This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File:                     UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier:          qESsrcm0d+E2/GMtVR6FsvERXtgqUDmuaCKyztNomhE=
Subject key identifier:   12:0C:A0:34:C9:70:63:25:59:E1:64:71:49:65:F1:D7:B4:D0:06:49
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer:       /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial:       019C420F929EBE23DD46E8DA41EE17F6F4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number:          0F16
Signing time:             Mon 09 Feb 2026 11:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:42 +0000
Files and hashes:         1: 5qnMhOIBTwB8o6XInGR4S35zi8o.roa (hash: y7FafzXY95fqgAjLfPP4p+mKq1OIvDb5CLfvYqhV8ro=)
                          2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: ZgsjmEI6Bptuh73j0BkLn/iEl5BP6xAgj5AP9Bhrerk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:92:9e:be:23:dd:46:e8:da:41:ee:17:f6:f4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
        Validity
            Not Before: Feb  9 11:00:42 2026 GMT
            Not After : Feb 10 11:00:42 2026 GMT
        Subject: CN=120ca034c970632559e164714965f1d7b4d00649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:38:a0:36:c9:30:39:4b:a1:dc:38:e5:ef:
                    67:06:09:03:0f:78:a9:5f:83:3e:35:ec:b1:e4:c0:
                    c3:33:4f:b7:76:a2:ea:cf:ad:fe:70:fd:83:52:b5:
                    86:b3:c4:bc:cf:71:a4:ef:23:e2:5f:2c:a5:c5:e2:
                    8c:de:f5:d1:d7:7c:f0:b7:b1:b3:c1:9d:f7:67:c6:
                    a9:2a:e7:37:fe:27:a8:7b:29:46:f9:90:38:8e:ad:
                    30:9a:6f:cf:5c:5d:9f:e1:c5:86:95:38:6e:8c:53:
                    ea:45:03:46:2f:a7:fa:e1:08:71:68:4f:0a:de:31:
                    e8:4b:55:b7:d8:44:ce:ac:cd:07:97:f1:9e:ac:87:
                    04:f6:bf:86:cc:e1:c8:95:30:14:50:90:61:95:48:
                    68:e3:ee:7d:7f:85:ab:c3:86:da:dc:fd:0b:c6:3c:
                    51:bc:c3:29:7c:32:f6:55:30:2f:7b:05:0a:5c:2a:
                    2e:be:13:e6:b6:1a:94:d3:e5:50:70:12:9e:3f:dd:
                    69:a5:12:9d:91:14:b8:1e:77:7e:02:48:15:2f:f2:
                    6d:09:95:cd:ce:3d:77:a6:e7:6f:94:d8:52:7b:24:
                    c4:9e:c3:30:04:fb:5c:11:0d:57:60:5b:a9:ed:cc:
                    37:66:3e:6e:ae:82:67:84:5c:bf:2c:89:02:7d:8f:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:A0:34:C9:70:63:25:59:E1:64:71:49:65:F1:D7:B4:D0:06:49
            X509v3 Authority Key Identifier:
                keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a9:b4:57:47:79:8d:0b:ca:56:2c:f4:46:bd:a3:da:4b:83:
         b3:e1:40:14:57:77:07:cc:aa:f0:b5:b5:57:b4:fa:33:c1:ff:
         03:d6:bf:9b:d1:5e:46:4a:68:68:55:8d:76:4d:0c:1b:fb:e5:
         b1:e2:a5:07:04:cc:c1:31:62:58:d8:4f:7c:55:7a:0e:8b:eb:
         c7:dd:e0:8d:54:dc:af:92:98:23:72:b6:33:bb:d8:63:fc:b6:
         37:14:a4:b2:11:ef:7f:cd:09:27:4b:9b:f8:b3:df:fa:3a:af:
         a6:c1:d3:0b:46:33:42:9b:05:ce:2c:da:67:be:df:18:e7:90:
         8d:b8:43:90:f0:61:8f:70:88:3d:d0:78:72:24:61:15:e6:55:
         68:3e:fe:cd:c6:2f:66:24:8a:c6:50:f3:ee:a9:da:0d:13:e8:
         76:9c:01:00:d0:db:69:83:56:18:2f:b3:c8:2a:5e:87:b8:9c:
         50:5d:04:17:8e:81:b9:80:d8:ea:13:a7:d0:be:3c:3a:11:83:
         8a:ec:eb:0a:e6:06:d2:66:6b:0f:19:04:32:5f:40:26:ed:92:
         c6:23:13:af:b8:01:b4:7d:85:dc:df:bc:d6:28:3a:01:95:33:
         72:af:0b:d8:cf:b3:27:1b:72:ec:c4:f7:0c:f4:3a:d9:02:60:
         34:87:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:13 2026 by rpki-client