This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File:                     UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier:          ew5tTOBE5/7IB32zHG334Qu6Q0kiYdDAMwoi/JF4fh0=
Subject key identifier:   D4:18:D9:FD:C6:82:3C:55:28:48:3E:84:C6:3E:CD:4C:BD:97:A9:3D
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer:       /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial:       019C427DD4AD45459EF73650F9F91ADBA431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number:          075C
Signing time:             Mon 09 Feb 2026 13:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:08 +0000
Files and hashes:         1: NRjE2ub-qyO1bTuX03Zvfc6I9B4.roa (hash: T1iZTA7aq3lUr9C6VWAbrTX5NRDe5+H29lpTIjZMGkc=)
                          2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: hJCNxB6f9Lnlp++9biW4+9g7iiMh29jJKXmm0yuRYYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d4:ad:45:45:9e:f7:36:50:f9:f9:1a:db:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
        Validity
            Not Before: Feb  9 13:01:08 2026 GMT
            Not After : Feb 10 13:01:08 2026 GMT
        Subject: CN=d418d9fdc6823c5528483e84c63ecd4cbd97a93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:9f:3a:25:b6:95:29:c0:02:48:8c:9b:5a:
                    30:72:b5:c6:ae:97:13:e8:4d:68:ae:b2:de:0d:5a:
                    02:ab:35:51:c5:98:38:f3:f1:58:a4:f2:66:7b:61:
                    3c:39:71:6d:d7:b7:11:6e:37:60:8e:79:21:e0:ec:
                    02:cc:fb:d0:13:d2:6d:bc:e3:99:3b:19:04:30:ec:
                    34:7d:67:b2:2a:cf:59:44:56:e6:79:53:11:87:e5:
                    b6:f1:8c:94:7d:8b:7a:78:ae:1c:0c:c0:fe:d8:b4:
                    44:54:29:49:d1:22:e4:19:ae:6f:34:67:4a:a5:a1:
                    58:8b:92:84:e2:65:38:2b:18:60:45:b3:15:3d:24:
                    00:e0:e2:d5:c9:93:bc:ce:a0:77:11:4a:ad:b0:a5:
                    80:c6:be:d4:87:b4:11:a1:c4:a6:50:bf:1c:e5:c5:
                    f9:e3:b1:4a:3e:d2:5b:af:d1:50:75:37:64:fe:02:
                    6b:5b:c4:46:31:0d:98:e1:31:15:8e:48:7e:23:5d:
                    04:66:7f:e2:8f:ca:8e:a5:f1:c0:b1:6d:ac:61:bb:
                    58:e1:b1:3f:99:54:05:1d:76:75:44:b9:d1:2c:35:
                    ac:ad:ee:ad:11:1f:21:3e:32:2a:4f:00:ee:6b:c3:
                    24:8b:a4:0b:d7:ec:e8:e0:f5:e7:e1:2d:aa:c0:4e:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:18:D9:FD:C6:82:3C:55:28:48:3E:84:C6:3E:CD:4C:BD:97:A9:3D
            X509v3 Authority Key Identifier:
                keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:21:d7:19:1e:f2:ca:20:8d:4a:dc:3f:9a:f4:15:45:3f:
         9c:b4:49:54:d5:d7:7e:f8:73:ad:43:20:c1:a8:09:72:f7:e3:
         4c:ac:e6:fa:8d:f9:78:a2:be:96:77:c4:5d:df:97:6c:5f:84:
         26:b0:65:18:54:40:6a:8a:b9:11:b6:7d:7e:d4:e0:a6:72:8a:
         f5:60:cb:01:b4:35:e7:ab:c0:f3:9a:29:37:c9:9f:76:6d:c0:
         c8:c8:52:5c:3a:e6:f4:33:bb:c6:aa:9c:54:47:b2:6f:74:77:
         21:f8:03:52:6c:d6:f8:cd:49:c7:56:cf:7b:c9:e6:52:c1:7d:
         ad:cd:01:70:d9:06:87:0c:57:98:aa:93:30:ae:76:e5:ac:92:
         06:a4:ec:cf:a6:b1:f8:7c:90:81:2e:84:46:c1:0d:7f:a6:8f:
         bb:48:ef:e1:67:4b:3b:9c:c2:ca:27:ff:5a:7d:39:68:c3:56:
         9b:26:0b:5c:74:c9:18:78:66:08:87:85:2f:c3:a0:d7:8f:44:
         f3:10:44:31:f0:27:f0:dd:1f:c2:9e:22:a5:dd:fb:a4:af:30:
         2b:ce:a1:da:6f:1d:f7:2e:ec:53:c1:2b:4a:54:cb:95:5b:ab:
         bd:27:de:42:07:f7:19:39:e4:20:d2:8d:62:48:d8:58:a6:84:
         b3:d6:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:52 2026 by rpki-client