This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File:                     u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier:          bV15jif3NP3QBapqFPBmhhtEZA/pAWzqW5j8/5wvbE4=
Subject key identifier:   8A:E0:94:AE:B7:22:86:85:33:72:F4:6D:B6:45:A0:56:FF:68:25:9F
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer:       /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial:       019C424635510E6FE451ECF1993C8F3E4CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number:          08A7
Signing time:             Mon 09 Feb 2026 12:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:23 +0000
Files and hashes:         1: iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa (hash: 0GjE/GSpKOrR5lJaIX0JhjgnY5INn+Q+Cz2beD9Wkrc=)
                          2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: 8pDBpVFpe+8sQpsUphKyHVXtmN6LHFgOrIXhsso9eos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:35:51:0e:6f:e4:51:ec:f1:99:3c:8f:3e:4c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
        Validity
            Not Before: Feb  9 12:00:23 2026 GMT
            Not After : Feb 10 12:00:23 2026 GMT
        Subject: CN=8ae094aeb72286853372f46db645a056ff68259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:e5:41:89:ed:03:e3:b1:9b:6b:67:e5:ed:
                    f5:3d:0d:0d:90:a7:2d:88:f6:ad:e3:b1:9a:94:85:
                    25:e9:29:e9:c5:87:df:e0:19:f9:2c:28:31:e8:0d:
                    1b:5f:c8:dc:88:70:69:0b:ed:62:7b:8d:ef:a2:b9:
                    f8:eb:6c:26:63:6b:89:85:46:05:67:7a:6d:63:93:
                    d1:33:d2:5c:06:72:13:d3:a6:03:6a:8a:df:79:70:
                    b5:bf:0f:0f:77:2c:d3:de:41:22:80:c5:e4:75:20:
                    e0:86:75:e4:ad:ec:6c:b8:5b:af:53:27:ee:90:65:
                    46:3d:14:ba:53:6e:8b:13:68:67:d4:67:d5:bf:72:
                    aa:57:3c:c4:c6:5e:16:bf:cb:26:da:78:e4:d8:22:
                    9f:fc:06:69:aa:63:9b:1a:70:84:36:2d:cd:fc:a2:
                    bf:56:12:04:f7:89:5d:62:9b:5c:20:b3:bc:95:88:
                    7b:0f:31:eb:ff:97:b1:eb:af:de:7e:9f:37:8d:05:
                    0b:fc:3b:38:0f:2b:15:06:c6:83:83:14:16:a1:99:
                    6a:24:bf:e7:d7:62:70:a2:fb:6b:90:a2:3c:d3:25:
                    42:f5:c9:63:8d:8f:34:75:ca:e0:21:c9:4a:d2:67:
                    1f:dc:7e:1c:08:3e:b3:de:44:5f:94:cc:74:13:07:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E0:94:AE:B7:22:86:85:33:72:F4:6D:B6:45:A0:56:FF:68:25:9F
            X509v3 Authority Key Identifier:
                keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:3e:0b:27:ed:6e:b9:23:61:d5:6a:f9:08:37:2f:16:f9:
         5a:49:1d:c5:21:af:dc:a9:7c:19:00:14:e1:40:5e:fa:4e:ad:
         53:2b:05:65:6b:0e:07:d8:12:78:c6:a3:e1:bf:72:99:b6:ad:
         c4:7d:45:9b:e1:ce:43:a9:ba:de:16:e6:dd:1f:05:97:e5:04:
         30:f7:32:9c:fb:4b:33:8e:f2:29:c0:e9:c1:0c:ea:34:ed:ba:
         d7:5b:a1:ba:24:95:85:17:df:a1:4f:28:66:52:2a:2c:4d:37:
         b2:9a:cc:62:11:c8:14:28:50:e9:e4:20:ca:54:a5:87:a3:3b:
         72:35:ae:51:fe:be:d4:9c:e5:4f:69:95:4b:31:b7:46:15:02:
         64:3e:a6:df:08:6b:18:7c:75:74:65:10:ef:53:33:23:fe:6b:
         f6:db:c5:a5:9c:c5:df:73:5e:b1:47:2d:62:71:1c:22:10:72:
         fa:cd:0d:0b:7f:30:68:cd:c9:e0:5f:4f:9c:44:86:93:ac:67:
         11:a3:e8:a8:11:98:6a:db:33:77:1f:70:dc:30:6a:c3:81:3d:
         c6:8b:b1:f7:c0:52:d8:05:79:2f:48:32:b8:be:d4:c0:90:51:
         59:3f:82:14:9c:0b:e8:ee:53:de:fd:b6:1f:44:79:c4:94:a4:
         f3:59:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:31 2026 by rpki-client