This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File:                     Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier:          3IwYyMff9l+Nr/gSfpdf4XY6J7ng0RT3wEs6jAxBfeI=
Subject key identifier:   B1:6D:38:D9:E2:53:02:4F:FB:4B:54:57:8E:85:4E:60:E1:3C:1E:7C
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer:       /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial:       019C420FC96098515706F03E8E97F859B224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number:          0C3C
Signing time:             Mon 09 Feb 2026 11:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:56 +0000
Files and hashes:         1: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: 5JjVMtpM/8aoVhcRNuBD9PO3uwkRaP6KQxCjp/nDrec=)
                          2: jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa (hash: Wq2XWQbDU1erZ3uKJEqO1ZrsNU8Z2zdZsF7YP6SoAlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c9:60:98:51:57:06:f0:3e:8e:97:f8:59:b2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
        Validity
            Not Before: Feb  9 11:00:56 2026 GMT
            Not After : Feb 10 11:00:56 2026 GMT
        Subject: CN=b16d38d9e253024ffb4b54578e854e60e13c1e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:30:d9:ad:cb:41:70:62:73:29:34:a1:fc:
                    a4:e7:4f:b0:4c:42:39:9c:54:12:39:9f:35:5b:62:
                    8c:04:b2:98:55:13:bb:0c:4c:96:ab:75:d4:e0:8b:
                    24:33:f4:d3:f4:ab:b3:be:62:3e:5d:87:8f:fe:12:
                    bd:55:ab:0e:bb:4a:3d:d9:cd:fc:c0:24:10:7a:ef:
                    5e:5b:13:04:a2:d8:24:d9:39:26:cb:16:7d:f1:d7:
                    f5:72:34:49:0d:2d:9e:b0:51:75:eb:c0:b4:58:78:
                    46:5d:98:ea:3e:c9:f3:6b:1a:e7:27:69:38:74:2f:
                    c4:bd:17:fc:2e:ee:5d:ae:32:6c:af:d5:8a:50:32:
                    ca:51:3c:22:95:c1:7c:b9:c1:04:6a:7c:55:0a:4d:
                    9a:64:f3:99:e5:9a:34:b0:4b:92:c2:00:df:bb:49:
                    42:4d:cb:8e:51:f4:5a:94:21:32:bf:3d:d4:3a:d4:
                    c4:e3:57:c5:0c:de:fe:b6:23:bc:be:72:b6:31:cc:
                    d9:e1:ee:9c:7f:a5:73:95:22:18:45:4b:70:6b:9f:
                    46:fa:1b:fa:14:c5:01:09:be:df:50:97:d8:c0:6c:
                    fc:06:95:bc:b3:e7:06:fb:3a:fe:57:ba:78:c6:59:
                    a1:e1:0b:62:53:29:83:7e:3a:b2:af:d7:d1:a5:5e:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6D:38:D9:E2:53:02:4F:FB:4B:54:57:8E:85:4E:60:E1:3C:1E:7C
            X509v3 Authority Key Identifier:
                keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:85:e4:dc:dd:d3:d4:97:67:bc:36:f7:64:ea:cf:ac:0f:7c:
         db:bd:2d:52:f1:e9:3c:c3:c0:e5:a9:2a:ef:a0:9c:23:84:b3:
         4a:56:d5:2d:b7:b9:a1:41:fa:ff:c5:b4:29:96:f8:bd:b3:17:
         4b:32:55:0b:a1:3e:cb:c5:a6:db:fd:fb:c9:ee:8b:28:67:d2:
         34:c9:0e:1a:8e:58:8f:bc:50:ca:f1:3e:87:1c:76:eb:b8:18:
         7e:22:a2:b6:32:03:82:6f:d0:92:c0:a9:ac:cc:fb:3a:6b:f2:
         29:fe:4e:d1:e9:4c:72:a2:4e:b2:ac:72:a6:ef:cd:76:4f:7b:
         6f:72:0f:d5:15:64:5c:95:f1:4b:60:d1:42:f2:2f:64:ed:6f:
         97:dd:c1:27:df:e4:12:79:bb:12:d3:22:57:e7:83:2f:85:c8:
         a3:d5:09:6d:ad:7e:1c:96:52:30:d2:d6:fc:5d:57:29:e6:d2:
         4b:cf:ea:e0:f3:c1:6e:ca:c5:75:98:80:26:d5:91:28:b1:cc:
         e3:64:89:f8:23:65:fc:c2:a0:cf:f1:36:05:f7:f0:d5:5f:0e:
         57:82:f4:30:0a:39:04:15:d5:ea:72:06:76:55:7c:d9:e0:94:
         96:15:26:61:ea:08:ed:47:8b:90:05:cf:79:38:61:d0:f7:a3:
         db:a5:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:01 2026 by rpki-client