This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File:                     UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier:          p5ZHnnub1yFoO5iVABVlQOtyERHpEWVXrq+dc63eiZ4=
Subject key identifier:   80:C1:11:83:1C:B9:5B:1D:AD:52:FD:8F:81:CC:74:34:A7:CC:C5:C9
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer:       /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial:       019C41D8B4A27AFED3A478640F6360BD68E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number:          16D6
Signing time:             Mon 09 Feb 2026 10:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:46 +0000
Files and hashes:         1: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: DwaYNjzGolyGH0DcxoqvUHOuoh/ypBcewyw00/eLzMk=)
                          2: dR9tL359Jq4PTUxldPAbPoPg-fw.roa (hash: PUxcMJ2MZAwjyZvVJuJQ3lwg6WIyZODgR7GlmoRaalc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:b4:a2:7a:fe:d3:a4:78:64:0f:63:60:bd:68:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
        Validity
            Not Before: Feb  9 10:00:46 2026 GMT
            Not After : Feb 10 10:00:46 2026 GMT
        Subject: CN=80c111831cb95b1dad52fd8f81cc7434a7ccc5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:7c:9e:d8:ba:73:64:ad:87:13:9b:05:66:
                    cc:73:bd:ce:2c:86:9f:34:63:23:35:0d:57:ad:b2:
                    95:cc:fc:f6:50:27:9c:3e:41:bf:e8:1f:16:47:c0:
                    a4:f1:ea:8f:f8:d4:4b:06:79:e2:97:b0:05:61:ef:
                    d9:9b:d7:60:01:45:8a:1f:72:34:16:d3:a7:1b:c0:
                    94:ed:7f:85:ee:3a:7e:74:24:53:7a:f4:7e:86:94:
                    58:3f:4c:ce:56:1c:96:88:7e:41:92:a0:63:e0:70:
                    88:07:73:7a:b3:a3:16:e1:75:d2:f2:f0:52:69:ae:
                    5d:8d:37:b1:36:77:af:47:39:cc:25:5b:b2:d0:c0:
                    18:29:3f:d2:3b:99:32:d9:e0:34:c7:19:5c:b8:e4:
                    18:62:33:98:3f:40:c2:2e:16:93:e2:90:b9:4f:a1:
                    c3:55:dc:1c:29:4f:06:0d:74:0d:ad:a3:77:54:53:
                    d4:38:d9:c5:33:8f:44:ac:03:a0:73:c9:bf:d6:11:
                    2a:56:95:e4:c0:38:97:dd:ff:44:bf:7c:91:da:1d:
                    5d:9c:28:2d:7f:cc:cd:be:1a:12:d0:e3:b9:c0:5c:
                    25:39:af:0e:b0:4c:81:28:21:d1:4b:e9:66:b1:86:
                    6c:b6:0a:48:b2:52:21:04:12:f1:11:2f:b9:ec:db:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C1:11:83:1C:B9:5B:1D:AD:52:FD:8F:81:CC:74:34:A7:CC:C5:C9
            X509v3 Authority Key Identifier:
                keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:36:02:c0:87:94:a9:e7:37:d4:b3:b3:3b:ea:e7:a2:13:
         5f:40:7c:9c:ae:ed:1c:c9:3d:52:66:4f:d9:c8:45:86:20:42:
         04:24:78:57:af:02:26:fa:5b:e6:88:75:7c:8d:20:14:92:42:
         a0:8f:bf:35:d1:f6:55:2b:7d:91:af:9a:99:ab:e8:3c:f4:a5:
         90:e9:46:f5:81:a5:c0:05:e9:d0:4f:a2:4d:11:1c:cd:67:05:
         c7:ad:98:ca:99:35:b4:1f:a5:78:fc:e1:c2:18:04:b8:3c:0f:
         fa:fd:27:54:04:0c:49:af:2b:34:f4:07:07:f6:84:62:58:b3:
         4d:fd:f6:d9:fe:f3:67:ee:25:20:92:2f:34:c5:ec:af:66:23:
         7a:d9:0e:5a:76:ca:f1:03:ea:f3:33:77:4e:4e:1e:e1:18:78:
         1e:f9:c3:1c:1b:37:3b:f2:92:cd:5a:c4:57:b5:ec:2c:09:25:
         22:a6:62:de:bd:93:ce:1c:5f:33:e9:e8:6c:ed:2b:fa:27:bb:
         ea:81:21:54:25:9a:e2:f4:71:0e:b8:2a:97:56:1b:57:21:fd:
         13:0d:52:9c:86:b3:12:42:37:5c:99:b1:47:21:a1:5a:de:a2:
         26:c6:60:a3:7c:ad:6c:18:ac:29:14:92:f9:42:f7:59:cf:ee:
         96:99:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:40 2026 by rpki-client