 Authority Key Identifier:
                keyid:52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:29:9d:06:2b:47:bb:f2:b0:d2:18:48:86:13:31:57:05:04:
         11:db:ec:a1:5e:b0:5e:36:99:8f:a4:c8:be:06:9f:4a:db:de:
         20:14:eb:ec:66:ce:04:b4:96:7b:79:21:0b:4d:63:ae:cc:7a:
         8f:59:93:77:33:1a:76:46:b1:d3:af:0c:45:35:ba:82:80:4f:
         a0:54:67:d7:82:b6:8f:b3:e8:d0:98:ed:cc:18:cf:b0:8d:0e:
         fd:d3:5a:56:fe:45:14:db:5f:f1:90:94:4b:99:d4:93:06:bf:
         58:ce:66:d9:bb:5c:48:36:b4:80:7f:43:6f:8a:c2:9c:7d:9b:
         86:93:22:76:96:ce:e9:be:39:15:a0:3e:da:52:82:a5:8f:13:
         5f:31:fa:5a:96:fc:74:1e:23:4d:c5:0c:c2:54:64:96:7d:61:
         1c:fc:95:5f:3b:5a:2a:b3:20:a0:1b:99:43:a3:d2:6d:0f:13:
         dc:55:5c:08:93:28:74:0a:a2:83:63:a7:92:3e:94:48:26:03:
         d2:e5:cf:bc:39:4b:01:79:a3:6e:83:94:35:e6:02:23:29:8e:
         7f:73:f5:5d:b2:e8:f7:5a:7b:87:13:30:ce:d9:4c:b8:1f:fa:
         da:78:23:cd:12:89:37:22:00:fe:6a:a2:ed:80:a4:cc:00:c6:
         1f:db:6c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfV4mOcMbcIf9/eZyUEp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTY3OGVlOTYyOGI5MzViZTI1N2NlY2MzZmIyMjg5ODM5
ZDllNWMwHhcNMjYwMjA5MTMwMDM4WhcNMjYwMjEwMTMwMDM4WjAzMTEwLwYDVQQD
EyhiNWU1MDAxYzk0Zjg0M2VkNzc2NjI0OGEzOTgxN2RkZmVhY2RjMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ciITrY164+kEOi59e8cbFBIPx3
sAppc+exiuBmvydYtqDgRDQrseklj2oGHnMgFvGyLYdTH0cErJ5FyU5Nifjhnr2B
c2Cedwf6Q3nVFfcZJvMDLSkds5ix7ZjbnlpAuZprtSrSN1VI5Kz6inf6J0ciDOkB
uv6Ld4xZMivs/9Z9db48Cf95mG7sJDhBlPmBruZ/yCDFAciXFoRwIwSHHHojlXyl
NjmSoEQcgb4RMAE+zUOj0dOgqN4NYrZWKNRM1Rt9H7RRerZbio+Nff7ewE8k0Fpi
UcMI6n9ULN9lawDEjWC3lQJ4OfocCfmR7hH6OHQL0e8BNYWC+Wc7gfLM2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXlAByU+EPtd2YkijmBfd/qzcEyMB8GA1UdIwQY
MBaAFFLmeO6WKLk1viV87MP7IomDnZ5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82Y2IzOGMtZGQwNS00YWU4LWE4YjEt
NGU5N2VkNGU0ZWQ2LzEvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82Y2IzOGMtZGQwNS00YWU4LWE4YjEtNGU5N2VkNGU0ZWQ2
LzEvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCmdBitH
u/Kw0hhIhhMxVwUEEdvsoV6wXjaZj6TIvgafStveIBTr7GbOBLSWe3khC01jrsx6
j1mTdzMadkax068MRTW6goBPoFRn14K2j7Po0JjtzBjPsI0O/dNaVv5FFNtf8ZCU
S5nUkwa/WM5m2btcSDa0gH9Db4rCnH2bhpMidpbO6b45FaA+2lKCpY8TXzH6Wpb8
dB4jTcUMwlRkln1hHPyVXztaKrMgoBuZQ6PSbQ8T3FVcCJModAqig2Onkj6USCYD
0uXPvDlLAXmjboOUNeYCIymOf3P1XbLo91p7hxMwztlMuB/62ngjzRKJNyIA/mqi
7YCkzADGH9ts/A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:21 2026 by rpki-client