This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File:                     U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier:          9gIRlLldaMqy04WK+p0Ef2hB5XwJY6Nv0H2giqazXxk=
Subject key identifier:   33:DC:B1:8D:FA:F1:DC:BF:D1:73:4A:D1:53:B4:75:68:66:4E:46:81
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer:       /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial:       019C42EBA220232940CB41A7D40161CE60E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number:          155E
Signing time:             Mon 09 Feb 2026 15:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:04 +0000
Files and hashes:         1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: 7RvEyiDKeWNnCmZuLxUVZgCHIXnrwQ5Pk+NXPErNqh8=)
                          2: Xn8q_66t7wzhb4v1l5kcWKBFQNs.roa (hash: 6vO+ulMoF82yem5grlAhBfA3FaHkdUHzR33O3qHwMWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:a2:20:23:29:40:cb:41:a7:d4:01:61:ce:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
        Validity
            Not Before: Feb  9 15:01:04 2026 GMT
            Not After : Feb 10 15:01:04 2026 GMT
        Subject: CN=33dcb18dfaf1dcbfd1734ad153b47568664e4681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:61:b1:94:c3:b0:18:47:35:d2:42:7a:15:
                    3d:76:fd:10:70:87:01:9b:04:98:05:50:f3:de:30:
                    32:65:9d:f5:ff:3a:6c:40:b1:1c:bc:bd:49:f7:9e:
                    ff:ea:b2:49:71:4c:99:22:29:8b:eb:6d:e7:69:2f:
                    50:94:3e:1e:f5:94:6e:b8:ab:f8:47:6e:4b:b2:06:
                    8f:93:41:87:3b:d2:d5:e6:2e:22:ad:f0:a5:9a:cf:
                    92:30:f3:8b:4a:09:7d:73:2d:29:21:9b:bb:4f:99:
                    fb:18:dc:46:ae:e0:a0:14:3e:c6:f1:a0:93:37:5d:
                    f1:ef:ae:72:f1:47:b6:ff:25:64:81:ce:9d:66:a2:
                    36:62:c7:dd:0b:76:01:90:a8:7a:ae:b9:67:03:f0:
                    f5:77:a2:06:2e:39:a1:09:53:1a:47:ad:2f:cb:b2:
                    e0:a5:6d:62:8b:d3:f5:aa:d5:b9:93:44:4f:6f:8e:
                    d5:4c:8c:16:ff:89:ba:d2:19:cc:06:0d:60:27:bd:
                    30:a1:cd:2d:05:ef:d2:c0:90:3e:a3:a3:37:2d:b6:
                    7b:0c:3b:1a:82:c7:38:b7:fe:45:b1:c4:aa:65:9b:
                    e2:47:a3:69:73:91:52:a9:94:73:4a:fd:50:b0:1d:
                    f2:10:5f:7f:48:9d:50:d0:76:f9:0d:8a:5d:32:65:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:B1:8D:FA:F1:DC:BF:D1:73:4A:D1:53:B4:75:68:66:4E:46:81
            X509v3 Authority Key Identifier:
                keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:78:e2:3f:14:2e:bd:f6:78:a4:83:45:31:77:23:6a:04:f5:
         12:df:f0:5c:a1:bc:17:73:e3:f2:11:f0:a6:b9:e5:e0:20:45:
         56:69:80:15:a2:4c:b1:29:a6:f9:6f:2c:d5:31:7a:98:45:c1:
         8f:da:fd:2a:51:0b:6f:b8:cc:c5:b9:2f:0d:63:ff:83:c9:3f:
         5e:d0:cf:d0:1a:77:1a:59:e8:bc:a5:5d:85:4b:8c:8b:55:ac:
         8a:c9:c5:23:c3:e6:45:00:cd:7a:9f:1a:a9:90:56:ef:58:3f:
         51:b9:78:d4:69:bc:b5:77:4a:94:26:f3:3e:5d:f5:77:22:4f:
         f0:2c:84:e7:c9:14:2a:5e:e2:11:c8:1b:c4:46:1a:35:9f:6d:
         e2:88:08:d1:d0:f7:90:27:99:04:ac:e6:98:63:ae:44:b0:c3:
         ee:40:2f:74:2e:aa:0d:2a:64:c4:01:44:4f:f4:79:90:5e:31:
         75:3c:d4:ae:57:52:e6:f4:74:f2:82:96:8e:69:01:36:07:b2:
         49:58:a3:c7:6d:da:91:85:5f:69:95:1a:15:cd:01:cc:06:5d:
         d3:be:ac:58:37:20:0d:25:09:85:b8:89:75:15:50:7c:db:54:
         81:49:94:f0:da:5f:49:4f:25:39:fb:3d:1d:99:6b:f1:16:d9:
         e3:20:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:37:00 2026 by rpki-client