This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
File:                     UjiBmTzw22dOidtYFebxiabGDR8.mft (raw, json)
Hash identifier:          bBGopMpyEwbvpI75tiLa/Y8UdbvoUay2MzjbHc/v4Gk=
Subject key identifier:   07:16:72:6D:2B:77:95:33:E1:41:60:FB:54:97:CA:90:C6:C7:E5:78
Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
Certificate issuer:       /CN=523881993cf0db674e89db5815e6f189a6c60d1f
Certificate serial:       019C420F77488EBBF642C4DCB2C3CA7167BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
Manifest number:          0EE7
Signing time:             Mon 09 Feb 2026 11:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:35 +0000
Files and hashes:         1: 7GrmvQQ-S1h02knSpYsk40B3pWM.roa (hash: w4yZJvXh/Y1tTd4zz3VfX2KscyL/TTELj8T0DWK32qw=)
                          2: UjiBmTzw22dOidtYFebxiabGDR8.crl (hash: 1UabfmfLbvz2vLZW3FggUASlQVVbUO0HcP+rHkY5mZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:77:48:8e:bb:f6:42:c4:dc:b2:c3:ca:71:67:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f
        Validity
            Not Before: Feb  9 11:00:35 2026 GMT
            Not After : Feb 10 11:00:35 2026 GMT
        Subject: CN=0716726d2b779533e14160fb5497ca90c6c7e578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:8c:43:72:07:b1:e3:15:33:7c:a0:11:17:
                    c8:10:00:77:76:86:a5:b4:e6:da:c8:60:45:cc:00:
                    33:89:3b:0f:eb:6f:0a:b5:6a:49:55:f2:d3:47:dc:
                    bf:6e:03:eb:21:8e:ab:70:84:85:02:eb:23:79:ec:
                    a9:bc:b5:7e:74:99:f9:8b:1f:ef:bb:9b:64:78:66:
                    40:e0:df:b8:1c:68:cd:22:d1:22:cd:71:04:22:76:
                    85:1c:ad:65:c6:23:7c:88:e2:18:67:69:fd:2d:e7:
                    54:ea:e7:34:de:63:36:00:3d:b7:92:67:fb:9d:07:
                    b9:63:ad:73:38:2a:49:97:58:df:29:2a:54:3a:16:
                    cd:c6:6f:dd:e8:ac:f8:83:f5:60:89:f0:5e:7f:df:
                    74:d0:04:2c:2e:15:1a:c0:e9:a5:27:4e:cc:f3:d9:
                    d8:2c:08:6b:3a:34:37:fb:7c:de:be:48:2d:e6:9c:
                    b2:93:67:05:f4:76:d1:81:c7:9e:b9:1e:5f:68:f6:
                    31:f3:2c:b2:b4:c9:8f:da:9f:da:1b:bf:a0:1d:d2:
                    12:0c:eb:06:97:e7:cd:92:6b:68:aa:af:6b:29:19:
                    33:5d:45:2a:d8:33:3e:4b:09:d4:f9:7b:0c:70:d0:
                    a7:bf:70:82:0e:ff:8b:a2:62:e6:e4:d3:8b:94:59:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:16:72:6D:2B:77:95:33:E1:41:60:FB:54:97:CA:90:C6:C7:E5:78
            X509v3 Authority Key Identifier:
                keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bb:16:52:2e:07:8f:71:10:78:45:6f:63:be:5c:0d:85:28:
         3e:ef:7d:21:f9:c0:94:85:33:ea:06:40:f4:a7:23:83:14:30:
         29:4e:d9:83:58:14:d8:85:9a:89:98:80:0d:df:aa:3a:d1:84:
         2b:b6:9e:8b:59:a1:5f:31:bd:35:24:0a:87:31:70:82:79:5d:
         46:22:b8:2b:41:4e:19:2c:03:dd:17:aa:9e:49:f4:0f:3a:36:
         b4:7a:74:e9:31:1b:a2:8e:1a:f5:83:66:da:e4:06:83:54:1c:
         55:fb:df:f9:e2:6b:04:0f:19:e3:a7:02:bb:9c:ff:8c:ae:bd:
         3f:92:1f:cb:47:82:0e:44:c4:6d:61:ed:64:a9:62:e0:14:58:
         80:b3:ae:73:a3:b7:62:97:cc:fe:fa:09:7a:b2:90:80:cc:cd:
         9d:79:d5:84:45:5a:22:d7:c0:15:30:e9:90:77:34:21:69:17:
         e7:93:ee:d8:d1:48:c2:e6:78:ec:0f:7f:42:a0:58:e0:78:a9:
         0b:f6:f3:3c:8f:99:2e:7f:0f:e4:12:84:b4:f5:e1:c2:70:49:
         b0:b9:cc:50:3f:7e:d5:ed:65:80:ba:e2:01:26:af:5f:be:fb:
         2f:18:f3:3f:7a:45:87:6f:46:b6:ef:ee:15:9e:ea:85:02:d6:
         15:d3:ce:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:12 2026 by rpki-client