This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
File:                     uF6twuxwsw-kIl7X_NVzDwx7xhY.mft (raw, json)
Hash identifier:          84YhvY9C1/l2i1+NTuAeJkX2J8A14suiEWFHJLsGqCA=
Subject key identifier:   53:2A:44:78:A6:25:51:05:79:52:BA:ED:55:98:6A:2E:D9:28:3D:D1
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Certificate issuer:       /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial:       019C420FC6D47BF7FF2F5CC4B30C9FB85F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
Manifest number:          0860
Signing time:             Mon 09 Feb 2026 11:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:56 +0000
Files and hashes:         1: 8pZUXvACu9QhvKuW-qMjjg-zMpg.roa (hash: 0/gavMRZtZdbhY3KH3ekU0vMqEL7/EvqYK9+J6uWS6E=)
                          2: G-toJfPo5_lPvfgOuGF2O7gK5MU.roa (hash: f/HsVZaK7DlKBZfvaInpx95ilwjwGX/MKV/SRXvYXG8=)
                          3: GSvze0OvgyB86_aIjXE_zYpEcJ8.roa (hash: i0T9AmgsVXvoJ7juXc0u6ILs8JxVxErhczJ27Ywnx4c=)
                          4: WEBxfBgljdO2-_OPHWGZu1V4u-E.roa (hash: nt1blU8jTILJsm/QWLFQx/HjDxyXCoII44gqy3P+yHo=)
                          5: daB6TCjb0g5mJAh5C9L7PP2C3bU.roa (hash: LCCpR6Wg5909zrCuVhiyOKBdbzncNfnlYiYr8mrOsJg=)
                          6: uF6twuxwsw-kIl7X_NVzDwx7xhY.crl (hash: KP7enkhnvvySbFQ+UK08Rmddr6NF+b+NLRPGJO55Vyg=)
                          7: yvd72ao7oZeloqF7PcjwFXQOaKg.roa (hash: p8n/0jBEU3JxwNl8gzkR0TyAriDfbE7fJ2mPGP83LhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c6:d4:7b:f7:ff:2f:5c:c4:b3:0c:9f:b8:5f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
        Validity
            Not Before: Feb  9 11:00:56 2026 GMT
            Not After : Feb 10 11:00:56 2026 GMT
        Subject: CN=532a4478a62551057952baed55986a2ed9283dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:ed:41:c4:de:19:27:56:40:32:97:27:bd:
                    76:73:97:ee:0a:bb:b0:2c:6a:48:50:d7:2b:ec:4a:
                    70:db:fe:92:95:8f:ec:36:e2:22:6f:de:fe:01:d5:
                    e4:df:53:a1:7e:0c:86:11:09:3a:e4:b2:e0:3d:03:
                    36:de:80:b1:5b:11:79:d0:ef:77:c7:78:fc:86:da:
                    92:1a:fd:2b:27:f0:0d:e8:11:3d:57:a2:cc:e5:52:
                    32:d6:d6:d5:59:28:8c:02:83:f9:19:74:8e:15:4f:
                    6e:c8:f9:60:e1:06:40:0a:d8:fe:4c:de:e8:29:a3:
                    69:0f:a0:a6:93:2f:12:c5:c6:c0:b6:67:18:b9:d7:
                    5a:d0:a1:79:b1:45:c4:b4:52:08:80:2d:e9:75:76:
                    2d:c6:7d:27:9d:30:c8:8f:b5:f7:66:18:7f:95:f0:
                    57:0d:85:0f:4f:29:61:59:ac:88:3e:13:9c:09:bb:
                    1b:75:35:96:f9:a8:23:73:cf:af:a9:26:eb:dd:a5:
                    2f:47:0b:5f:01:c7:1a:cd:1d:fd:36:e1:bc:00:d5:
