This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
File:                     uHk6g7BixN6WkELwnBcoBmY2_cM.mft (raw, json)
Hash identifier:          dVG/+GIJoeWMSEDY2ATW9mZrBI1fbG9Fr+SidhPkcVU=
Subject key identifier:   0F:2A:E7:2C:42:B3:EE:32:A1:36:37:AF:B3:BD:ED:4A:ED:EC:C1:0E
Authority key identifier: B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
Certificate issuer:       /CN=b8793a83b062c4de969042f09c1728066636fdc3
Certificate serial:       019C435939F19CF52279F710BD680FF7B351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
Manifest number:          0870
Signing time:             Mon 09 Feb 2026 17:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:46 +0000
Files and hashes:         1: 73yo1hBbnpG-KqrmwMRQGWnQVsc.roa (hash: RW+71Uv4a5/FINdlj+y0Wdwc6hifhlBtDx//ZdfSom8=)
                          2: uHk6g7BixN6WkELwnBcoBmY2_cM.crl (hash: e8v5ZG5LwExaaeaz2oEXQopYwUSMwCZMJ3fQlrkEOg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:39:f1:9c:f5:22:79:f7:10:bd:68:0f:f7:b3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8793a83b062c4de969042f09c1728066636fdc3
        Validity
            Not Before: Feb  9 17:00:46 2026 GMT
            Not After : Feb 10 17:00:46 2026 GMT
        Subject: CN=0f2ae72c42b3ee32a13637afb3bded4aedecc10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:9a:f3:73:a1:44:cb:1a:79:31:c4:c0:ea:
                    81:83:97:5e:04:bf:a2:3c:db:51:4a:f9:a0:3e:38:
                    f6:59:0d:67:4d:df:85:2f:e8:5a:e3:fb:47:cd:09:
                    4b:41:66:f7:81:14:52:12:90:3d:41:45:1d:b1:25:
                    7c:7f:d7:81:4a:3d:ab:66:90:f9:43:85:02:81:8e:
                    06:40:97:c6:9f:a3:61:fd:eb:a3:cc:23:9d:bb:9d:
                    36:bb:d6:55:29:33:a3:53:6e:8a:bd:03:a1:87:db:
                    00:4c:43:4f:7b:9f:29:34:f4:6f:9e:86:58:f4:95:
                    b6:82:06:28:9e:ec:11:9d:86:d0:c9:c5:08:07:02:
                    48:74:db:76:26:ee:35:55:2d:1a:45:79:11:2d:76:
                    3e:05:a5:61:4d:fa:78:4c:1a:e9:ee:5e:c5:c9:78:
                    f5:74:b3:2e:15:e8:38:b6:22:39:bf:11:59:3f:f5:
                    61:5e:c9:82:29:bf:f0:f3:e0:a3:3f:fb:9f:9b:48:
                    f4:39:ce:bc:4a:ff:7f:ae:d8:fa:dc:50:82:9e:5c:
                    5f:24:97:99:da:bf:84:49:05:9a:cc:c5:4b:4b:12:
                    1d:50:f2:75:be:09:9c:86:bb:4b:a8:22:97:4e:c3:
                    fa:53:c6:09:2c:dd:e3:72:2f:8a:c0:a4:4e:a7:02:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2A:E7:2C:42:B3:EE:32:A1:36:37:AF:B3:BD:ED:4A:ED:EC:C1:0E
            X509v3 Authority Key Identifier:
                keyid:B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:fb:bf:98:15:45:47:c2:3f:a9:b7:41:cd:c7:83:8e:e8:
         59:e9:12:65:49:e8:1a:ae:d4:f6:e6:4b:11:c3:24:ba:69:84:
         b5:8e:c5:34:13:d1:5e:8f:2c:d9:b5:06:d4:5a:f1:e5:80:17:
         fd:42:75:9c:ec:ff:23:37:6c:07:a8:ea:4f:c3:10:d7:41:bf:
         10:55:7f:db:af:ad:20:22:d8:1b:ce:28:99:1a:44:9b:88:52:
         6f:b4:3f:61:52:32:62:a1:96:55:4e:b7:68:c6:f5:c7:fb:03:
         3a:c0:a5:4f:fa:f3:c3:e7:d9:fd:41:bb:78:42:33:4c:64:97:
         6a:d1:34:04:af:ba:82:ad:76:74:fb:d4:73:6d:a7:50:ce:3a:
         9e:68:80:ad:5b:59:13:39:9d:cc:ff:51:93:e6:33:2d:93:68:
         8e:e8:de:de:23:af:1a:0d:93:28:c4:e7:17:c3:ba:6a:5f:76:
         aa:fb:7f:56:63:8c:03:f3:ec:d0:62:a5:04:19:e2:8c:78:05:
         e1:ac:af:4f:17:b9:fc:a4:d2:78:52:39:af:c0:51:97:22:66:
         d1:db:d5:33:75:27:43:78:02:0a:05:6f:d0:1a:95:5e:6f:8c:
         5d:33:d7:8a:22:ee:b9:28:c2:58:eb:9c:d2:d2:49:c8:c3:9d:
         de:bc:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:06 2026 by rpki-client