This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File:                     uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier:          obRAlACaNgMEDbEVGfsAD4IATSK59um9A3S9iLHtunw=
Subject key identifier:   B9:13:08:EC:0C:F8:A8:C0:68:29:E5:DF:03:DF:23:63:12:54:9B:7B
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer:       /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial:       019C432200ED8E7E85E3FBC41AB2B64D3D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number:          03DB
Signing time:             Mon 09 Feb 2026 16:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:27 +0000
Files and hashes:         1: dbi3fG9bxI9rA-J9Egga8cnvqoo.roa (hash: Ap8z6NPW0v1Uxh7C5vK9EjLc2QYMMSk2Hr7IGcY1KpQ=)
                          2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: Nr9cv6VtnI4cyO+tPh8WIe8wic636PuH4dN8WCKSEOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:00:ed:8e:7e:85:e3:fb:c4:1a:b2:b6:4d:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
        Validity
            Not Before: Feb  9 16:00:27 2026 GMT
            Not After : Feb 10 16:00:27 2026 GMT
        Subject: CN=b91308ec0cf8a8c06829e5df03df236312549b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:6f:a6:99:89:03:9a:41:c9:64:07:8a:a9:
                    e2:af:cc:de:65:c1:43:9b:6e:a8:a4:05:73:3c:4a:
                    e3:c7:c3:47:68:f1:08:32:9c:9d:ff:71:2a:ad:38:
                    6a:cc:16:63:09:cc:ce:f8:a8:7d:37:ac:4a:06:c2:
                    83:ec:60:5b:c8:89:f3:fe:69:ca:09:10:63:64:c0:
                    65:0b:d6:0f:cb:96:22:f8:0f:48:d7:65:eb:3e:67:
                    09:40:de:db:a6:60:f4:c0:2a:bf:37:e0:cb:85:93:
                    55:08:67:e0:43:7d:9b:18:fc:01:9e:ac:96:34:07:
                    73:cd:24:5a:a6:6a:74:09:62:a2:e9:30:26:f6:61:
                    7c:17:ff:35:d8:70:f4:af:9c:0e:af:dc:28:90:d5:
                    b0:2c:59:2d:52:be:6c:16:69:dd:a6:b9:e2:26:cb:
                    d2:c7:e2:70:af:eb:de:5c:06:fc:8e:21:e5:3a:32:
                    3e:71:71:a1:b3:9a:3b:be:43:17:b8:3b:b1:2e:a9:
                    d2:9f:33:fb:53:44:68:51:f0:90:ca:92:f1:07:63:
                    23:d6:b7:f8:9c:51:68:9b:db:37:03:48:93:62:d2:
                    6e:98:d9:17:e7:db:19:fc:59:c0:fa:fa:9b:36:36:
                    32:6e:83:e5:2e:8d:e1:be:6d:c4:c0:b7:f5:a0:9c:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:13:08:EC:0C:F8:A8:C0:68:29:E5:DF:03:DF:23:63:12:54:9B:7B
            X509v3 Authority Key Identifier:
                keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:bb:e3:46:60:12:29:61:2b:cc:f3:50:63:05:9f:ba:26:
         28:80:bf:fa:65:67:59:df:89:92:b2:1d:65:76:fc:b8:07:5c:
         86:99:0e:49:dc:98:a8:c7:ae:18:6d:4d:46:6a:81:38:d6:05:
         b1:ca:ba:b5:0e:c9:df:e7:ac:3f:4b:45:4c:c5:05:c3:5f:e3:
         a5:37:87:9d:d4:37:29:21:2c:f3:de:54:90:2a:54:12:f4:49:
         fc:be:2f:a1:a8:e8:b8:a8:f0:7e:60:2b:b8:6e:fc:01:23:00:
         d9:b9:e5:8b:75:31:75:ba:37:52:fb:3b:38:9b:8e:00:88:02:
         ae:f5:e5:3d:e0:86:1f:6f:82:3b:ab:f2:9d:a5:1a:40:2b:81:
         96:38:b0:79:c9:26:9f:2c:f6:79:d2:0b:a7:f4:e2:ed:6e:dc:
         47:dc:fb:7e:fa:d9:90:5c:79:fb:ef:40:c7:71:b7:9a:f1:32:
         37:52:b9:11:90:00:5f:bc:4f:78:26:cb:61:a2:05:6a:54:29:
         8c:49:c3:e6:f3:dd:ad:57:ea:b7:91:c7:44:16:6f:cf:ad:65:
         63:8d:07:85:27:1f:fd:9b:b8:d4:8d:ab:c6:db:bb:64:1f:46:
         e1:7f:5f:06:5d:37:2f:07:c8:a3:ea:08:e1:73:a4:35:6b:e4:
         46:01:2a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIgDtjn6F4/vEGrK2TT0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy
ODI1ZTcwHhcNMjYwMjA5MTYwMDI3WhcNMjYwMjEwMTYwMDI3WjAzMTEwLwYDVQQD
EyhiOTEzMDhlYzBjZjhhOGMwNjgyOWU1ZGYwM2RmMjM2MzEyNTQ5YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJFvppmJA5pByWQHiqnir8zeZcFD
m26opAVzPErjx8NHaPEIMpyd/3EqrThqzBZjCczO+Kh9N6xKBsKD7GBbyInz/mnK
CRBjZMBlC9YPy5Yi+A9I12XrPmcJQN7bpmD0wCq/N+DLhZNVCGfgQ32bGPwBnqyW
NAdzzSRapmp0CWKi6TAm9mF8F/812HD0r5wOr9wokNWwLFktUr5sFmndprniJsvS
x+Jwr+veXAb8jiHlOjI+cXGhs5o7vkMXuDuxLqnSnzP7U0RoUfCQypLxB2Mj1rf4
nFFom9s3A0iTYtJumNkX59sZ/FnA+vqbNjYyboPlLo3hvm3EwLf1oJz45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkTCOwM+KjAaCnl3wPfI2MSVJt7MB8GA1UdIwQY
MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt
Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk
LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqa740Zg
EilhK8zzUGMFn7omKIC/+mVnWd+JkrIdZXb8uAdchpkOSdyYqMeuGG1NRmqBONYF
scq6tQ7J3+esP0tFTMUFw1/jpTeHndQ3KSEs895UkCpUEvRJ/L4voajouKjwfmAr
uG78ASMA2bnli3Uxdbo3Uvs7OJuOAIgCrvXlPeCGH2+CO6vynaUaQCuBljiweckm
nyz2edILp/Ti7W7cR9z7fvrZkFx5++9Ax3G3mvEyN1K5EZAAX7xPeCbLYaIFalQp
jEnD5vPdrVfqt5HHRBZvz61lY40HhScf/Zu41I2rxtu7ZB9G4X9fBl03LwfIo+oI
4XOkNWvkRgEqMA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:31:00 2026 by rpki-client