This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
File:                     Uev2DyIajjHTawfqptLlP20GS20.mft (raw, json)
Hash identifier:          jRWZlPmUtfv07rYZ+SRTCA5oSjQ9fjoSq8QxeozBFpI=
Subject key identifier:   23:67:E7:67:1B:D2:93:FE:C0:B7:4B:77:2C:2A:31:C2:69:3E:62:18
Authority key identifier: 51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
Certificate issuer:       /CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Certificate serial:       019C43C73D14BFB8A235A106D9338A61B2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
Manifest number:          02DB
Signing time:             Mon 09 Feb 2026 19:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:56 +0000
Files and hashes:         1: MPq8iza6WIhB1o1xVKox7Pzo9Kk.roa (hash: RL0GK8JPuvsKiHzOav85apDuZHO/yene+gQ6QpASIMk=)
                          2: Uev2DyIajjHTawfqptLlP20GS20.crl (hash: wmyEN/kE5lKs2gqfOBcBPP2LkCVSJf57/iUGOBSGwIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:3d:14:bf:b8:a2:35:a1:06:d9:33:8a:61:b2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
        Validity
            Not Before: Feb  9 19:00:56 2026 GMT
            Not After : Feb 10 19:00:56 2026 GMT
        Subject: CN=2367e7671bd293fec0b74b772c2a31c2693e6218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:17:a2:a7:cb:8b:52:fa:f6:13:ad:60:ad:2f:
                    55:89:ed:6c:36:b5:9d:5c:92:9f:53:fa:87:22:fe:
                    df:0e:1c:07:08:c5:0c:07:7e:a8:ea:95:f5:9e:bf:
                    fd:6f:4b:8d:24:0f:31:52:a6:fd:9a:e9:32:ca:ff:
                    a5:81:48:30:42:11:c5:00:1f:cb:f3:30:42:64:5a:
                    94:7e:e9:6c:fb:68:51:aa:b8:d4:b5:a6:b8:bc:29:
                    31:c1:fd:c9:18:34:98:3b:e4:9b:32:72:33:0d:08:
                    32:23:8b:a6:be:ae:55:9d:8d:fa:bc:6e:19:90:9f:
                    63:4d:33:4a:82:dd:a3:94:b6:71:92:59:b1:c1:f4:
                    b3:38:b0:bd:4f:ee:d4:30:b7:80:2d:50:ce:64:c7:
                    7a:30:43:a5:6c:90:34:cc:4f:8f:d4:7c:8b:e9:81:
                    c0:f2:7c:f1:a5:a7:49:58:18:a3:f3:b3:98:fe:1d:
                    fa:35:e9:4a:f4:96:69:c4:39:be:ae:e4:6e:f0:f1:
                    76:ee:a9:e1:19:b2:bf:54:13:df:5e:e5:c1:d6:51:
                    f8:fc:4b:91:f0:20:58:c4:50:9d:cc:2d:3a:1e:e7:
                    58:44:84:1d:4b:5e:a3:c7:ef:70:de:96:56:65:96:
                    2a:bb:89:af:59:a3:60:67:84:e5:61:e5:da:ac:15:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:67:E7:67:1B:D2:93:FE:C0:B7:4B:77:2C:2A:31:C2:69:3E:62:18
            X509v3 Authority Key Identifier:
