This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File:                     uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier:          pv/D6V4HXsDOGFPS5/BQRCKYL8JQbZFIxL6NAWXhgZ4=
Subject key identifier:   26:48:D5:D5:19:52:A2:2F:54:BA:73:0F:C3:3A:8B:C4:45:8B:BC:C8
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer:       /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial:       019C42EB65E4904738D0670ACA73E30FC4FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number:          0E41
Signing time:             Mon 09 Feb 2026 15:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:49 +0000
Files and hashes:         1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
                          2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: 3a1asWDtcR+oIfPdl4m6+P0jSvCYPaGapWhOpwp3J50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:65:e4:90:47:38:d0:67:0a:ca:73:e3:0f:c4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
        Validity
            Not Before: Feb  9 15:00:49 2026 GMT
            Not After : Feb 10 15:00:49 2026 GMT
        Subject: CN=2648d5d51952a22f54ba730fc33a8bc4458bbcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:35:70:0c:8b:70:c6:85:78:60:8c:b1:bf:
                    5a:30:9d:8b:49:5b:54:a4:43:33:59:b4:d6:fa:e9:
                    c7:ab:0b:2d:e5:c3:b2:03:bc:b0:b0:f0:27:65:7b:
                    4b:7e:5f:1e:36:78:2b:d5:f7:f0:d8:32:f4:4f:43:
                    3e:73:09:5a:23:e8:a9:5a:27:39:07:c4:d2:d0:29:
                    de:7b:8d:0a:19:36:a9:7b:30:95:72:9b:5c:bb:e1:
                    be:b6:ac:22:d0:ef:e2:70:30:32:bf:c5:da:72:8c:
                    78:ac:8f:02:8e:e8:76:43:4c:f8:ca:e7:25:71:d8:
                    68:cb:fe:00:91:fd:e4:6c:90:dd:73:12:92:2d:56:
                    c4:e6:ac:34:95:56:28:2a:99:2b:c8:db:13:ea:f0:
                    e4:16:12:bf:aa:3d:6a:6c:c7:e5:21:1d:82:1a:9b:
                    34:0c:d6:44:82:0a:90:13:20:74:c4:46:c0:00:26:
                    ba:4a:67:69:c0:eb:68:5f:bf:f8:44:ae:77:a0:8b:
                    e7:df:18:fc:65:5e:ca:da:6f:de:90:b7:6b:40:e8:
                    dc:d8:b1:bb:66:5d:24:6e:f3:e5:53:b6:d3:70:78:
                    e7:0e:d3:fd:00:21:7b:e6:c1:4b:e8:d3:f6:2c:fc:
                    b6:b9:fd:21:2d:0f:92:e8:a0:e4:82:6a:a8:cd:c0:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:48:D5:D5:19:52:A2:2F:54:BA:73:0F:C3:3A:8B:C4:45:8B:BC:C8
            X509v3 Authority Key Identifier:
                keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:34:51:66:39:7d:05:17:26:e3:4f:74:49:13:a4:b8:76:
         b4:98:c5:9a:a7:11:37:6e:69:99:60:b2:68:a1:6e:a8:00:a6:
         46:d6:2a:70:c7:36:55:e0:f8:87:bd:a4:2a:a7:a9:e4:e7:74:
         c6:47:3f:68:ef:6f:02:b9:8e:9b:07:d0:eb:de:c3:24:10:19:
         ed:5a:2b:04:ca:5d:32:fe:10:a6:b5:f6:1c:b0:11:d5:95:cb:
         1c:b4:1f:53:c2:e1:fd:05:20:56:7f:d0:15:ff:ef:66:b4:ea:
         fe:bc:ab:41:61:e8:d5:ad:f6:b8:ca:c3:52:40:5d:74:b8:d1:
         30:86:2e:f0:31:0c:e1:16:11:fb:5f:4f:54:31:02:1a:d3:23:
         3d:5f:91:e2:95:56:0e:2d:9f:30:21:88:6b:f1:2d:82:9b:af:
         57:3a:09:39:54:34:a2:c6:12:74:e9:18:b5:7f:e7:b5:dc:a5:
         4a:70:9d:e8:18:5e:70:25:9b:e5:e1:b4:73:34:b9:07:75:f7:
         96:3f:50:0a:8c:ae:5c:57:3d:a5:f6:0e:68:90:7a:88:cb:61:
         80:71:1b:22:e3:b6:59:6b:9f:b4:4d:b7:af:8a:cb:92:02:fd:
         44:a2:92:de:76:da:e1:4f:33:f9:e5:6e:e5:75:8f:4e:c2:62:
         6b:5e:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:30:31 2026 by rpki-client