This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File:                     2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier:          cCwetQtQbvp/SlCrXAYGMP+Y1xNzmFi+W9EsaHiqRj8=
Subject key identifier:   B5:34:7D:63:14:84:30:87:6B:7D:D9:08:D3:B3:BA:7B:2E:75:99:8B
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer:       /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial:       019C348B6259A24592EC36E9B94D16C69276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number:          127A
Signing time:             Fri 06 Feb 2026 20:01:15 +0000
Manifest this update:     Fri 06 Feb 2026 20:01:15 +0000
Manifest next update:     Sat 07 Feb 2026 20:01:15 +0000
Files and hashes:         1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: NRqDZGnLs47vAAUy7WgKKUfRBVPg+5SZVO+785yK0BE=)
                          2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:34:8b:62:59:a2:45:92:ec:36:e9:b9:4d:16:c6:92:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
        Validity
            Not Before: Feb  6 20:01:15 2026 GMT
            Not After : Feb  7 20:01:15 2026 GMT
        Subject: CN=b5347d63148430876b7dd908d3b3ba7b2e75998b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:19:27:87:04:62:a7:35:6e:ed:fe:fc:21:
                    41:8a:b4:c4:76:cb:6e:89:6d:d9:c2:7a:e9:97:ee:
                    ee:0a:c3:6d:e3:dc:65:80:75:cb:4c:cb:46:79:04:
                    92:c1:05:07:04:0b:6c:65:05:de:f7:96:2f:82:8f:
                    8b:02:19:27:5a:ac:62:15:4d:dd:96:75:a9:c4:dc:
                    5b:fe:4b:f0:6a:13:2f:cf:c2:5a:06:43:81:4a:cf:
                    c4:b6:fe:a3:ae:ed:45:a1:dc:2d:d9:aa:01:40:4f:
                    18:58:a3:e6:c7:47:e2:52:14:ff:fc:9f:00:66:d7:
                    15:17:d5:84:16:ef:10:9d:66:cb:c4:2a:d0:88:10:
                    61:27:04:82:47:d7:16:c7:ec:49:b5:89:c2:b1:b3:
                    d4:26:98:5f:a8:58:77:0e:2c:1e:01:cb:e0:04:79:
                    4e:fa:1a:bb:88:55:47:54:a2:1c:66:9a:c7:da:cc:
                    bb:1e:33:0d:86:18:4b:d6:b4:37:63:b3:63:b6:94:
                    0c:cb:75:b9:dc:f0:de:47:e8:09:89:96:a8:fa:f0:
                    cf:6b:d1:93:cb:6e:3a:bf:20:62:13:4a:dc:ae:c4:
                    19:38:ff:3d:9d:15:dc:f2:78:cc:79:21:27:8d:c6:
                    63:5f:5c:71:33:74:45:c6:42:9b:2d:bb:08:60:76:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:34:7D:63:14:84:30:87:6B:7D:D9:08:D3:B3:BA:7B:2E:75:99:8B
            X509v3 Authority Key Identifier:
                keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:67:ef:9d:ee:e6:c0:a2:68:99:1f:9e:49:c7:10:6a:57:6a:
         e3:f0:ee:61:85:04:e3:50:aa:b5:93:63:aa:60:f6:42:f5:64:
         6f:90:0c:f0:aa:75:0d:20:b5:24:35:f5:5b:27:61:d0:09:44:
         c7:1f:01:66:31:46:3a:e1:29:9c:c8:0e:7e:b4:83:00:f7:a6:
         e2:e5:3b:8f:9a:8c:5c:2d:5b:48:df:69:97:3f:ff:14:d6:20:
         24:88:77:a0:4a:28:52:97:86:67:b3:e8:53:3d:71:d4:88:0b:
         07:4e:b4:73:b6:eb:fd:41:36:c2:0e:68:a7:fd:cc:e5:21:ec:
         d0:ba:2b:c7:fc:8c:df:50:cf:b1:3b:36:b2:e4:4a:f4:80:0d:
         bb:1b:6e:7d:ba:17:07:e4:d7:41:19:3f:8b:84:e6:a2:c8:91:
         46:6d:b6:68:8b:07:c6:dc:b7:bd:24:46:cd:09:66:99:6e:eb:
         c2:ff:fb:8c:96:4c:83:ff:dd:be:31:ba:92:e9:dd:64:2e:ec:
         a1:90:24:76:86:c8:65:37:23:4d:53:ed:51:e1:a0:8a:4d:3a:
         e7:61:c8:63:be:61:8a:43:9e:07:30:2e:ad:1c:e5:06:2d:a4:
         27:c1:4b:cd:1b:93:0f:da:38:0d:0d:4c:c0:cf:d0:8d:5a:c1:
         f9:1a:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 05:46:00 2026 by rpki-client