                keyid:51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:df:fa:8b:82:22:95:9f:f0:f5:58:49:11:70:f6:85:6d:bb:
         4c:f3:b4:5b:cc:26:38:f4:45:3f:e9:72:70:56:e8:87:22:70:
         4a:27:93:c5:e4:4d:48:36:98:1d:18:7e:32:a1:0e:91:5d:63:
         7b:9b:3d:25:fe:15:b6:d7:66:e5:1b:d3:94:23:61:a2:4c:bb:
         cc:6e:13:9d:59:de:af:3e:d2:d2:67:da:b5:5a:d2:a7:31:c3:
         02:20:34:36:d4:25:af:49:06:b6:c7:7e:65:79:16:e2:30:58:
         ef:dc:8e:ac:12:82:cb:3d:c5:94:4d:cb:3c:2f:14:29:36:d9:
         fb:84:66:ba:05:55:46:c4:0a:22:58:37:32:c8:34:96:bd:a7:
         e4:73:8a:9f:6d:de:e9:ae:1e:36:86:e0:c5:65:86:73:ad:2a:
         57:5c:5e:eb:b2:de:b5:e2:5d:68:ab:5a:ec:23:9b:89:cc:16:
         98:fa:74:98:c5:7d:5b:e2:fd:7b:38:60:5d:14:90:10:22:3f:
         22:bb:74:98:df:de:c5:28:0c:db:81:d3:d2:8e:84:d2:b5:65:
         2a:3f:cb:56:63:c9:e3:3c:7f:da:fc:99:5f:81:4a:8b:1b:0e:
         78:50:6f:00:41:37:18:a1:65:35:22:87:5a:17:d7:a9:76:40:
         d1:00:7a:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxz0Uv7iiNaEG2TOKYbKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZWJmNjBmMjIxYThlMzFkMzZiMDdlYWE2ZDJlNTNmNmQw
NjRiNmQwHhcNMjYwMjA5MTkwMDU2WhcNMjYwMjEwMTkwMDU2WjAzMTEwLwYDVQQD
EygyMzY3ZTc2NzFiZDI5M2ZlYzBiNzRiNzcyYzJhMzFjMjY5M2U2MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixeip8uLUvr2E61grS9Vie1sNrWd
XJKfU/qHIv7fDhwHCMUMB36o6pX1nr/9b0uNJA8xUqb9mukyyv+lgUgwQhHFAB/L
8zBCZFqUfuls+2hRqrjUtaa4vCkxwf3JGDSYO+SbMnIzDQgyI4umvq5VnY36vG4Z
kJ9jTTNKgt2jlLZxklmxwfSzOLC9T+7UMLeALVDOZMd6MEOlbJA0zE+P1HyL6YHA
8nzxpadJWBij87OY/h36NelK9JZpxDm+ruRu8PF27qnhGbK/VBPfXuXB1lH4/EuR
8CBYxFCdzC06HudYRIQdS16jx+9w3pZWZZYqu4mvWaNgZ4TlYeXarBX/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNn52cb0pP+wLdLdywqMcJpPmIYMB8GA1UdIwQY
MBaAFFHr9g8iGo4x02sH6qbS5T9tBkttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWV2MkR5SWFqakhUYXdmcXB0TGxQMjBHUzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2FlMTgtNTk2Ny00YzY4LWIwOWIt
NzdjNzAzNjU3NDFmLzEvVWV2MkR5SWFqakhUYXdmcXB0TGxQMjBHUzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yY2FlMTgtNTk2Ny00YzY4LWIwOWItNzdjNzAzNjU3NDFm
LzEvVWV2MkR5SWFqakhUYXdmcXB0TGxQMjBHUzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN/6i4Ii
lZ/w9VhJEXD2hW27TPO0W8wmOPRFP+lycFbohyJwSieTxeRNSDaYHRh+MqEOkV1j
e5s9Jf4Vttdm5RvTlCNhoky7zG4TnVnerz7S0mfatVrSpzHDAiA0NtQlr0kGtsd+
ZXkW4jBY79yOrBKCyz3FlE3LPC8UKTbZ+4RmugVVRsQKIlg3Msg0lr2n5HOKn23e
6a4eNobgxWWGc60qV1xe67LeteJdaKta7CObicwWmPp0mMV9W+L9ezhgXRSQECI/
Irt0mN/exSgM24HT0o6E0rVlKj/LVmPJ4zx/2vyZX4FKixsOeFBvAEE3GKFlNSKH
WhfXqXZA0QB60Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:52 2026 by rpki-client