This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File:                     uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier:          J1tJkgcX6SsZRK5JIMzRbUvHHyThtsSBUFruDgmNFXY=
Subject key identifier:   48:31:48:44:50:AE:17:33:9E:3E:A1:7B:88:55:AE:9D:33:19:F9:7E
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer:       /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial:       019C4358B6954750FBFD9E3BCA2EE97649D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number:          101C
Signing time:             Mon 09 Feb 2026 17:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:13 +0000
Files and hashes:         1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
                          2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
                          3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
                          4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: 4NP9n4mI5JcQzK0YLbaQe+k0wWkcaSKmZYgFXbBqLHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:b6:95:47:50:fb:fd:9e:3b:ca:2e:e9:76:49:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
        Validity
            Not Before: Feb  9 17:00:13 2026 GMT
            Not After : Feb 10 17:00:13 2026 GMT
        Subject: CN=4831484450ae17339e3ea17b8855ae9d3319f97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:86:8b:0b:45:3a:1b:14:ea:76:2c:c6:5a:
                    1a:f9:ba:2b:50:24:bd:ba:4c:59:84:68:19:28:98:
                    f0:8e:93:1a:55:38:8c:c8:13:70:68:56:25:4a:80:
                    1f:43:47:7d:7b:20:81:93:c0:dd:07:c5:31:75:f5:
                    3c:ae:75:04:7e:b3:21:fe:68:75:24:bc:2c:d9:96:
                    1e:9d:a6:e1:83:c9:3e:67:0e:e4:b7:c7:da:f9:b1:
                    79:cf:0c:15:0f:84:eb:5a:13:79:95:53:39:e6:31:
                    d2:af:01:98:bf:62:d7:ad:a6:b9:1d:6c:8a:eb:f5:
                    31:b2:d6:66:ba:c2:0d:74:9e:4e:2f:e0:5e:1f:11:
                    f2:6d:61:37:fa:d5:08:f2:c4:9c:4a:fe:bd:3e:e3:
                    5a:24:4f:d4:70:fd:20:82:77:3c:ba:64:76:be:79:
                    49:4d:a1:68:2f:ff:d6:e6:fc:0c:b9:f4:f0:69:c3:
                    cd:6a:3d:56:eb:88:81:6a:5f:9c:51:d4:7a:a4:4d:
                    85:f4:c6:4e:50:08:89:c8:c2:45:87:16:71:72:98:
                    b8:14:9f:da:76:e5:2a:16:73:61:09:cc:73:c7:cf:
                    00:02:a3:8d:c3:55:5f:23:46:6c:9f:3a:10:62:a4:
                    27:3b:55:74:0b:0d:ca:16:49:88:21:54:74:8e:fe:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:31:48:44:50:AE:17:33:9E:3E:A1:7B:88:55:AE:9D:33:19:F9:7E
            X509v3 Authority Key Identifier:
                keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a7:96:73:d4:50:e9:01:f5:db:a0:9c:28:04:bd:58:66:e5:
         f2:b8:4a:ed:42:d6:96:14:f6:d3:73:20:24:41:7b:07:d6:87:
         20:9d:52:56:8e:c5:07:ba:39:66:69:47:16:0e:4f:ed:d0:bb:
         a9:43:be:4a:61:90:12:70:f9:9d:17:79:94:9a:ca:5a:63:5a:
         13:48:26:f4:be:c7:fc:64:38:c2:4c:da:71:c2:40:cb:fb:ca:
         fa:03:6c:bc:17:72:ba:fa:6c:1e:65:13:0c:ab:df:74:6c:fb:
         45:dd:c9:9c:c2:7a:af:19:a9:51:15:a0:11:d5:98:7d:4d:f2:
         36:8d:96:36:5a:5f:4b:32:55:71:8f:e6:fb:76:06:f0:84:80:
         7b:39:50:89:bf:22:d2:bd:98:1e:26:a1:f6:e7:1f:f8:d9:e4:
         14:f1:05:6e:48:61:ab:73:cc:28:6a:7d:92:d2:b3:2c:c0:d9:
         b0:de:99:0f:e1:d1:2f:73:5c:67:f9:75:82:09:bb:a9:c0:b3:
         8b:07:c0:b6:b2:25:c1:40:87:2c:1e:3a:d0:45:3d:d6:cb:4d:
         aa:8d:94:42:5a:bc:e6:35:ce:c8:99:f4:1b:f5:74:68:2b:d6:
         42:56:b1:a4:5e:c7:0c:ed:25:44:f4:2e:ec:79:0d:99:4a:14:
         0f:aa:e5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:28 2026 by rpki-client