This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File:                     uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier:          enOepwPORieCeTcHoXKa2aT+xOIF3mxCOaHywwujhpE=
Subject key identifier:   DF:83:65:99:C0:AC:2C:78:6D:BB:50:DE:84:C5:25:32:3A:6B:81:CD
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer:       /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial:       019C42EBB1A8B27EE4F9380C4E4A1A5D38CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 15:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:08 +0000
Files and hashes:         1: 8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa (hash: Z7aisMaBlEpC+Box7db/aG2eyltwAxWv0Dd2ZI7sSqU=)
                          2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: GvZzzNky6VQ9hcArZGtOtRvlZMo6COuVdR5Djc/micg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:b1:a8:b2:7e:e4:f9:38:0c:4e:4a:1a:5d:38:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
        Validity
            Not Before: Feb  9 15:01:08 2026 GMT
            Not After : Feb 10 15:01:08 2026 GMT
        Subject: CN=df836599c0ac2c786dbb50de84c525323a6b81cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:5b:fb:ee:33:bd:8b:fc:bf:42:64:99:ab:
                    18:84:56:88:6b:fa:46:bf:96:2f:63:4b:00:86:90:
                    57:62:bc:d7:80:d9:3a:22:5b:b7:73:a3:ee:57:cc:
                    4d:51:53:a4:dc:a8:10:8f:2b:13:c9:88:22:62:40:
                    1c:45:f8:c1:ef:b4:23:e9:cc:cb:aa:bd:17:ee:10:
                    dc:99:55:16:a1:4e:bf:61:33:c3:2e:53:6b:c9:6c:
                    69:56:97:7e:04:a6:60:c4:f5:44:93:c1:13:5e:7f:
                    9f:59:9d:3e:28:cc:e2:bc:43:38:3e:c1:75:78:86:
                    ee:a9:7a:27:8d:01:f6:9f:59:1d:45:7b:a7:8d:03:
                    c6:64:2a:c5:d1:0d:05:cf:bc:bb:20:5d:3d:85:ab:
                    2c:26:1c:01:91:e5:fd:c8:e2:29:af:97:18:ec:bd:
                    e1:65:dc:8e:42:7a:dd:7b:5c:36:d9:b8:a5:5c:1c:
                    8e:24:4f:d9:3a:a3:3d:d3:cb:a7:89:7e:68:f7:2d:
                    1d:08:ba:c8:3c:1f:a4:6a:d1:e3:a5:3f:88:16:4d:
                    b2:49:49:a0:9e:19:4e:6e:26:cf:0b:f0:a9:3d:7a:
                    8f:1c:56:46:7e:fd:d2:bb:42:9a:6c:32:80:5a:c4:
                    e4:73:a5:4b:19:01:87:8f:0c:d9:75:95:fd:d3:c2:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:83:65:99:C0:AC:2C:78:6D:BB:50:DE:84:C5:25:32:3A:6B:81:CD
            X509v3 Authority Key Identifier:
                keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ad:7c:13:63:84:3f:c2:49:bd:2c:28:83:b5:b5:8e:c4:16:
         ac:49:9c:3f:2d:2b:0d:8e:b3:39:ce:e4:83:9e:18:4d:1d:22:
         45:1d:4f:be:07:41:e4:aa:15:5f:fd:19:9c:6d:c5:b2:eb:86:
         b2:50:b9:37:bd:a7:05:00:ad:db:81:44:d1:8f:6b:2f:21:72:
         cd:3f:a2:37:2f:f1:f2:d7:81:f2:36:0e:17:ee:5e:0d:11:11:
         e3:e0:75:fa:e6:79:ca:76:dd:8c:d0:c9:94:b0:ca:2a:80:d8:
         d8:d5:88:9e:6a:33:89:10:02:06:23:66:68:4c:3f:e2:45:51:
         1a:94:3c:76:98:b0:ab:aa:24:e5:f0:51:2b:26:b3:f8:0a:f0:
         80:c2:f5:92:95:2b:03:7a:ae:5a:f8:4c:17:55:a8:bb:af:84:
         40:bb:64:ef:dc:dc:3e:fd:95:bd:6c:18:14:27:3a:0e:d2:4f:
         6b:42:50:e2:26:75:4c:dc:83:fe:d8:8d:92:43:78:c8:c1:c3:
         46:aa:8b:74:5c:31:46:e5:f4:50:a7:2e:ad:f6:40:f5:28:dd:
         9a:72:77:fa:a1:34:dc:8b:68:e3:1a:84:06:13:d8:df:ef:41:
         bb:b8:3d:08:55:b3:1f:22:13:dd:27:b3:2e:94:c5:07:dc:d6:
         8f:d3:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:14 2026 by rpki-client