This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File:                     ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier:          TSDR/vtU4eGy+rrPewD5WGUbT9ZxqAGEISegZRchLnw=
Subject key identifier:   29:EA:2D:28:03:3E:0D:6C:52:F1:C3:58:60:37:76:92:CA:2D:AA:91
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer:       /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial:       019C44DA247E391706E0381382FDDF68C43A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number:          1818
Signing time:             Tue 10 Feb 2026 00:01:12 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:12 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:12 +0000
Files and hashes:         1: lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa (hash: y6qClx3Rf5mZaySn4zehVo/hI1iBDsZsk48LzNmFPQE=)
                          2: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: Zmb0zn2SHg334wnq33FtnxymL48aubeKbHT2KPF2pIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:24:7e:39:17:06:e0:38:13:82:fd:df:68:c4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
        Validity
            Not Before: Feb 10 00:01:12 2026 GMT
            Not After : Feb 11 00:01:12 2026 GMT
        Subject: CN=29ea2d28033e0d6c52f1c35860377692ca2daa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:4f:e6:8c:22:74:54:65:1b:82:85:a7:3c:
                    67:cb:65:1e:3e:29:4a:de:5a:06:cd:53:94:1c:25:
                    e7:81:2f:a2:7f:74:19:b7:7b:ef:c3:ac:55:e0:68:
                    46:f5:51:0e:d7:e5:ec:f3:86:02:f0:46:3f:83:a1:
                    2b:77:4d:aa:66:7c:0f:5a:a0:a1:b6:3f:84:1b:26:
                    fe:96:6b:18:ff:f6:f3:ad:f1:2a:17:5a:03:d9:e2:
                    76:76:fb:11:8c:5b:ab:a7:ca:5d:d7:b9:d1:2b:3d:
                    b2:cb:be:c2:3a:68:7b:f8:2c:94:4e:1d:88:3b:b9:
                    78:76:06:6c:16:b7:91:3c:10:5e:d9:24:25:66:14:
                    9a:af:a7:08:67:2d:ca:f9:2e:df:d7:94:99:3b:67:
                    16:e7:77:99:d1:a0:f3:bf:0f:1c:96:08:62:f4:3e:
                    4a:b9:68:6c:14:3d:a5:04:2c:d6:ca:ea:6e:27:aa:
                    40:2c:25:d8:c2:51:8d:94:cb:18:dd:2c:3b:e4:74:
                    d6:58:50:bd:60:4c:d2:14:e4:85:2b:9d:09:94:e5:
                    97:59:69:fe:a7:85:d8:98:2c:34:12:be:7c:53:ae:
                    4a:0f:a9:20:c4:a5:2c:e9:c4:07:dd:94:93:63:bb:
                    16:62:17:67:de:17:1a:f5:b1:b1:86:f5:0b:ac:72:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EA:2D:28:03:3E:0D:6C:52:F1:C3:58:60:37:76:92:CA:2D:AA:91
            X509v3 Authority Key Identifier:
                keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0b:9c:89:6d:5e:5a:35:0d:59:fe:f5:6c:8f:2e:b2:de:37:
         27:a9:0c:b8:76:4f:e0:ed:6a:75:6b:70:7a:8d:48:18:bb:ee:
         37:f2:fb:06:a4:ab:40:33:a1:83:39:d3:cc:66:02:67:c9:e6:
         5f:bc:07:32:e9:1a:0e:8b:9e:0f:0d:cd:c8:74:e7:f1:02:10:
         86:7a:fd:11:c9:19:d3:ee:e7:a1:44:2f:6f:62:72:be:f6:79:
         a6:4c:75:99:b6:e2:b5:ef:de:75:e0:6a:dd:78:35:7b:1f:d1:
         67:e8:59:48:bc:f5:17:43:5c:91:61:ac:dc:50:3e:17:41:73:
         ed:e9:f6:9d:db:70:40:95:74:24:bb:d5:d4:b7:cb:02:58:cd:
         b3:04:17:fe:01:c1:86:70:4f:e6:4c:69:ed:61:be:7e:a7:ae:
         fd:44:bf:2a:07:9e:95:e7:ef:0d:7b:ce:b1:46:59:1b:30:73:
         ae:6d:92:c4:8c:d2:77:7c:75:09:79:d8:bd:5c:7e:a7:ec:30:
         2d:da:6b:bc:6a:0c:df:16:2e:4d:21:bf:79:66:92:3d:be:ab:
         0d:5d:a8:e8:50:81:10:5c:20:7d:76:b6:3f:00:b8:ad:5a:7d:
         92:6c:50:8f:6b:f9:cc:0d:02:e9:05:69:b8:b6:5b:47:8a:1b:
         61:33:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:18:54 2026 by rpki-client