This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File:                     uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier:          obiJMRwH53LiRImOzLDIhvEzmm+CKY63HvoCd0yNr7I=
Subject key identifier:   ED:7D:30:85:F0:B3:82:C9:6D:F6:B7:82:D2:F8:1E:6F:79:1A:EE:35
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer:       /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial:       019C4358F61D7E4E033E4F284810D6F904A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 17:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:29 +0000
Files and hashes:         1: k8cdudOxt-UXEB9vti7Ssvsk5vU.roa (hash: Is0dEg8TeiJuTJaXHNZDTXw2F+T/OPQFA/UKJWJv0ys=)
                          2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: bB5DnD51jTq1KM9DexrgTwSayMx93puIxjpkGU+qqco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:f6:1d:7e:4e:03:3e:4f:28:48:10:d6:f9:04:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
        Validity
            Not Before: Feb  9 17:00:29 2026 GMT
            Not After : Feb 10 17:00:29 2026 GMT
        Subject: CN=ed7d3085f0b382c96df6b782d2f81e6f791aee35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:80:99:e1:19:ad:81:6c:cc:86:4c:4c:91:
                    9f:c9:b5:1e:ce:ed:86:45:cc:12:98:35:f3:44:a7:
                    8c:1c:ed:13:83:cb:34:7c:f4:48:f7:6b:5e:e6:0b:
                    c6:ec:23:66:20:7e:3f:14:cf:4f:d2:ea:64:22:06:
                    d4:3f:b9:39:b4:c8:4c:fc:9f:c3:47:65:85:10:93:
                    f7:fe:ef:43:e7:aa:1d:86:71:50:f9:73:84:08:75:
                    c4:9f:a9:5d:96:2e:cf:53:dc:33:86:10:8f:be:45:
                    e2:93:32:f1:55:da:30:3c:49:89:fe:27:cf:41:26:
                    32:96:e0:15:74:93:e1:db:dc:72:91:5d:29:29:94:
                    ff:79:08:9b:ad:46:62:48:c9:73:b6:69:80:26:45:
                    b0:52:95:e6:37:1f:d5:d8:5a:25:2f:b0:14:5d:2e:
                    6d:90:54:64:a9:ae:24:13:91:53:5d:4d:5a:25:87:
                    55:16:96:8a:c8:ba:9c:0c:fe:04:41:d0:75:94:8c:
                    f2:32:8b:88:1f:cc:06:f3:ce:e8:d7:e6:6f:29:41:
                    b7:cb:ed:32:fc:a9:84:ec:f4:32:c9:a6:f5:99:0b:
                    2b:90:c3:c1:a0:67:92:a7:02:53:d0:8e:e9:4c:28:
                    bf:27:7b:e5:16:da:e0:bd:74:5e:2a:7c:b7:33:a3:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:30:85:F0:B3:82:C9:6D:F6:B7:82:D2:F8:1E:6F:79:1A:EE:35
            X509v3 Authority Key Identifier:
                keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:0f:26:6a:fb:37:b0:11:eb:2c:53:ec:5f:3b:f3:bc:4a:
         28:2b:ee:10:f9:0e:7b:e2:2e:14:2e:88:92:63:fa:4f:cd:1a:
         f9:ac:32:0e:54:66:c0:df:9c:a6:64:df:30:82:83:16:6d:8f:
         21:49:d7:39:c3:f1:be:d0:1e:7f:bc:54:04:ab:50:69:dd:55:
         36:48:51:fe:55:1b:d4:f7:07:f1:2c:8b:fa:f6:f4:e6:65:26:
         4d:85:bc:af:c3:0b:11:d3:f1:e2:29:7d:26:aa:9d:c6:63:1a:
         4e:5b:89:77:7b:45:51:aa:55:b7:ae:cd:d3:3d:88:6f:b3:46:
         4d:52:8a:be:45:96:25:9d:78:ff:23:de:55:4b:e5:75:66:dc:
         42:1a:9d:94:16:d6:d5:9b:69:f9:b0:8d:c3:65:97:30:99:4e:
         2d:c2:7f:04:26:92:65:a9:12:b6:3c:69:bf:db:a4:9e:58:c1:
         31:0f:b5:57:b6:16:00:88:17:f1:b7:b6:07:fe:39:0f:b9:ba:
         f6:45:48:d5:34:d3:1b:f9:0a:4e:80:0d:86:26:c9:d4:53:1e:
         1f:86:53:94:3f:b1:d8:bd:df:c4:44:98:98:cd:2c:d7:af:35:
         89:99:30:c9:e6:ed:a7:83:68:9d:ca:2f:1d:87:b3:53:7b:50:
         0b:cc:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:37 2026 by rpki-client