This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File:                     USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier:          QXLqmvIi2pMYfTNG/8UZygB0+rQrE38vVleXdl26RbI=
Subject key identifier:   C3:A2:A0:77:35:E5:68:E3:50:85:58:50:1F:54:DF:3A:7B:02:AE:D6
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer:       /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial:       019C40FCDAB97D5EAF2FA54A8154F2DDE7E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number:          14A1
Signing time:             Mon 09 Feb 2026 06:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:38 +0000
Files and hashes:         1: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: vqLOtHg5AG9ClgBX0mc/vOMCVQuqLl8FF+vZDBX0LGE=)
                          2: eImEyRrzQaMBiFlZOhGNpdB8A3o.roa (hash: ohTX7uDCv7TQkH+WJ6CBAXHjVpePbGZrEFWaegxzw/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:da:b9:7d:5e:af:2f:a5:4a:81:54:f2:dd:e7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
        Validity
            Not Before: Feb  9 06:00:38 2026 GMT
            Not After : Feb 10 06:00:38 2026 GMT
        Subject: CN=c3a2a07735e568e3508558501f54df3a7b02aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:f6:ad:8e:db:4b:08:05:d4:b1:d5:10:4b:
                    c6:5d:08:ba:a8:c2:58:e3:ef:f5:29:f8:b5:43:b3:
                    77:80:00:af:a9:86:1e:b0:41:f7:a3:61:9c:f3:de:
                    4c:54:4b:b8:ef:67:21:96:48:18:77:97:6f:5d:a4:
                    64:ab:c2:4b:ce:00:6f:a8:65:b8:76:14:ce:95:f9:
                    73:08:0d:29:5f:27:e1:d6:e6:4b:2c:9e:ba:a4:44:
                    dc:50:30:4c:f2:01:84:be:30:5d:cb:5b:ba:61:99:
                    f9:99:eb:11:50:d0:bd:04:48:61:ab:78:13:60:21:
                    ca:5a:f3:7e:cc:c0:81:19:ce:3b:f0:97:65:1a:ec:
                    67:94:80:a7:65:df:a3:53:67:b2:a0:44:60:b5:a4:
                    74:9b:4e:25:b1:60:79:4f:21:fe:00:cd:79:30:d9:
                    de:64:07:e0:2a:bc:05:c1:4c:f0:09:62:a1:b2:c0:
                    3d:5c:59:8a:f4:8d:42:c8:04:c0:e4:57:d4:58:13:
                    30:6c:c2:81:9a:16:cd:33:7d:47:15:c1:2b:bd:8f:
                    3b:55:e2:aa:0e:5f:ce:48:17:25:9b:52:e1:11:85:
                    78:94:20:2f:7d:63:08:0f:8d:fc:aa:f2:a6:2e:4a:
                    59:9d:05:f6:5d:ff:53:ce:35:65:3c:7d:55:95:83:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:A0:77:35:E5:68:E3:50:85:58:50:1F:54:DF:3A:7B:02:AE:D6
            X509v3 Authority Key Identifier:
                keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:fa:0b:51:c6:7d:db:74:54:97:a7:3f:cb:75:56:ba:29:
         cc:8a:52:04:cb:20:ca:74:a2:0f:49:00:f5:9a:8d:0c:b0:cf:
         4c:3d:a3:76:02:4a:d0:db:1b:ef:6b:32:d4:a7:d3:a0:26:87:
         f3:83:b5:62:42:34:de:dc:77:b1:6f:e4:58:9b:f0:a6:2a:98:
         67:23:23:2b:68:c4:2c:dc:ad:da:ce:40:87:d8:da:22:17:68:
         bc:51:11:a6:2b:29:a7:10:c1:8e:dd:4c:96:53:f1:ae:f1:54:
         77:70:f0:25:a7:d4:4b:40:f5:3b:42:3d:90:8e:98:8b:4c:74:
         fc:ad:69:bb:7b:67:c7:cb:ca:70:3c:e0:c9:37:20:66:f9:e0:
         78:9a:b5:4d:db:99:13:eb:98:fa:78:18:5d:88:f9:48:3f:47:
         b8:f3:32:65:bc:04:52:c2:5f:2c:75:14:11:5c:88:98:56:77:
         55:60:b2:2e:28:52:ab:3d:6d:1b:bf:c8:80:45:c1:90:5c:2e:
         a7:a7:d2:79:10:af:ed:69:49:85:bd:12:5d:27:c1:f9:74:92:
         0e:70:a8:ab:ae:41:23:82:d3:42:3d:6d:18:94:50:11:6b:13:
         1f:cd:94:c2:2f:2c:57:a9:e8:0e:5c:9b:c9:86:ed:b5:d3:93:
         66:31:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:25 2026 by rpki-client