This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File:                     UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier:          Yvs3uLYn1lWXQMNwL3gMbfjSQyC4nRXCgPQT6227ZUo=
Subject key identifier:   C4:ED:A8:09:5A:13:BA:FC:E4:30:F8:E9:9A:0D:34:91:6F:0E:7A:7A
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer:       /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial:       019C43FDDBA97ADBAF4ECEDFC4036A85116A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number:          119D
Signing time:             Mon 09 Feb 2026 20:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:36 +0000
Files and hashes:         1: Ej04tqIea-55QGqR9P8U_IWSz5E.roa (hash: 56Ay1dz7+2/hrBe1gefM4Z9MpRY5OP2aiLGQZC5nqmk=)
                          2: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: zk2ViXQjkcNmSdwiNJXjMLfqZHIt3rbta34oLWl+ldI=)
                          3: bKZux_GRyhQisliOyg0o3pomUGE.roa (hash: UT5otdZIy6+fjq+k6mHMr69f+BiRVOr2Dbn8liI5eMU=)
                          4: eed8-v0DQQsIlGh_LdKlEMEvsTw.roa (hash: ryiQISgXOOgfkizItwqCf8st8jseYCZTQbYCWpyKpsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:db:a9:7a:db:af:4e:ce:df:c4:03:6a:85:11:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
        Validity
            Not Before: Feb  9 20:00:36 2026 GMT
            Not After : Feb 10 20:00:36 2026 GMT
        Subject: CN=c4eda8095a13bafce430f8e99a0d34916f0e7a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:dd:97:50:74:e6:42:fb:aa:c3:fb:07:e6:
                    a8:21:e8:1b:d0:0f:19:35:91:6f:33:f6:e9:c0:65:
                    93:83:9b:01:24:48:3d:24:00:a7:9e:fe:1f:ef:e6:
                    b8:64:6d:d8:fc:79:f8:7c:d5:a5:7b:c5:ec:4f:34:
                    65:e1:af:2f:44:8a:f2:d5:a8:1b:1f:8a:a2:73:49:
                    8b:8c:a7:c7:4b:f9:f4:13:12:97:ce:62:a2:61:53:
                    a4:a8:52:d4:78:d7:83:2c:4c:57:f5:23:40:cf:23:
                    03:60:78:f8:fa:35:bb:96:53:92:10:68:d4:15:a2:
                    c6:c6:aa:94:8c:fd:ef:6b:60:91:6b:80:e9:68:99:
                    e3:ac:1d:3a:4c:a4:9d:93:36:28:49:b5:15:78:1b:
                    ee:38:63:c8:ce:36:45:21:3a:53:d4:e2:40:7b:b3:
                    80:ed:64:92:ff:6e:89:25:65:9c:b9:7d:d9:15:cd:
                    8b:e3:b2:91:54:7e:c1:61:8a:94:76:58:9c:ed:ef:
                    40:16:f0:74:9b:68:a2:3e:fb:db:7e:83:d0:cc:21:
                    06:bb:bd:ec:c4:a8:95:c9:42:24:c7:3b:b1:59:26:
                    b9:ad:91:29:96:ea:2e:4d:3c:20:af:c3:47:be:49:
                    45:38:e5:8b:c9:c6:07:a2:de:82:51:f9:d5:b6:ed:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:A8:09:5A:13:BA:FC:E4:30:F8:E9:9A:0D:34:91:6F:0E:7A:7A
            X509v3 Authority Key Identifier:
                keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:01:46:f5:61:36:97:c5:39:09:01:4e:99:28:47:f7:65:
         a4:64:ea:07:b8:33:9f:ea:98:e6:cc:e9:5a:74:bf:d0:66:b9:
         57:8c:e5:34:ef:b2:58:b8:14:a7:bd:6a:a3:9c:47:9c:eb:c5:
         f6:ee:d5:7a:dc:60:2b:14:b2:43:30:1b:88:72:3e:c3:e0:1e:
         db:b5:8b:07:77:e0:99:e6:68:13:75:e6:82:8c:47:b8:37:60:
         da:8e:90:71:7f:9b:a5:aa:e7:02:99:4c:ff:38:b7:62:47:36:
         55:5c:08:c4:77:91:4a:89:51:b2:bc:9f:02:15:52:b8:a1:35:
         08:40:59:e4:47:51:62:81:80:0e:3a:1c:4c:99:18:f0:cb:20:
         71:16:b9:ef:ad:15:c7:60:10:77:28:11:b7:6a:3f:60:cf:b3:
         ef:25:6b:c7:29:f3:a0:d3:67:03:6b:11:16:c7:77:8d:b4:2f:
         56:86:2c:f9:59:8c:cb:3e:32:6a:6f:e8:ff:17:cc:72:79:16:
         ce:f8:18:12:07:6f:61:26:a0:3d:39:18:b9:50:5c:ba:b2:fb:
         42:ef:78:32:d8:d8:8f:72:d6:1c:b3:1f:be:cb:c5:94:af:ef:
         89:22:41:17:56:81:1d:a2:92:6c:3a:52:37:da:a4:26:52:e0:
         70:8c:c6:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/dupetuvTs7fxANqhRFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTAyMjI0ZmZiOTcxMTcyZTQ5MzVlZDdkZDk2NWQxMTU1
MDg5YjYwHhcNMjYwMjA5MjAwMDM2WhcNMjYwMjEwMjAwMDM2WjAzMTEwLwYDVQQD
EyhjNGVkYTgwOTVhMTNiYWZjZTQzMGY4ZTk5YTBkMzQ5MTZmMGU3YTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsubdl1B05kL7qsP7B+aoIegb0A8Z
NZFvM/bpwGWTg5sBJEg9JACnnv4f7+a4ZG3Y/Hn4fNWle8XsTzRl4a8vRIry1agb
H4qic0mLjKfHS/n0ExKXzmKiYVOkqFLUeNeDLExX9SNAzyMDYHj4+jW7llOSEGjU
FaLGxqqUjP3va2CRa4DpaJnjrB06TKSdkzYoSbUVeBvuOGPIzjZFITpT1OJAe7OA
7WSS/26JJWWcuX3ZFc2L47KRVH7BYYqUdlic7e9AFvB0m2iiPvvbfoPQzCEGu73s
xKiVyUIkxzuxWSa5rZEpluouTTwgr8NHvklFOOWLycYHot6CUfnVtu1bxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTtqAlaE7r85DD46ZoNNJFvDnp6MB8GA1UdIwQY
MBaAFFLgIiT/uXEXLkk17X3ZZdEVUIm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUt
YjhkYTg5NDA2YmVkLzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUtYjhkYTg5NDA2YmVk
LzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7gBRvVh
NpfFOQkBTpkoR/dlpGTqB7gzn+qY5szpWnS/0Ga5V4zlNO+yWLgUp71qo5xHnOvF
9u7VetxgKxSyQzAbiHI+w+Ae27WLB3fgmeZoE3XmgoxHuDdg2o6QcX+bparnAplM
/zi3Ykc2VVwIxHeRSolRsryfAhVSuKE1CEBZ5EdRYoGADjocTJkY8MsgcRa5760V
x2AQdygRt2o/YM+z7yVrxynzoNNnA2sRFsd3jbQvVoYs+VmMyz4yam/o/xfMcnkW
zvgYEgdvYSagPTkYuVBcurL7Qu94MtjYj3LWHLMfvsvFlK/viSJBF1aBHaKSbDpS
N9qkJlLgcIzG0g==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:07 2026 by rpki-client