This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File:                     mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier:          0p6FCoHSwkyCfPrS9tohzjqgb+V2EB/oD3kHDwpOQB8=
Subject key identifier:   17:26:F1:37:E0:6E:DB:A3:B3:45:D8:A6:8B:7C:BC:6D:0C:D4:4E:9D
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer:       /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial:       019C451111FB5086C06B81CA96BD6ACF54B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number:          17F5
Signing time:             Tue 10 Feb 2026 01:01:12 +0000
Manifest this update:     Tue 10 Feb 2026 01:01:12 +0000
Manifest next update:     Wed 11 Feb 2026 01:01:12 +0000
Files and hashes:         1: alIVB3DRNeac3-KBgtiTOAlVqYg.roa (hash: 5rWQXWfQK4PnnDUyWE3w/iefHP9zcHf0QTSdTcrqmsE=)
                          2: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: RVKaK7/UNQnp6WzMpMLIlpqSPLl9kWc2xtgDba9E3pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:11:11:fb:50:86:c0:6b:81:ca:96:bd:6a:cf:54:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
        Validity
            Not Before: Feb 10 01:01:12 2026 GMT
            Not After : Feb 11 01:01:12 2026 GMT
        Subject: CN=1726f137e06edba3b345d8a68b7cbc6d0cd44e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:bc:ea:66:a7:e1:a0:09:96:01:c4:f4:d9:
                    08:d4:96:e0:2a:cd:f6:34:79:34:83:da:55:5b:53:
                    43:9a:e2:ca:84:e9:4b:e9:07:0d:66:34:5e:bc:34:
                    fd:07:d8:f2:c3:57:81:33:f3:5e:b1:b8:fb:b2:c0:
                    69:5e:7b:f6:4c:a3:7f:3f:82:43:9c:6e:b4:28:6f:
                    65:86:c8:be:8c:de:a9:62:a4:95:2b:cb:cc:85:b2:
                    ae:a7:65:2d:cc:4c:a9:65:0e:76:e8:ef:d4:95:31:
                    5f:64:38:c1:85:b2:53:ea:96:d3:ca:e6:07:f5:cc:
                    82:9c:92:7d:39:ec:9e:f2:55:7a:63:4e:ff:3f:07:
                    52:18:3c:72:76:42:c7:ec:7c:3b:81:32:11:54:0c:
                    fa:3d:9b:0e:7b:32:0c:09:eb:3b:e4:19:9d:1a:52:
                    94:a4:42:95:89:e9:76:30:68:2e:23:08:4c:40:82:
                    14:74:85:e2:23:40:ad:99:a2:e1:7e:33:a0:45:56:
                    13:23:3d:eb:b3:74:65:01:45:a4:5b:5c:0c:af:7d:
                    49:b7:9f:53:fe:0e:7e:fb:4c:3a:fc:9b:79:35:22:
                    f8:04:8a:b5:55:72:78:71:c2:c8:72:96:51:8c:8f:
                    36:d8:cd:e3:1e:d8:ef:fb:63:21:6b:c7:5d:86:2e:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:F1:37:E0:6E:DB:A3:B3:45:D8:A6:8B:7C:BC:6D:0C:D4:4E:9D
            X509v3 Authority Key Identifier:
                keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:aa:80:56:7f:1e:92:46:a3:96:d7:21:a6:a5:b6:f8:c1:
         69:10:50:67:81:fe:0f:9b:36:9b:50:39:d0:64:47:fb:76:5f:
         a6:c9:98:b1:4b:d2:e0:07:a0:8b:b5:46:a7:a9:44:d8:f2:31:
         ff:b5:d9:2d:93:fd:f4:29:4e:81:ff:35:82:bb:35:41:fb:53:
         80:cb:7c:45:0f:1b:ec:97:7b:34:8d:86:79:9c:82:e1:16:b1:
         ca:e6:88:08:c8:19:55:13:84:73:23:42:92:9b:c8:44:9e:ac:
         16:59:4f:f2:0b:6a:42:00:7a:84:c1:c0:fc:e8:97:f7:01:76:
         79:61:5a:f7:94:3c:45:ca:11:6c:e9:e2:05:88:67:85:cd:45:
         9d:a7:3c:45:19:29:70:c5:22:24:68:1f:37:69:8a:39:28:14:
         da:e4:2a:80:50:49:8d:4e:24:42:95:74:33:23:bc:6a:5c:24:
         b7:3d:2a:7d:e2:86:0e:a1:f5:77:dc:e4:1c:b1:72:6d:bc:cb:
         be:80:e1:e9:0b:61:cc:e8:76:b4:d0:86:47:3c:88:53:31:54:
         ae:0a:be:ee:62:04:ba:e7:46:14:63:45:a1:da:d3:07:3b:0b:
         4e:27:bb:26:87:1d:d5:a4:4c:53:77:2a:c6:87:8c:ac:76:a8:
         ff:8a:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:33:16 2026 by rpki-client