This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File:                     u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier:          vJdMvrflUs/mGRBZb6r526BmZf7r1WURGX/YkI7cB+M=
Subject key identifier:   49:77:5E:3A:57:9A:7F:F3:87:71:F1:22:A0:4D:25:68:17:65:09:21
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer:       /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial:       019C42468C320D1F0B0402EC1680E40FFE7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 12:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:45 +0000
Files and hashes:         1: ny9j0kdOILJWp2147BBuq8zAUi4.roa (hash: R/3Kz0+7hhy0EpV+pM7qwZ7FqiiZAGr/HoDJvTKAiaU=)
                          2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: gA701bosed5WJ9Gu8eDMvfYE/d2O2nVNi3Ct+2mY1YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:8c:32:0d:1f:0b:04:02:ec:16:80:e4:0f:fe:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
        Validity
            Not Before: Feb  9 12:00:45 2026 GMT
            Not After : Feb 10 12:00:45 2026 GMT
        Subject: CN=49775e3a579a7ff38771f122a04d256817650921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:7d:9f:ed:e0:de:b4:14:ae:42:10:12:33:
                    05:13:c1:87:4c:e9:ea:1b:c2:a2:3c:88:f3:d7:7f:
                    29:58:68:78:1b:fc:ee:26:ee:1d:f7:4c:62:43:87:
                    c8:84:2a:c5:04:11:3d:4e:f8:eb:1f:1c:a2:60:27:
                    ab:7b:e5:b9:e2:fb:8d:c0:84:c3:52:c9:f2:c7:bb:
                    06:18:36:d4:25:11:6c:8b:ad:db:a9:21:cb:b3:66:
                    d0:1b:9b:39:c7:3d:42:1b:10:da:02:5d:ad:b8:1c:
                    9e:79:ed:57:37:00:fa:b6:33:64:76:e8:8f:7d:c2:
                    2d:59:42:6a:ab:72:85:9d:44:51:f3:0e:6e:41:bb:
                    cd:b2:fa:6c:cf:25:bc:00:6e:3c:9c:46:20:6c:e1:
                    65:b4:68:b3:32:c1:cf:bc:7b:48:da:5a:9d:e9:9d:
                    36:2b:ea:b1:fb:72:4e:6f:fe:ba:0c:ed:4d:60:97:
                    9c:56:3f:89:a4:bd:0d:61:06:c5:db:05:50:be:55:
                    c0:cd:ed:bc:56:02:a7:55:13:c0:d4:77:b9:ec:03:
                    4f:1f:e2:cb:db:1f:ea:f4:da:29:73:89:d7:f1:1a:
                    99:4d:2b:72:40:60:4f:f0:a5:13:5d:c0:15:d2:27:
                    26:a3:9c:21:40:15:8c:44:12:2e:2a:86:fe:96:2f:
                    51:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:5E:3A:57:9A:7F:F3:87:71:F1:22:A0:4D:25:68:17:65:09:21
            X509v3 Authority Key Identifier:
                keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:6f:5e:88:20:6b:9b:50:56:a2:12:91:3a:21:8e:57:b0:
         bb:7b:91:6a:e6:4c:97:46:6b:53:56:67:66:69:cf:ae:54:9f:
         76:2b:36:57:73:e2:23:4b:d5:8f:24:64:46:53:da:ef:65:ac:
         4a:65:02:44:7e:05:e7:9f:f1:fd:f8:27:95:96:1c:41:a4:64:
         6c:ba:04:98:95:a5:11:40:a5:b4:ff:c5:d3:4c:f1:5a:12:89:
         1d:05:4a:6f:7d:2c:c8:a0:45:1d:4f:72:54:c7:1f:de:41:b2:
         ab:15:ea:78:01:2d:33:3f:65:c5:1d:c8:9d:d9:84:d3:1b:86:
         47:a6:7c:10:24:eb:7f:eb:b9:3f:0e:fe:5f:9a:81:ba:b2:ca:
         82:00:05:0a:d6:be:d2:23:03:02:9c:7a:36:1f:f6:14:8e:a9:
         a3:97:b3:7c:38:17:2d:c5:b7:a5:b2:de:0b:84:49:9b:45:d6:
         15:34:9e:8c:e4:3a:58:20:b5:a5:12:88:89:9d:e4:7f:59:5f:
         69:a2:4c:7b:02:88:f0:21:5a:c0:fb:75:57:af:71:35:6d:f0:
         28:72:48:08:4d:29:ad:3e:e4:d6:89:47:8b:c0:22:15:d7:33:
         7f:9a:5a:e5:c6:f2:c8:82:1a:54:7d:82:2c:37:ea:e9:e0:52:
         cc:6a:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:30 2026 by rpki-client