This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
File:                     UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json)
Hash identifier:          K7E/5vfKUjMf51Ak/Gq0onwLhsJMq34DC/g74jMoHtI=
Subject key identifier:   FD:5D:95:58:2F:D0:FB:C5:1A:1E:D8:C6:63:CD:14:2B:EA:3A:F9:62
Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72
Certificate issuer:       /CN=51e63cf6087311347f314f24e2696c7f6cea6d72
Certificate serial:       019C420FBB5ACE453A65073BFCA26B9FECEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
Manifest number:          BA
Signing time:             Mon 09 Feb 2026 11:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:53 +0000
Files and hashes:         1: 64cOQxiZnrejgF_yLbuSNNh-5DY.asa (hash: /CmbqsnAzo+sIy4VN1xw/guWwGwOsWmQxl16cZjywCU=)
                          2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: Ue4rWAq3LTy0LFPXL5U0SkfiOLaOJCRzQ3ZFdnynJC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:bb:5a:ce:45:3a:65:07:3b:fc:a2:6b:9f:ec:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72
        Validity
            Not Before: Feb  9 11:00:53 2026 GMT
            Not After : Feb 10 11:00:53 2026 GMT
        Subject: CN=fd5d95582fd0fbc51a1ed8c663cd142bea3af962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:34:6f:97:15:32:d2:00:16:71:6e:54:6f:
                    8d:85:40:7d:97:93:e4:ba:7c:25:86:0e:0e:0c:b0:
                    3f:3b:13:4c:fe:76:33:d5:73:e1:96:f9:0f:d8:df:
                    25:57:a2:53:f5:7e:d1:92:b9:ca:cf:03:45:25:30:
                    7d:ab:30:82:4c:6f:f3:6a:00:19:5b:f6:0b:c2:5c:
                    3e:32:8a:4a:1d:ce:93:b9:83:f2:de:65:75:61:91:
                    85:17:6c:d7:9e:26:5c:48:7a:7f:13:df:d8:9e:04:
                    86:b2:8b:ec:8e:1b:60:ee:bd:67:89:66:31:42:65:
                    4d:26:c9:8c:60:f3:74:2a:0f:f6:d9:e9:5a:48:d6:
                    27:67:ea:88:9f:f1:9c:15:25:b1:37:46:70:d9:57:
                    e2:f1:38:fa:a0:47:55:2f:40:7b:77:a1:c0:4f:f2:
                    4f:b7:05:88:5d:9b:89:db:e1:35:9c:1a:93:3d:31:
                    fa:3d:78:e7:69:e7:30:e0:1e:34:a3:a4:16:66:0a:
                    35:c1:19:6e:46:d1:b5:97:a0:57:55:18:f0:0a:0d:
                    7f:50:ca:ed:b8:02:93:6e:f4:a6:e2:5c:4c:9c:90:
                    ea:2b:4c:57:b7:92:d6:49:c1:bc:a7:5b:4a:2d:87:
                    cc:b8:fa:21:dc:d4:a2:5b:ef:ed:f2:52:d8:59:1a:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5D:95:58:2F:D0:FB:C5:1A:1E:D8:C6:63:CD:14:2B:EA:3A:F9:62
            X509v3 Authority Key Identifier:
                keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:5a:86:b4:04:43:a4:0b:a5:87:81:3b:e2:e3:79:66:6b:
         97:92:75:00:ed:f7:c9:8c:8c:ca:36:54:b6:14:80:df:21:0e:
         79:cb:f2:3e:ae:44:10:b7:43:a0:c2:50:dd:72:57:0c:62:62:
         e7:7f:b2:ec:86:a5:8a:7f:44:9a:c2:7b:0d:ad:85:5a:d3:3f:
         14:ee:a4:a8:3f:ce:2d:2b:60:b4:c7:1a:39:3a:63:60:a1:fd:
         cc:25:16:4b:93:c2:94:36:7f:88:83:49:aa:af:ef:11:e0:f5:
         a3:ee:2a:ce:0e:d1:4f:f5:4b:9f:49:51:d3:4b:94:53:3f:3a:
         37:e5:58:b7:67:dd:cc:ec:0b:5b:7f:37:61:a9:a5:aa:48:86:
         4d:1d:04:b1:35:e6:ee:20:3e:cc:a8:bb:0b:42:28:09:e9:8a:
         a6:a5:ff:60:7b:8a:89:c7:d9:fb:c1:36:f9:2b:10:1f:0b:ba:
         23:f9:1a:82:7a:31:02:d2:46:d4:e7:59:04:40:db:bc:d3:37:
         32:9a:0e:3e:45:3c:52:63:01:2d:db:69:e5:05:94:9c:c6:93:
         83:c3:16:e2:9b:8b:eb:0a:e4:16:1c:51:84:9d:6a:e4:22:17:
         69:c7:29:7f:8b:82:51:e8:b4:e2:f2:5c:93:86:ca:5d:02:99:
         7b:d2:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:10 2026 by rpki-client