This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File:                     uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier:          4jFKr7Z294CudHzCtwPJBRwPdfvZgWGQHj+gPEg4zMM=
Subject key identifier:   CA:1F:25:F0:E1:0F:E3:E4:D9:0A:EB:A2:91:01:9A:94:C3:C9:73:3E
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer:       /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial:       019C41A252135739C07B1C7A9A68141DC2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number:          0D55
Signing time:             Mon 09 Feb 2026 09:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:22 +0000
Files and hashes:         1: mvsSWkXsoZaA1ourpWIv5ndzQus.roa (hash: NCT6Fnjfvpm4oH5VP79wsNStA4KElS5NV2qxt3IiN5Y=)
                          2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: zLjSAET1WCs2v5ywH9Ryqy3XmebmXgGam68ujB6TOb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:52:13:57:39:c0:7b:1c:7a:9a:68:14:1d:c2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
        Validity
            Not Before: Feb  9 09:01:22 2026 GMT
            Not After : Feb 10 09:01:22 2026 GMT
        Subject: CN=ca1f25f0e10fe3e4d90aeba291019a94c3c9733e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:6b:fb:ba:38:de:02:66:0b:ed:d4:1b:47:
                    04:be:09:ed:0a:53:ca:9d:71:07:0e:21:12:a5:be:
                    09:6c:df:47:0f:d9:b3:80:6b:e0:78:6e:94:ed:78:
                    2f:59:ee:a5:a4:44:ce:4c:cb:db:ac:52:40:8f:1b:
                    3d:ca:84:4d:c3:75:79:40:e8:83:f6:f1:72:4c:52:
                    35:80:28:f0:d2:11:11:af:5c:a1:2a:1d:b8:ac:c9:
                    ca:4b:f4:ad:5b:17:b7:62:1e:f4:82:ef:01:4a:a1:
                    6f:3a:e0:09:4d:27:d7:c7:7f:ea:c2:c7:29:bb:74:
                    18:67:f3:ef:ad:2a:cf:2d:00:ea:b8:6f:27:1d:60:
                    bd:2d:a2:18:c6:77:19:49:10:4b:30:17:95:de:b4:
                    90:ad:22:8f:f2:de:16:88:93:24:3c:58:28:59:d9:
                    b3:3e:94:cd:b0:05:a2:8c:9b:ec:79:c3:9c:cc:f8:
                    83:5f:22:eb:44:ae:d1:81:20:fc:6b:e5:20:60:d7:
                    e1:f7:8a:2b:43:c2:ca:21:c9:59:1d:91:af:74:13:
                    92:ec:23:db:ba:b8:84:a8:80:5b:8e:0a:03:65:c5:
                    dd:bf:b4:c6:bb:23:93:d9:34:82:f2:76:e3:84:10:
                    7f:d5:b5:61:56:b9:6c:db:3f:e5:4b:ab:3c:d3:02:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1F:25:F0:E1:0F:E3:E4:D9:0A:EB:A2:91:01:9A:94:C3:C9:73:3E
            X509v3 Authority Key Identifier:
                keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:2d:45:33:6a:df:e6:7f:bb:c7:8d:03:1f:d2:92:08:21:a8:
         0b:93:79:e5:0a:dd:8e:2e:78:92:31:6d:6c:d5:6b:8e:7b:e5:
         dd:39:fc:52:aa:a5:9b:e9:e7:46:a7:8f:59:61:84:9e:8e:f7:
         da:df:0a:7b:8d:03:54:8d:af:2a:73:2d:30:6e:f0:ca:f7:10:
         be:37:1b:cf:c8:2a:a8:3d:2f:f5:39:c7:28:0c:8f:8f:d2:22:
         7d:9e:58:04:66:ca:81:9e:d0:85:98:de:22:b9:54:3c:c8:9a:
         68:5c:fc:dd:b0:4a:19:a3:8a:38:3b:f0:bb:d8:77:39:e2:f9:
         6d:cf:28:73:c4:cd:4c:db:48:f0:85:f3:91:32:8e:95:0b:62:
         34:76:78:5e:56:95:46:24:c2:94:b1:62:e8:c1:78:68:b9:32:
         47:53:8b:cc:64:32:ed:87:5c:4f:2d:0a:87:18:42:3d:36:41:
         d5:d6:ae:c1:eb:f8:4f:06:4e:19:60:bd:3e:57:9c:e6:b8:b7:
         f7:ca:0b:d9:8b:ad:39:b6:53:59:c6:1d:87:82:d4:9f:bf:eb:
         77:26:55:20:1b:2b:70:de:00:ce:c0:44:0c:e9:94:93:58:b2:
         a2:43:31:48:7a:b8:f2:14:f0:83:5e:08:a2:bc:4b:01:ac:fa:
         7c:3a:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:46 2026 by rpki-client