This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File:                     ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier:          6ABYDRpWHCPI+GE/H8Hj1coOaT61oZSj6auAjAq2+RI=
Subject key identifier:   D4:D2:CF:8E:C3:41:42:EC:AA:95:61:F3:B9:D6:3A:68:97:B6:7D:B6
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer:       /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial:       019C443487EBE5BBEC040ECA6B3CE4B51BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number:          158A
Signing time:             Mon 09 Feb 2026 21:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:19 +0000
Files and hashes:         1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
                          2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 3v+DqT+h+kmZ4h5F9AHi5AtITadRe1fIwIwD/dVZWFA=)
                          3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:87:eb:e5:bb:ec:04:0e:ca:6b:3c:e4:b5:1b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
        Validity
            Not Before: Feb  9 21:00:19 2026 GMT
            Not After : Feb 10 21:00:19 2026 GMT
        Subject: CN=d4d2cf8ec34142ecaa9561f3b9d63a6897b67db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:c6:60:dd:b7:b4:d1:de:ec:b6:90:47:51:
                    16:0e:78:41:13:45:9b:7c:60:48:17:9b:fc:99:20:
                    25:d4:b0:f0:c1:fc:9d:f2:c0:fa:48:de:ec:ec:b6:
                    c7:03:ef:a4:3d:bd:8c:85:fd:13:08:48:36:fa:b3:
                    f1:b1:51:ef:d3:87:68:4e:74:0b:31:9a:f8:ad:51:
                    3c:2f:be:cb:3f:ac:f2:2a:bd:83:89:33:30:b1:cd:
                    fe:a0:00:ec:90:28:15:d9:2f:3b:23:e1:7c:42:46:
                    ee:1e:32:a3:65:27:64:cf:2a:5d:91:21:5a:54:d5:
                    16:de:e8:a0:8a:47:75:fb:c5:3d:4a:1e:66:5c:bb:
                    ca:be:95:7e:c0:c7:fa:d8:d3:a7:20:e8:0e:0f:5b:
                    c8:5d:47:93:52:99:e4:fa:cc:0c:51:84:7a:9f:75:
                    1d:b4:d6:09:60:cd:e2:88:36:44:67:19:0a:48:c8:
                    6d:61:88:59:82:64:a7:57:27:c1:db:92:7b:ff:fc:
                    1d:df:3d:3b:e9:d9:e7:d2:3b:fe:b9:74:48:75:76:
                    3c:98:9f:e3:31:fc:e2:6e:52:e2:14:da:70:2a:db:
                    71:1f:59:69:b0:07:a8:fe:9e:0f:b1:c2:04:9d:0c:
                    44:b0:18:ca:6d:d6:2a:f8:f2:ec:61:61:98:86:b2:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D2:CF:8E:C3:41:42:EC:AA:95:61:F3:B9:D6:3A:68:97:B6:7D:B6
            X509v3 Authority Key Identifier:
                keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:64:86:5a:89:6d:35:fe:9d:fd:44:68:63:78:1d:fb:47:e4:
         57:9d:ab:f0:f2:f5:bf:ae:56:8f:21:ab:b8:3f:88:2e:a5:aa:
         28:75:30:81:49:d1:74:7c:76:ea:42:ff:de:bc:bd:c2:d2:fd:
         66:c2:73:03:d7:77:11:52:e1:da:0f:39:ec:78:63:de:8c:66:
         bf:5c:8f:cc:75:5e:eb:92:7c:39:fd:11:22:d1:32:a1:a3:c8:
         a8:48:45:e4:b3:0e:58:f2:2a:44:a6:55:3d:8e:e9:47:ee:45:
         16:9a:8c:96:ad:51:c6:9c:6d:74:25:bb:df:b0:04:91:06:1c:
         01:d0:47:05:17:23:89:69:c5:5d:ca:75:6e:90:1c:c7:f3:7a:
         6a:45:a9:9f:fa:20:8d:6d:60:d7:38:d2:3f:0e:47:e6:31:dc:
         c8:2a:98:7e:6f:82:ec:28:79:2d:e8:c8:d9:0c:01:02:d2:b6:
         49:90:43:9a:9f:86:d5:d4:aa:6d:f2:a4:91:9c:f6:96:55:a0:
         f7:06:85:01:fa:59:6d:cb:20:22:be:80:40:43:78:4c:3c:fc:
         57:b3:26:f5:18:85:9c:96:21:15:37:1f:d7:37:74:7d:47:ee:
         37:80:2b:e8:7b:73:d0:88:84:21:18:a1:7f:f5:26:cc:0e:a9:
         67:29:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:48 2026 by rpki-client