This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File:                     uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier:          OHc/ZJF6/bgx+xY+pLx5/gX8/L3/UBBHaJcLjkfq0r8=
Subject key identifier:   15:BD:5F:88:F0:3F:6F:41:0B:77:81:4A:22:96:41:02:7E:3A:97:5E
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer:       /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial:       019C4322077114AC4C48FF6B9774584E0BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number:          0653
Signing time:             Mon 09 Feb 2026 16:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:29 +0000
Files and hashes:         1: FmIK1Qc2QaDRNlz8gildmkToH9A.roa (hash: fo6Q7kFWvThKvMfrJRB3ZlJagYVX1dK3daLVzThP1u8=)
                          2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: +jgCbCEPrZm14FMRq4aN5tC/c6KTIghkc8tcEZQHj2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:07:71:14:ac:4c:48:ff:6b:97:74:58:4e:0b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
        Validity
            Not Before: Feb  9 16:00:29 2026 GMT
            Not After : Feb 10 16:00:29 2026 GMT
        Subject: CN=15bd5f88f03f6f410b77814a229641027e3a975e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9b:d6:d2:08:b8:5b:c2:b6:a1:1c:8d:13:2c:
                    93:18:8c:77:53:a4:4e:1c:c6:0e:88:08:88:fc:75:
                    a1:dd:4b:82:4d:34:64:e7:21:a7:50:77:a6:f7:10:
                    43:42:52:e0:0d:bd:3f:8c:8c:67:7b:22:53:5e:b8:
                    b9:98:cf:b0:88:0f:43:c3:f2:bd:f5:ab:e2:c7:0a:
                    4e:79:b8:c0:4c:83:46:20:70:99:d6:49:be:10:20:
                    0b:48:57:2c:e8:91:cb:1b:1e:20:b5:df:90:3c:ba:
                    97:4d:88:40:7f:6a:c1:02:42:3d:87:8a:0f:ee:d1:
                    61:56:62:b6:ac:6d:f9:00:d4:e0:98:dc:f9:f8:fe:
                    45:d7:a0:dd:9f:aa:13:b3:08:8e:92:57:f5:9d:86:
                    8f:36:f9:6e:26:f8:d7:6c:b4:55:05:32:66:7a:db:
                    5e:52:a9:ed:5b:5d:9b:64:e1:f4:56:1f:20:e0:48:
                    e0:f3:4c:e2:28:36:e3:a6:26:af:da:8f:8b:66:7d:
                    86:42:21:35:b9:4c:93:49:93:7c:f7:83:69:e6:97:
                    12:cc:7f:53:c6:70:f1:3a:ad:1e:0e:6f:6d:af:92:
                    70:7f:08:30:aa:00:b2:ee:86:54:8d:b7:03:37:59:
                    82:db:08:e8:69:f9:46:e9:f4:ad:71:4c:ba:9d:81:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:5F:88:F0:3F:6F:41:0B:77:81:4A:22:96:41:02:7E:3A:97:5E
            X509v3 Authority Key Identifier:
                keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:85:4c:d7:69:42:7c:a1:d6:47:af:66:b3:00:d8:c8:ab:
         2a:76:c9:c3:e6:73:c4:75:02:53:58:d7:fd:98:05:78:ec:65:
         ad:14:f9:f9:4c:12:51:83:d3:1d:07:48:46:b2:a8:97:8b:14:
         7b:8b:8a:f5:76:bb:18:df:aa:90:f1:9e:79:3a:e5:35:bb:8e:
         b0:c5:5b:29:02:df:00:8e:13:6f:0b:40:7f:35:78:05:5c:9a:
         ca:94:b4:dc:b1:e8:df:7b:dc:65:f9:7c:c4:db:8b:6d:e7:8f:
         fd:00:59:ce:90:0c:8d:dd:16:da:82:aa:b1:ce:09:f9:60:05:
         ea:e1:d7:02:63:7b:35:86:6f:be:e3:9d:db:9f:a2:a1:5b:8d:
         e3:a0:c4:18:61:c2:09:1a:0e:3f:b0:6d:fd:87:db:ef:ce:8d:
         cc:05:24:ad:2c:8b:72:fa:b9:fa:50:9b:a9:bd:a6:86:3b:d4:
         1e:34:c3:0c:c5:f7:0e:b9:65:07:32:66:3f:4f:fe:f1:be:db:
         01:34:45:49:88:36:37:5e:02:ab:88:3c:06:a0:33:f3:98:4f:
         63:7b:a9:e4:57:30:8e:61:9b:06:01:3e:e1:a8:6a:68:f0:39:
         3f:ce:61:bc:71:ee:c0:0a:74:50:23:ec:a7:6e:3d:ce:db:e8:
         35:e4:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:27 2026 by rpki-client