This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File:                     ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier:          oIi4z5/04qVj/oabyTJDChuxyBm66MRvj+i6gQXwO2k=
Subject key identifier:   C5:DA:F6:DD:DB:4E:92:B5:6D:D6:C6:4B:6D:1B:6F:7D:A7:BC:CB:09
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer:       /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial:       019C43FD85EEA05AE31748F42D490BFE1462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number:          1086
Signing time:             Mon 09 Feb 2026 20:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:14 +0000
Files and hashes:         1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
                          2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
                          3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: WPVG0e05OgUpK3BDbTZcJu09xIoLcYNSynIGKNhJKyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:85:ee:a0:5a:e3:17:48:f4:2d:49:0b:fe:14:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
        Validity
            Not Before: Feb  9 20:00:14 2026 GMT
            Not After : Feb 10 20:00:14 2026 GMT
        Subject: CN=c5daf6dddb4e92b56dd6c64b6d1b6f7da7bccb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:30:7c:94:07:df:61:66:91:af:75:c1:7d:
                    e4:7f:4b:be:74:c5:27:43:ff:d2:44:3e:26:7d:a6:
                    17:ce:90:1d:45:26:6c:ae:66:ca:92:df:b4:85:c1:
                    e2:4b:f3:c0:c4:bf:20:05:0c:e0:db:80:85:b4:5d:
                    24:67:f8:37:44:fd:1d:ea:70:15:ff:7d:1c:7f:3a:
                    f1:dd:9a:13:a6:c5:bd:31:ca:d8:ac:82:be:35:cb:
                    44:8c:4c:97:b8:fd:11:1e:d5:48:d2:c6:4e:30:0e:
                    88:70:9f:a9:14:2a:d2:0b:eb:1b:fc:2a:a1:0c:ca:
                    5e:ee:37:ee:79:c2:81:14:a6:5b:b0:da:37:fe:2c:
                    10:ef:5d:91:45:2a:99:9f:ae:de:4f:55:55:71:df:
                    5c:64:46:c6:a5:e8:b9:da:66:4c:ae:7e:27:d8:bb:
                    c2:a7:69:59:2b:d3:74:db:10:82:00:8d:1d:4c:ca:
                    5d:c9:7e:66:6f:de:7d:bc:c7:ad:ea:56:2d:40:c6:
                    22:ab:7d:05:03:d7:cc:98:bc:ec:3e:36:1d:f7:5e:
                    3f:8e:f8:3d:a9:39:1d:6a:5a:42:c1:1c:a7:0f:60:
                    09:26:b7:63:c3:52:40:88:8c:58:06:fa:7c:94:31:
                    78:20:03:e9:55:23:79:a9:15:93:40:36:e8:9b:22:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:F6:DD:DB:4E:92:B5:6D:D6:C6:4B:6D:1B:6F:7D:A7:BC:CB:09
            X509v3 Authority Key Identifier:
                keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:ee:4f:79:40:32:9d:c4:99:14:71:4c:db:16:52:88:64:
         72:79:1b:54:3b:e4:36:75:eb:3f:86:a9:3f:a6:f8:df:59:9a:
         d3:5e:91:19:89:c4:b6:a4:48:80:ba:0f:5a:fb:69:4c:83:00:
         76:f0:4d:f7:12:cc:ff:95:4c:bb:44:fa:26:6f:47:58:68:b8:
         6d:93:0e:bc:3f:25:09:01:d8:67:0c:2f:f5:1e:b4:87:1f:53:
         a0:aa:2f:f5:84:62:9f:f7:75:06:36:52:4b:15:de:67:6d:9f:
         f0:e2:ab:f7:6a:f9:29:b5:a9:82:56:fe:18:ba:5e:3f:7c:01:
         2d:f6:cb:17:f3:f6:5e:e5:81:af:86:c2:16:8f:71:27:63:e5:
         4c:11:f9:31:a1:76:92:70:88:a9:e1:47:28:43:b6:c8:29:4b:
         6b:ce:2d:be:aa:7b:ac:6d:9b:f6:fc:0b:8b:84:aa:46:5c:78:
         93:b6:01:ad:62:8b:57:d3:58:5d:71:41:c1:6f:42:e4:4d:9d:
         8e:38:0a:58:7b:c2:03:65:19:f3:44:79:c8:53:3c:38:5a:d1:
         34:98:00:0a:f5:11:08:59:b1:d0:3a:f1:ee:68:f3:86:b0:05:
         ff:a6:22:08:c1:40:1f:f7:6a:82:3e:3b:b8:33:34:07:a1:89:
         c0:84:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:57 2026 by rpki-client