This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File:                     UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier:          b/7VHDi1N2lLdHNbJD6bwNKjTL0lySRwcZNLnfkIyfU=
Subject key identifier:   47:71:28:2A:3F:FB:84:9C:A5:3A:07:02:C4:69:16:03:C6:D3:8C:0B
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer:       /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial:       019C45EC2BD8626F956647737487EE913489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number:          05B5
Signing time:             Tue 10 Feb 2026 05:00:31 +0000
Manifest this update:     Tue 10 Feb 2026 05:00:31 +0000
Manifest next update:     Wed 11 Feb 2026 05:00:31 +0000
Files and hashes:         1: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (hash: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=)
                          2: Dq6_iNtRHTOqFtnpD_FfUWdieAw.roa (hash: IBQzY45WKqpczXTiPj5HpgwNmv+cq3rLH5Uc7T4ZlWM=)
                          3: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: AiIPvQ/UTu7BMiuRkfs7QFwlY4wkyQ6Vq6pvEhJLsAA=)
                          4: _pMAzQKRKR13xl3uGDGCl2hCPIo.roa (hash: 5qQNZWBbvk2jxeJhrao+q24FJuEwboPGan3bLmujgOM=)
                          5: hCxkK3tHuqUrY0c51_Pu1X-lD1E.roa (hash: 2q6gI5yUFT+GtMB/2xyZdJMaVjKX7qKHcOOGGZrqRFs=)
                          6: mzpaYdFOnh67fknlets-KcusWr4.roa (hash: kF0xfsE+o4xiNq+jHxQbRf9whqlGH+HiIj8K0kGs300=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:ec:2b:d8:62:6f:95:66:47:73:74:87:ee:91:34:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
        Validity
            Not Before: Feb 10 05:00:31 2026 GMT
            Not After : Feb 11 05:00:31 2026 GMT
        Subject: CN=4771282a3ffb849ca53a0702c4691603c6d38c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:da:a3:03:67:52:08:12:5f:67:ac:0b:c0:
                    82:0c:ad:2b:38:3b:9f:08:6b:80:cc:7c:0d:7b:cf:
                    ef:a2:72:bd:ff:24:76:08:1e:58:6d:13:a3:b5:0d:
                    e5:82:18:27:26:f3:30:63:67:b6:99:a7:4b:79:4a:
                    77:07:bb:80:4b:97:55:8d:66:c6:7c:1d:15:be:7a:
                    ff:05:10:e7:be:e3:97:63:cd:d0:9b:85:66:cd:07:
                    26:78:c7:c4:fc:da:2c:8a:f4:90:08:d1:9c:0a:f5:
                    22:c6:5c:a0:36:f6:cf:eb:cb:f4:23:20:18:a1:54:
                    45:9d:93:c1:e9:10:f9:8f:29:91:b2:bb:8d:9c:3b:
                    97:ae:40:96:2e:0e:a1:67:68:dc:1c:3d:51:0f:32:
                    04:fd:8e:64:c3:ad:56:23:48:3b:a3:31:a4:3e:84:
                    d8:e9:6a:f4:13:5e:38:cf:bc:2a:9e:7f:22:7e:53:
                    45:ce:50:bd:19:2e:6d:87:ab:17:2d:7a:37:bd:af:
                    27:0d:9c:5e:f2:f4:e8:66:57:38:dd:6c:a0:8a:68:
                    cd:d8:ef:8e:cb:8e:b9:da:95:1b:51:ee:b3:e6:53:
                    8d:02:43:8f:3b:89:a4:4c:be:16:32:d9:48:1d:b0:
                    b8:47:b0:0e:09:55:00:7c:8b:9d:e6:1e:48:55:ff:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:71:28:2A:3F:FB:84:9C:A5:3A:07:02:C4:69:16:03:C6:D3:8C:0B
            X509v3 Authority Key Identifier:
                keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:c6:f1:15:0b:cd:e9:5d:18:1b:c4:a0:b0:4d:69:57:d5:
         42:86:7f:41:44:1d:72:47:ee:f2:1f:74:db:06:72:20:1f:e3:
         a6:7f:bf:17:5a:a3:fd:63:fc:f2:c1:dd:b8:88:99:ef:b8:2c:
         7a:5a:bc:6b:a8:6a:05:65:df:ed:31:55:2b:3b:11:bc:c9:12:
         0a:66:a7:cb:4b:a9:33:36:ad:47:b6:31:ee:f5:f4:1e:60:03:
         36:fa:67:2c:97:40:17:38:17:ec:a1:d5:41:01:c0:09:80:87:
         f6:df:b2:71:57:40:dc:ca:75:ac:a9:82:55:6b:18:cf:7c:72:
         25:c0:94:50:51:5a:9a:15:48:79:ee:75:91:25:e5:08:d3:55:
         3e:5d:df:85:ac:e9:a9:84:ed:d0:ac:c8:8f:de:1e:58:55:cc:
         0a:7a:30:d8:fa:2f:02:e4:9c:16:e6:7f:bc:f8:6a:99:61:b4:
         9d:d7:a4:fb:9a:3b:3c:91:2e:22:fa:44:0b:de:e0:8c:c7:49:
         11:7f:1f:16:bf:16:0d:89:bb:91:2b:41:06:44:02:d9:6b:ee:
         d8:fe:60:aa:22:9d:74:53:6e:68:3f:de:61:75:4d:d9:d4:ba:
         10:7e:27:7f:6e:f4:b3:52:ea:e2:69:ea:e6:ca:75:8b:a5:ff:
         f1:30:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 09:05:19 2026 by rpki-client