This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File:                     u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier:          GEl9lxy7oje4BMO6Usf/nTH+u35WTStqZ5FQQejSo6g=
Subject key identifier:   9C:C6:2C:53:1C:0E:64:5A:A2:CA:5D:54:83:AE:0F:DF:D6:2A:F2:60
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer:       /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial:       019C424663783C98CE6BC72D70E07F5BA44B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number:          152F
Signing time:             Mon 09 Feb 2026 12:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:35 +0000
Files and hashes:         1: AWxzzyNyiEe96JGpfTTltwTSHS0.roa (hash: e990mLN/bBQ15JQILJpMpdVXqqpNaInRtBdXK82dx1E=)
                          2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: FvAhkM0nPTQcMQW9KbfjHS6ylrdLFyFvsv5soGov5DE=)
                          3: yHLToeByeR5LXnQLDh6oCy31RMM.roa (hash: JH11seY61l0JGKEmVY9l0Ssg5gMsTcO0W459L08nH2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:63:78:3c:98:ce:6b:c7:2d:70:e0:7f:5b:a4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
        Validity
            Not Before: Feb  9 12:00:35 2026 GMT
            Not After : Feb 10 12:00:35 2026 GMT
        Subject: CN=9cc62c531c0e645aa2ca5d5483ae0fdfd62af260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:05:3d:8b:5a:ed:b7:76:1d:3b:48:32:81:
                    39:36:d5:76:7d:00:4a:1b:5a:93:df:cf:0f:8c:d0:
                    a1:70:1a:ef:6a:df:08:1f:82:50:e3:95:41:07:41:
                    c1:d4:c3:89:22:52:fa:a2:d2:fe:a4:d2:b6:39:19:
                    c3:97:db:c9:43:d0:2b:52:bf:f8:f2:ba:84:4b:91:
                    8b:a3:5a:3e:33:f8:c1:26:75:bb:c8:fe:c1:79:cd:
                    df:0d:48:5b:30:5f:af:2b:88:51:23:83:bf:92:aa:
                    fe:00:a5:69:b0:35:14:2b:aa:8f:c9:b2:79:3f:10:
                    bb:dd:4f:9e:0b:c4:1a:1c:07:82:d5:bd:2e:2d:a6:
                    47:cf:92:49:ad:b9:ed:c0:d7:25:43:0a:1a:a7:b4:
                    dc:bc:5f:7a:df:ac:a1:84:7b:d8:eb:da:c4:fc:94:
                    d7:8a:c5:52:a0:e7:e9:58:db:bc:98:9d:7c:1a:c2:
                    86:26:10:7d:18:3a:bc:ac:1c:27:03:ea:12:4c:10:
                    c7:56:da:ff:43:d4:9b:b2:35:b5:20:ae:8d:da:6e:
                    60:cf:38:4f:3c:fd:28:5a:10:36:41:3b:44:05:ce:
                    72:66:1a:31:6e:8f:c1:76:a6:55:07:3e:79:4e:84:
                    64:ed:2b:6d:69:67:1c:39:7a:08:2d:41:5c:06:a1:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C6:2C:53:1C:0E:64:5A:A2:CA:5D:54:83:AE:0F:DF:D6:2A:F2:60
            X509v3 Authority Key Identifier:
                keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c8:f6:5f:a3:41:cd:55:c9:94:ea:47:64:cd:bb:2a:f4:41:
         83:7a:53:6b:d0:77:6b:21:6d:dd:11:1d:38:91:5b:a9:79:cf:
         03:f9:2f:31:3d:c9:81:64:68:f8:33:79:22:78:60:20:60:90:
         16:60:5d:5b:3c:c5:6d:1d:45:5c:e4:69:e1:b7:71:3d:e3:f4:
         f4:b9:79:fe:97:46:f2:a4:4a:45:28:d1:0b:f6:49:43:c9:83:
         d0:ed:a3:d7:db:67:05:e6:06:96:b0:c7:87:01:36:f2:71:b7:
         0a:25:37:7d:2e:ca:c6:01:f6:a2:41:90:00:3e:4b:c0:5e:19:
         10:b8:58:d3:89:e5:de:7c:e3:4d:08:a7:2a:ef:d2:2a:97:95:
         c6:a8:1f:69:a2:cf:0f:b5:1b:64:54:be:ce:bf:7e:10:61:e8:
         45:7c:be:67:22:01:44:7c:5d:e1:af:79:70:b3:c7:19:8d:ed:
         e4:c4:03:e7:a0:97:d2:bc:f5:53:7a:35:5b:80:7f:7e:b4:31:
         74:c6:bf:2b:7b:9d:83:38:0e:02:7d:eb:fd:fb:d8:82:d4:f6:
         df:74:26:9b:a1:71:17:41:3f:bb:2d:b0:32:f5:3a:5e:1b:79:
         c2:63:f5:b0:ab:19:96:be:78:f8:f5:33:d1:12:6f:05:d6:57:
         74:80:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:08 2026 by rpki-client