This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
File:                     uEDbhrmLXLMnCkjPf6AjyHrKucU.mft (raw, json)
Hash identifier:          FDkA44cGnTGpR5LR0rtJUYh0BiEQtBgOL6gKuz5TxW0=
Subject key identifier:   86:C6:29:6A:0A:8F:45:A8:7C:0B:EC:33:8F:26:F0:39:61:52:F5:E8
Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
Certificate issuer:       /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Certificate serial:       019C432209CB2F4EE8B0C247B0DE09C80B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
Manifest number:          07A8
Signing time:             Mon 09 Feb 2026 16:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:29 +0000
Files and hashes:         1: 2baORnCmpGNOwW4MrOGBHcB_A3o.roa (hash: 4c7N8lX48QcCXmd9kRAsTEkI6RiyveF89rAIHp8ni6A=)
                          2: uEDbhrmLXLMnCkjPf6AjyHrKucU.crl (hash: IGdbImX7gfVUMV+iLpK6D0dwgrqqlClsLK8ICSRAP8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:09:cb:2f:4e:e8:b0:c2:47:b0:de:09:c8:0b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
        Validity
            Not Before: Feb  9 16:00:29 2026 GMT
            Not After : Feb 10 16:00:29 2026 GMT
        Subject: CN=86c6296a0a8f45a87c0bec338f26f0396152f5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:82:93:50:ef:04:9f:28:44:dc:92:bd:82:
                    3f:15:1f:1f:cb:8c:42:89:29:38:53:e3:3b:fe:6b:
                    7b:49:02:cb:d7:9b:1e:4b:2e:96:15:15:b9:d9:8b:
                    30:60:15:9c:1d:c6:4a:4f:c1:3e:16:13:d0:97:d1:
                    68:d2:e5:0c:64:c8:52:70:3a:b6:8d:2c:10:5f:dc:
                    87:a9:18:a2:a5:99:d2:19:da:51:92:ec:86:10:67:
                    96:c2:6c:6b:29:35:72:d9:04:5a:b2:89:f7:01:7f:
                    df:55:08:32:0a:a2:4e:3b:00:b5:8e:4c:aa:3f:1c:
                    47:f9:77:6a:18:67:c8:4c:78:3f:6e:5e:e3:f0:39:
                    f1:8e:bc:b2:0b:35:84:1e:dc:48:74:34:07:e8:60:
                    f7:a5:5c:44:fe:07:c6:40:8b:a1:0c:73:a6:3e:41:
                    59:69:35:cc:17:32:d4:92:83:6d:98:6f:ae:17:1b:
                    90:bd:fe:1f:cd:13:80:12:14:4a:9d:64:10:ff:18:
                    8c:74:a0:ac:81:2e:64:94:3b:ee:18:66:c6:43:dc:
                    a0:6f:4b:4d:61:e1:47:47:08:1f:be:e9:42:f4:8c:
                    7f:87:3b:6f:84:c9:a3:f8:67:30:44:03:bd:29:e0:
                    3d:49:a6:52:ef:ac:35:f3:bc:58:e8:08:16:dd:d5:
                    92:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:29:6A:0A:8F:45:A8:7C:0B:EC:33:8F:26:F0:39:61:52:F5:E8
            X509v3 Authority Key Identifier:
                keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:57:2a:bd:0f:8a:3e:de:f0:be:5e:2c:ba:08:a6:df:a3:da:
         41:c1:e2:c9:cd:a1:8c:7f:b0:9a:ae:79:f3:83:3d:6f:a9:a5:
         e5:fd:42:24:d1:6c:30:65:dd:87:8b:e8:d2:6a:9d:db:10:03:
         af:e9:61:e9:46:43:1e:c0:40:51:fe:ab:b6:e4:2d:ef:89:9f:
         97:9d:55:d7:bb:b7:6e:4a:ee:29:ae:0c:e1:bf:c0:1a:d6:8c:
         03:66:bf:d4:ef:d7:7a:3c:bd:75:b4:58:9c:ac:cf:7f:54:12:
         b1:4a:2a:09:a4:a7:bc:1b:4b:0d:96:44:5b:31:69:0a:f3:b3:
         0f:9e:22:3f:fe:5f:7a:cb:05:3b:79:0d:f4:20:62:98:ef:6d:
         f9:7c:c4:1c:9c:7c:6e:28:2a:ae:2f:69:fd:f7:d1:2f:fc:63:
         cb:bd:36:2c:bb:bd:05:3f:38:3f:00:44:52:99:a2:f9:a7:f8:
         90:49:fe:3d:35:f9:09:de:16:df:df:a3:f5:68:03:52:47:5a:
         a2:54:b3:2c:47:cf:af:71:97:86:f8:87:6a:0e:ea:5a:86:c6:
         1e:90:57:fa:12:43:b0:a0:00:1c:9f:8f:0c:ae:dd:3b:28:cb:
         5e:d2:88:88:9b:b6:48:2c:c8:5e:fb:6a:57:44:d4:ef:78:d2:
         17:6b:21:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:37 2026 by rpki-client