This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File:                     uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier:          wF8uBJa4jLIJAxXCoY1IU5+UdjWEq1vihizRAEwcKlw=
Subject key identifier:   1F:94:DA:BD:43:8A:1E:DB:53:BA:99:53:2B:46:1E:2A:0E:B3:03:2E
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer:       /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial:       019C41A1CB9B1EE856FB231677BB3D7A0F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number:          0C29
Signing time:             Mon 09 Feb 2026 09:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:48 +0000
Files and hashes:         1: cBMWof3fzl2WvO-9iPNkwKq65UE.roa (hash: l4uhlHM36IRywwsHUvPgf8xitbWlb3IF/+WuiPml4uE=)
                          2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: 1BH7Vpp5+29E7V9IIAbfuLWeaZVNc99WxmPFtn/4Nu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:cb:9b:1e:e8:56:fb:23:16:77:bb:3d:7a:0f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
        Validity
            Not Before: Feb  9 09:00:48 2026 GMT
            Not After : Feb 10 09:00:48 2026 GMT
        Subject: CN=1f94dabd438a1edb53ba99532b461e2a0eb3032e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:de:34:ad:5c:7d:f6:3a:e5:1c:d3:ba:14:
                    5a:29:52:f5:25:12:c6:f6:eb:ad:b6:6f:70:65:34:
                    db:30:9f:ef:8d:a9:16:14:c4:b3:44:ff:a1:0d:95:
                    2f:b5:f2:02:b2:45:20:03:29:d7:8e:b4:c8:98:64:
                    04:c2:60:32:b3:56:23:68:a7:c7:08:0a:61:d2:0f:
                    ae:19:a8:91:14:b3:2f:d5:72:4e:6e:88:ed:8e:f2:
                    bc:4b:59:ba:8f:a2:2a:c4:53:30:6e:8d:95:91:d3:
                    d7:05:0b:7b:5b:f5:d9:a6:bf:e3:30:8d:df:89:94:
                    de:12:e7:33:a6:54:79:44:8f:6b:31:0b:69:ea:eb:
                    7b:75:44:dd:a1:92:fc:38:5a:24:fa:e3:ad:ab:64:
                    61:67:81:cd:90:d8:75:61:ae:fa:30:21:74:f3:df:
                    cf:96:fc:7c:7c:fc:62:b8:73:fd:f1:8e:1f:dd:08:
                    20:d8:27:1d:98:3d:7d:52:ba:83:9f:1f:40:29:e0:
                    95:47:0f:79:ed:4a:6f:55:42:bc:46:6b:be:a3:52:
                    68:e1:0c:c7:a4:ae:a0:c6:b9:42:0d:69:98:68:9c:
                    89:0b:94:83:9e:6d:1c:bd:ef:ad:9e:e8:9c:36:8b:
                    1b:c2:db:5f:4a:2c:1c:c2:ef:b1:cd:23:a0:3d:89:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:DA:BD:43:8A:1E:DB:53:BA:99:53:2B:46:1E:2A:0E:B3:03:2E
            X509v3 Authority Key Identifier:
                keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:84:07:21:d0:67:de:af:a2:d8:9d:7e:5e:1e:57:7a:74:
         65:fa:07:8c:22:fa:05:94:64:7c:54:51:b5:fb:c4:b4:42:d0:
         f8:f0:d4:45:68:88:66:bb:eb:4f:c9:5a:13:a4:05:17:89:92:
         9f:d8:c8:7e:ba:90:d2:65:9e:9e:44:af:38:4a:d3:eb:eb:15:
         d6:18:36:c0:99:be:a8:be:76:9b:f7:4e:3b:b0:ed:f5:41:18:
         2e:0a:e2:7d:b2:c2:e5:65:99:66:7b:44:b0:b8:87:bb:05:59:
         e2:1f:10:44:e7:ef:e9:0f:52:09:6f:72:90:f0:57:9e:89:34:
         e9:21:67:bc:fd:de:34:a2:b4:13:d3:98:75:4d:31:71:dd:53:
         75:bf:e3:fb:8f:1e:39:12:e8:07:25:7e:92:3a:1c:35:9f:50:
         1a:8a:51:11:a4:cd:bc:83:a6:8d:a5:cc:4a:9b:11:d1:58:13:
         ed:2b:ba:43:67:df:c3:bc:20:96:f6:40:cf:93:b7:1d:69:47:
         c9:14:f5:78:fd:6c:a9:92:41:ed:3c:1e:f6:9a:fc:85:e2:b4:
         b5:5c:20:7d:07:be:67:08:e0:81:b4:b4:18:1a:dd:16:b0:75:
         fd:f3:84:ec:cf:68:47:cb:d4:85:45:bd:c2:e2:89:c2:e1:a6:
         8c:fa:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:52 2026 by rpki-client