This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File:                     ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier:          CEScSgx8px82AUn+y0Ywb9/qEPMHdKSyNe4StMBHWAE=
Subject key identifier:   6C:CD:50:0E:DC:D7:14:25:1A:BD:B4:66:FB:23:A2:01:A1:40:0A:CE
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer:       /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial:       019C4390AC35EFDF43F7257A67650D87555B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number:          0701
Signing time:             Mon 09 Feb 2026 18:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:20 +0000
Files and hashes:         1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
                          2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: D25Tu8iZEM4wKhtOyLL7gevj+vrqUy/jXmIhu+G6NB8=)
                          3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:ac:35:ef:df:43:f7:25:7a:67:65:0d:87:55:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
        Validity
            Not Before: Feb  9 18:01:20 2026 GMT
            Not After : Feb 10 18:01:20 2026 GMT
        Subject: CN=6ccd500edcd714251abdb466fb23a201a1400ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:62:24:2e:af:f0:a4:63:b3:ee:93:c0:6d:
                    dd:d5:f4:46:0d:45:fc:c5:bd:c2:a0:6b:57:b9:42:
                    25:62:82:41:6d:0f:a1:52:9d:19:37:5e:0a:25:45:
                    19:a6:c0:1b:cf:f5:57:44:74:81:9e:d9:07:68:34:
                    b1:7f:d7:a7:cc:0c:ca:ec:89:d1:73:1d:0d:5b:20:
                    f1:83:5a:bd:90:e4:5d:4b:fa:89:f6:f7:0e:49:49:
                    8d:41:06:e1:62:54:7d:83:c1:21:94:43:cd:88:5b:
                    39:59:7c:5a:52:77:d9:43:a8:98:34:fc:d1:e4:95:
                    71:ce:1c:83:0f:83:4b:64:04:c6:2d:3f:60:fc:35:
                    9f:e3:ad:1e:e8:2f:ac:e7:2c:a9:03:68:1c:ae:fd:
                    e6:73:a0:61:cd:c7:94:22:66:66:46:a7:52:ab:cc:
                    cc:a9:e9:80:64:26:9a:23:b7:37:2b:4a:88:92:d9:
                    62:6a:ac:a5:a2:56:5f:83:59:24:f3:f5:7a:14:91:
                    6b:a3:10:05:e3:fb:9d:4f:9e:19:b9:d3:e6:49:de:
                    86:48:a1:df:a2:f5:5e:75:8b:32:84:64:aa:72:c7:
                    50:4d:35:c4:e3:41:17:1d:b8:c1:e2:af:52:e3:95:
                    ae:d1:3c:8a:f5:98:8e:4a:77:54:27:7f:d9:5d:c8:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CD:50:0E:DC:D7:14:25:1A:BD:B4:66:FB:23:A2:01:A1:40:0A:CE
            X509v3 Authority Key Identifier:
                keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:15:f2:da:5f:07:4f:d4:7d:43:2c:7b:a8:fb:03:c1:0f:42:
         6d:3a:18:1b:a6:b1:27:ab:86:f4:da:29:da:20:29:0e:75:26:
         4d:66:6f:7b:92:dd:38:89:06:50:39:93:d4:90:96:e4:86:37:
         4c:7e:52:17:af:da:3c:b0:60:c8:91:ce:0e:f5:9a:c9:da:d9:
         ca:18:7f:ea:9e:06:44:7f:b5:e2:2b:42:0e:65:a2:6d:8e:45:
         2f:68:80:fe:0c:f7:2e:25:7c:3a:b1:4d:a1:64:e4:76:ab:8d:
         af:06:74:51:ab:cd:dc:9d:0c:7c:c0:dd:33:f6:66:f6:ce:9c:
         3f:92:12:d7:75:aa:3b:02:1b:da:dd:26:e6:5e:1c:a6:14:94:
         a2:a7:1d:71:f2:87:61:c6:fd:45:ec:bc:cf:67:bb:1b:dc:31:
         5b:92:42:28:3c:5c:5b:16:05:2f:3a:75:8b:b1:5a:4c:c4:58:
         04:93:ba:b5:34:03:8c:7e:ec:a4:74:18:e9:95:2d:0e:cb:60:
         11:aa:5d:8d:05:d8:b7:da:fd:22:ae:1a:77:b2:ff:89:3c:f6:
         12:53:e5:6c:bc:36:00:36:a7:97:63:b9:ad:52:96:d8:f9:14:
         18:98:c6:e2:e4:b5:8b:e6:ee:52:73:24:4e:d9:77:60:fb:95:
         77:b0:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:29 2026 by rpki-client