This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File:                     U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier:          6iBoGpggcepquip5Wb2woyX/HR2WBc8/rayMDZmbQBE=
Subject key identifier:   A0:D4:D0:71:B2:32:92:03:57:89:CA:C5:3A:03:D3:14:19:B3:52:A4
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer:       /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial:       019C427D17CA7337EADE975431E93627E18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number:          1554
Signing time:             Mon 09 Feb 2026 13:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:20 +0000
Files and hashes:         1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: cw54AvYa7XXtuQQRMSbec1r8297ibYooJ4NVXF4+0Y4=)
                          2: lqa3yfi-IJTce6zbolyaur2GC34.roa (hash: euw2FgarLlwQhKJB1B+fQ7g3yZOfq06R+9gYUXAI1v0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:17:ca:73:37:ea:de:97:54:31:e9:36:27:e1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
        Validity
            Not Before: Feb  9 13:00:20 2026 GMT
            Not After : Feb 10 13:00:20 2026 GMT
        Subject: CN=a0d4d071b23292035789cac53a03d31419b352a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:fa:d9:ed:86:76:77:84:b2:f7:2b:e7:c7:
                    61:ac:9e:c8:6b:43:1d:9e:ce:67:bc:b4:b3:3e:92:
                    a4:9c:5c:39:78:b2:f4:fa:83:60:11:f5:1e:91:5c:
                    7f:08:d9:b5:77:b9:ce:8f:c1:05:50:ec:6d:43:01:
                    1e:1c:27:2b:40:94:b4:e4:e9:45:15:d2:ff:b4:e2:
                    47:bb:29:8e:d7:e2:d5:17:d4:e5:9f:88:83:a7:5e:
                    c5:23:9d:61:c9:2d:2f:29:14:0a:4d:b5:ea:14:f5:
                    b2:92:a7:8b:81:57:48:fb:f9:29:40:d1:68:51:9b:
                    18:88:5b:38:86:6a:f9:5c:b0:b5:65:09:91:0c:a4:
                    4f:7f:51:44:d2:91:1f:6f:00:17:3a:4f:10:5a:e3:
                    00:4f:a3:40:d5:84:a8:d6:eb:98:b6:d7:ed:d3:70:
                    b0:02:b5:ac:2d:21:22:9b:2d:12:a7:00:fc:1f:35:
                    4e:52:37:31:95:c7:af:05:4f:84:3f:0f:ac:70:2d:
                    77:75:10:8a:21:33:b4:c5:e5:14:57:cd:b5:67:76:
                    cc:7b:d5:b7:00:b0:54:1c:41:9b:cc:ee:74:f9:3a:
                    08:41:ea:f3:1b:1a:26:21:43:4e:32:b3:fb:96:c1:
                    6f:e2:1a:e3:34:df:d6:95:5b:34:ba:40:55:ff:4f:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D4:D0:71:B2:32:92:03:57:89:CA:C5:3A:03:D3:14:19:B3:52:A4
            X509v3 Authority Key Identifier:
                keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:80:f7:7a:c6:68:08:f6:d7:fb:aa:5f:8a:4b:4b:a2:d4:31:
         cc:4e:69:bd:fd:b7:c1:05:d0:a5:87:e4:5b:85:27:a0:46:45:
         ec:f9:5c:27:0c:73:f6:9f:40:d4:be:9e:a6:56:b8:32:f6:af:
         05:f4:3c:ab:af:d3:48:bd:67:44:41:c3:2a:d1:d7:0d:c2:00:
         81:98:2c:e0:9f:62:eb:48:b7:e1:f6:80:da:bd:92:f7:d4:d0:
         29:2c:be:2a:d4:46:e1:97:e8:ef:5b:63:d3:b9:d1:59:0e:61:
         69:09:e4:ce:5c:a9:db:b7:2d:3d:9e:a7:50:aa:e9:89:a4:c8:
         62:73:a9:a5:3b:8f:27:b1:5e:3a:39:0f:1f:3e:c6:ca:d0:5c:
         93:f8:58:c0:31:a4:74:e9:2a:a0:62:5f:cf:d9:f6:6b:03:06:
         94:ef:9a:c2:65:60:ae:4a:ac:e4:b6:9c:fa:ed:6f:36:6b:ad:
         f7:f2:7f:42:10:40:02:f4:a7:11:c7:fc:c8:a4:aa:02:5e:ed:
         a1:f8:ba:90:a9:b5:8b:3f:68:97:12:c8:22:c9:99:a1:2b:cc:
         1c:5e:40:c5:32:62:40:bf:61:a5:f3:a7:8e:b6:9f:40:e6:d6:
         bb:60:37:dd:ef:8f:24:9d:f5:8f:fe:17:f4:05:da:04:a6:3d:
         85:23:bc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:17 2026 by rpki-client