                    46:67:8e:b8:a1:a7:24:5a:26:c8:fa:d5:a5:5e:17:
                    05:ee:cc:00:50:db:10:b3:00:78:c8:ba:af:e3:91:
                    cd:26:08:7a:d1:4c:d1:5a:c1:88:53:fd:d8:0c:b6:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:44:78:A6:25:51:05:79:52:BA:ED:55:98:6A:2E:D9:28:3D:D1
            X509v3 Authority Key Identifier:
                keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:ba:b4:0e:4c:17:e8:d5:ac:a5:f0:12:f8:14:28:24:32:
         6e:f2:88:9f:df:a1:84:f4:50:b4:35:5c:b7:68:f3:1c:1f:71:
         6c:97:27:ed:e5:71:3e:5c:36:30:f7:17:84:1f:28:1f:db:b5:
         17:9f:6b:5f:23:d1:9e:1f:c4:61:31:e9:be:6f:66:a2:c5:6e:
         54:d8:90:d7:be:6b:b0:59:f1:c8:be:a7:ac:b4:22:93:1d:e8:
         24:33:f5:e2:e0:32:68:0a:fa:13:42:a1:6f:59:21:fb:8c:47:
         e8:d4:56:bd:e7:ed:cd:18:3c:0f:1d:ef:08:16:29:b2:08:c9:
         b3:c3:42:c1:36:14:40:68:f0:20:1c:51:60:55:29:df:92:bc:
         cf:db:f1:c2:59:54:52:dc:63:60:24:ad:f8:e6:f6:a2:61:49:
         b3:4c:60:9c:18:ea:ea:f6:9d:ac:d0:bf:d2:bc:b9:48:2e:27:
         96:45:ab:c2:b5:73:d4:7d:f9:77:78:cb:a7:05:67:26:4a:57:
         0c:96:7e:28:d7:ad:20:28:4e:da:0e:cd:26:11:31:cf:82:8a:
         89:4e:0f:f9:e3:07:65:4d:9f:c2:3a:ed:c5:d5:a9:89:75:09:
         7e:22:77:25:7a:75:31:07:e1:20:49:bc:c5:60:8a:5a:f2:be:
         9f:85:45:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD8bUe/f/L1zEswyfuF8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3
YmM2MTYwHhcNMjYwMjA5MTEwMDU2WhcNMjYwMjEwMTEwMDU2WjAzMTEwLwYDVQQD
Eyg1MzJhNDQ3OGE2MjU1MTA1Nzk1MmJhZWQ1NTk4NmEyZWQ5MjgzZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxLtQcTeGSdWQDKXJ712c5fuCruw
LGpIUNcr7Epw2/6SlY/sNuIib97+AdXk31OhfgyGEQk65LLgPQM23oCxWxF50O93
x3j8htqSGv0rJ/AN6BE9V6LM5VIy1tbVWSiMAoP5GXSOFU9uyPlg4QZACtj+TN7o
KaNpD6Cmky8SxcbAtmcYudda0KF5sUXEtFIIgC3pdXYtxn0nnTDIj7X3Zhh/lfBX
DYUPTylhWayIPhOcCbsbdTWW+agjc8+vqSbr3aUvRwtfAccazR39NuG8ANVGZ464
oackWibI+tWlXhcF7swAUNsQswB4yLqv45HNJgh60UzRWsGIU/3YDLY/GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMqRHimJVEFeVK67VWYai7ZKD3RMB8GA1UdIwQY
MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt
YmM3YTIwOGE1ZTJlLzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl
LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1m6tA5M
F+jVrKXwEvgUKCQybvKIn9+hhPRQtDVct2jzHB9xbJcn7eVxPlw2MPcXhB8oH9u1
F59rXyPRnh/EYTHpvm9mosVuVNiQ175rsFnxyL6nrLQikx3oJDP14uAyaAr6E0Kh
b1kh+4xH6NRWveftzRg8Dx3vCBYpsgjJs8NCwTYUQGjwIBxRYFUp35K8z9vxwllU
UtxjYCSt+Ob2omFJs0xgnBjq6vadrNC/0ry5SC4nlkWrwrVz1H35d3jLpwVnJkpX
DJZ+KNetIChO2g7NJhExz4KKiU4P+eMHZU2fwjrtxdWpiXUJfiJ3JXp1MQfhIEm8
xWCKWvK+n4VFww==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:25 2026 by rpki-client