This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
File:                     ucN059N57ajbliAKTu_lvBwok58.mft (raw, json)
Hash identifier:          r7uk4qH778j88E+dDFBxBpv+v50ahIdk9bCI/n09hfU=
Subject key identifier:   63:05:9E:B0:EB:5E:63:EA:CA:38:FF:4D:F8:6D:05:20:83:E0:A8:8F
Authority key identifier: B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
Certificate issuer:       /CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Certificate serial:       019C4322F7B69BD183F06D5B65FA7961B8CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
Manifest number:          0EC7
Signing time:             Mon 09 Feb 2026 16:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:30 +0000
Files and hashes:         1: ucN059N57ajbliAKTu_lvBwok58.crl (hash: INQFXUEhpuJOZWOhS3EiPyA6SyO/UN3KVyh8+h+sHjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:f7:b6:9b:d1:83:f0:6d:5b:65:fa:79:61:b8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
        Validity
            Not Before: Feb  9 16:01:30 2026 GMT
            Not After : Feb 10 16:01:30 2026 GMT
        Subject: CN=63059eb0eb5e63eaca38ff4df86d052083e0a88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:78:7a:2a:4c:9a:27:27:bc:86:61:cd:2a:
                    e0:8b:ab:dd:94:d4:c6:c0:b2:ef:92:2c:bf:86:2c:
                    e3:2a:42:9d:a7:5a:cf:7d:d7:4d:f1:fd:ef:70:26:
                    b0:93:f8:90:3b:36:9c:47:c4:64:2e:2c:3f:34:da:
                    3d:9d:d7:54:8d:2a:d1:e4:1a:cb:1e:40:a3:4e:76:
                    b5:d2:14:75:60:1c:04:15:2e:ad:df:d4:dd:91:55:
                    9c:4b:91:5c:ca:5f:9c:4c:7c:f3:60:59:58:f2:2b:
                    39:4c:fd:06:4f:b7:3a:ca:83:35:44:81:5f:99:cf:
                    63:24:09:23:1b:0b:22:c9:04:ca:48:0b:ae:44:cb:
                    28:2f:8c:1b:58:40:e0:1f:fd:ab:4f:2a:ef:44:21:
                    b3:7c:3c:c3:41:82:49:b8:59:f7:86:e9:6a:99:08:
                    a4:b6:e4:55:5f:03:78:57:06:ce:08:ac:8b:62:4d:
                    f7:e9:31:5e:95:7d:2e:03:1d:77:3f:a3:d3:af:91:
                    6c:b6:ef:aa:f6:a8:48:b1:f6:43:e4:65:cc:ee:ee:
                    f4:e1:1d:30:96:4b:2c:72:07:0e:11:42:79:06:d8:
                    79:20:38:98:15:f2:05:77:f6:40:69:57:0c:ec:ae:
                    eb:b4:73:d8:7d:45:11:60:ef:ff:93:9d:da:0a:b9:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:9E:B0:EB:5E:63:EA:CA:38:FF:4D:F8:6D:05:20:83:E0:A8:8F
            X509v3 Authority Key Identifier:
                keyid:B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a5:a8:50:0c:05:48:2a:81:7d:b9:c2:c6:45:19:45:9b:6e:
         87:77:ae:9c:44:26:90:27:42:40:fc:63:1f:b6:b9:07:d8:3c:
         9f:8d:02:f5:d7:6e:32:77:5f:7e:62:07:37:4b:ef:28:eb:e8:
         fd:2d:4e:89:1b:61:a8:26:54:b6:17:a1:ff:35:6d:de:78:09:
         e5:0a:bf:11:15:76:66:f9:d8:d5:a3:af:3a:5e:b8:a2:39:fa:
         48:a3:f5:18:65:cd:c9:47:95:ec:94:1f:1f:1a:61:16:25:cd:
         b8:d4:2f:92:f5:fe:26:5f:38:c5:62:8b:01:59:5a:cc:44:de:
         80:6e:6a:62:c1:45:61:a9:3f:0e:ed:e0:ca:14:1e:cf:31:ec:
         ef:b9:c3:c8:30:28:78:19:25:e5:51:5f:6e:58:7a:f7:d5:a1:
         c3:bf:78:67:60:38:7b:2d:74:a2:7e:70:a4:9f:15:59:d4:8e:
         e8:06:ad:d7:8c:81:de:d7:19:54:65:2f:30:1e:31:80:58:87:
         19:8b:eb:68:17:4d:e3:ad:52:40:7b:4d:bd:88:5b:0d:04:26:
         21:4c:9e:65:98:05:fa:ef:3a:23:ad:d4:b2:26:38:02:2f:aa:
         c5:38:48:67:8b:ef:35:34:3d:46:14:69:09:1b:db:0f:e6:cb:
         a0:ab:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:33 2026 by rpki-client