This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File:                     ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier:          z3EVUWGajL5cvBjX7BEyILcLya5MSdsF/H7fnXSoJOA=
Subject key identifier:   9C:B0:C9:92:6C:08:4E:82:74:00:FA:C4:17:40:B7:55:CC:2E:38:18
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer:       /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial:       019C43226ED84FFBDAE4917D8D6C4C7C0E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number:          0BD7
Signing time:             Mon 09 Feb 2026 16:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:55 +0000
Files and hashes:         1: KApK1eZ3dReQSsXRIwoW7xEMCfc.roa (hash: I01yvmR81aVECy/LZF2a4cMND5HAKMaYQMS7oZOPJ6c=)
                          2: sMxn8ZHV7zGVUdfXdG1zEbgYw2k.roa (hash: ubV13xd7F+TAQ+CmwFI8p32k3paHxp1b+b+S6Z39W1M=)
                          3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: 0w+ODiJBYngCA2PXFR8wB7hD0TX046N78irsN080pdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6e:d8:4f:fb:da:e4:91:7d:8d:6c:4c:7c:0e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
        Validity
            Not Before: Feb  9 16:00:55 2026 GMT
            Not After : Feb 10 16:00:55 2026 GMT
        Subject: CN=9cb0c9926c084e827400fac41740b755cc2e3818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:f7:93:76:16:ac:54:81:b4:6c:ac:2a:1d:
                    3b:c3:27:10:98:d2:91:bb:56:df:ac:4e:03:61:c6:
                    55:ac:ce:e4:05:68:99:d9:6b:ad:ca:1e:a9:72:71:
                    98:ec:5d:9d:a3:d0:cb:5a:64:31:73:dc:d2:16:7a:
                    0c:1c:9d:86:82:5c:c3:ea:fe:1f:99:59:05:80:ad:
                    5d:b5:98:88:d5:ac:39:19:09:42:e2:e3:b4:d5:a4:
                    ee:a5:93:cd:2d:52:c7:d3:36:6d:2a:af:cc:b2:27:
                    ee:f1:f5:f0:1b:d0:91:e8:d5:dd:86:7e:97:98:75:
                    f0:83:7a:ad:9d:c7:5b:39:70:15:ce:b8:f6:ba:7c:
                    e9:a1:c7:49:f9:e1:33:7d:fe:fa:89:f8:61:b0:6f:
                    f7:c1:3c:ed:0e:e5:18:6f:09:f0:f3:77:0b:6f:36:
                    63:2f:c9:41:aa:8d:fc:1d:06:db:66:f4:ad:24:8a:
                    d0:be:2d:78:dc:69:bf:b9:19:a9:c3:d8:29:8c:01:
                    4d:60:27:67:59:ed:3e:60:b6:bd:9e:82:68:06:1c:
                    e4:3d:aa:49:2a:40:51:a5:cc:0a:39:a1:1a:dc:3d:
                    88:05:02:62:95:ad:d2:88:7b:4e:9c:aa:bb:f8:70:
                    0d:fb:8b:3b:37:3e:f2:87:a6:e2:6d:ce:f8:9e:6f:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B0:C9:92:6C:08:4E:82:74:00:FA:C4:17:40:B7:55:CC:2E:38:18
            X509v3 Authority Key Identifier:
                keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:6b:00:db:46:1c:a1:b3:d2:00:f2:81:6a:03:f9:be:e8:
         20:97:06:3b:52:69:69:33:8c:9d:49:9a:ff:ca:69:f9:64:80:
         d8:b1:92:3e:64:b7:1c:5d:1b:a6:1a:82:d2:4b:c9:e2:5c:8d:
         94:62:70:08:ea:f7:22:45:47:44:3a:8a:4d:f1:d6:d7:3d:2d:
         cf:77:2d:87:e7:d6:06:e1:bf:72:b2:20:d0:56:27:80:1b:02:
         f4:06:9d:b9:11:e2:62:66:24:bc:dc:ed:f5:94:cb:44:49:99:
         9f:d8:3d:09:44:96:9c:02:17:78:6a:cd:71:3c:1c:a0:db:5e:
         b9:38:75:82:53:9d:da:13:af:3f:5f:13:c9:1f:86:81:98:95:
         c2:55:48:7f:d6:7e:67:be:c6:63:4d:ab:c4:a2:f3:da:b8:7a:
         8f:db:11:18:59:1e:26:fd:b9:5a:7c:cf:26:b8:86:8b:9a:6b:
         54:27:5a:3e:7d:11:78:83:b3:b3:f8:d9:27:31:c0:9f:ee:b0:
         6d:2b:ce:de:dc:f7:55:d2:97:d1:4a:39:49:3b:07:cc:46:4e:
         ff:0b:f1:27:46:7d:71:87:05:b7:16:ce:5f:de:8b:fb:e0:9b:
         6b:42:f5:27:31:67:d4:f4:94:09:7d:26:b9:93:21:a7:91:24:
         34:90:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:48 2026 by rpki-client