This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File:                     gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier:          2RuEFQxzQbQ+URZ9xbbH+HjUgJn6IRWMz8rUS5pyZVA=
Subject key identifier:   6E:C8:D3:B7:54:D8:F3:EB:27:F1:60:FC:8F:52:66:D0:D2:2A:BB:F1
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer:       /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial:       019C4358E40551A8A34A92A1A7D5F836A871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number:          0433
Signing time:             Mon 09 Feb 2026 17:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:24 +0000
Files and hashes:         1: T_p7BFSEu2MaqBtsnhljtCR6GqY.roa (hash: FbyU0CKxDGTVudOk7Dftp/zF2aSEdUuIHth2Lxh5jb0=)
                          2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: bT8gJZPyciC/fYtSHjWzhIZwhe+kEWEr9ukKdMXgkbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:e4:05:51:a8:a3:4a:92:a1:a7:d5:f8:36:a8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
        Validity
            Not Before: Feb  9 17:00:24 2026 GMT
            Not After : Feb 10 17:00:24 2026 GMT
        Subject: CN=6ec8d3b754d8f3eb27f160fc8f5266d0d22abbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:78:3d:01:48:9c:a9:ce:c3:c5:60:01:2d:
                    df:b1:5a:40:83:27:31:44:18:cc:54:44:19:38:28:
                    4e:05:58:e8:aa:bc:bf:37:39:2d:48:8c:6e:19:5a:
                    8d:be:55:10:5c:b4:c5:36:6c:9f:88:38:51:b3:9b:
                    48:bb:1c:5e:f2:6d:dd:29:83:34:92:9d:4a:ed:fe:
                    99:e5:82:16:5d:6e:09:9d:6c:d0:11:08:4d:6a:56:
                    b2:da:c3:9f:5a:34:df:c0:ac:2a:cc:68:0b:de:a8:
                    83:4b:0a:08:bd:52:57:b3:97:53:e9:86:a3:24:b9:
                    6b:83:fd:89:9f:d1:86:7b:71:8a:9c:6d:b1:5a:ad:
                    3c:33:2b:86:bf:59:bf:8f:6b:8a:ba:0f:8a:35:6b:
                    ee:a9:04:52:75:d0:79:ff:0d:38:3b:dc:4b:75:12:
                    a6:70:65:7a:f2:4f:45:2a:d9:1d:f6:8d:36:08:b7:
                    a7:bf:33:9c:90:14:8d:54:09:88:0f:45:8d:14:9a:
                    aa:f9:25:34:c4:1c:67:62:59:fc:0a:c2:4d:83:52:
                    ff:ee:81:e6:73:36:9b:33:c8:9e:fc:43:f8:6a:ac:
                    50:76:69:9f:2a:a6:3c:a4:ad:aa:69:80:ed:7b:f5:
                    00:68:06:ef:d8:a7:b9:eb:87:11:f9:d3:73:f1:41:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:D3:B7:54:D8:F3:EB:27:F1:60:FC:8F:52:66:D0:D2:2A:BB:F1
            X509v3 Authority Key Identifier:
                keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ed:9e:97:e9:89:de:c0:bf:ac:75:2e:a7:95:b7:e5:ad:9a:
         45:6c:2f:70:27:49:34:c4:1b:ad:08:2d:96:ab:8d:80:ee:8a:
         2e:1a:1d:79:f3:19:ef:3c:1a:10:ea:99:30:c4:48:6f:5a:9c:
         53:c0:72:1f:66:2c:27:60:72:d6:e0:b9:25:e5:97:9e:5a:de:
         f5:5b:e1:f6:d5:cf:71:93:c9:61:d6:49:7c:97:e4:64:7c:9d:
         bd:9a:c6:30:57:31:14:0a:ad:fd:c7:38:92:e0:0b:a9:88:0e:
         62:46:88:de:e1:9f:cb:14:fb:05:10:eb:98:86:f4:22:d8:1e:
         68:fa:2e:ce:a5:a6:a2:2a:75:f8:1a:ab:2c:28:c4:33:6a:0b:
         af:40:09:cf:b1:b5:00:da:5b:df:c2:f8:d5:00:2c:11:65:ef:
         b7:61:ec:d4:ce:49:f9:3a:b3:e7:2f:82:44:f5:a0:e4:10:f1:
         aa:9c:b5:00:f6:c5:33:0c:31:b0:c6:45:a4:54:62:de:f6:71:
         bc:82:98:6d:6f:eb:0e:2e:7f:c4:06:2f:91:af:a4:9a:4a:66:
         59:fe:97:57:5f:8d:8e:fb:56:3d:ab:a9:76:99:dd:51:2e:f4:
         60:b4:71:b3:d4:8b:6d:60:88:61:08:a6:60:25:bc:63:aa:96:
         76:4b:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:56 2026 by rpki-client