This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File:                     uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier:          7SPNYqYW1s3sGRnzhwtuxVKOH5IhOtEdG7J3mXAV3pE=
Subject key identifier:   13:92:8F:59:CF:51:47:D6:CD:C7:25:6F:4E:35:76:80:27:7F:29:1D
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer:       /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial:       019C420F4EDD5FC0DDAC5208748B9DCF1FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number:          0E51
Signing time:             Mon 09 Feb 2026 11:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:25 +0000
Files and hashes:         1: OMDj7S7H5Znb54o4B4mYw4OI1xA.roa (hash: QwhdgA5D4IFqcLTQvjEb7OBJC7e4ri/WagCnJPfPU5Q=)
                          2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: j5kS1aObtBrJ3EsxzjD0LjjXACZm26OeaZXSfIt8Lvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:4e:dd:5f:c0:dd:ac:52:08:74:8b:9d:cf:1f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
        Validity
            Not Before: Feb  9 11:00:25 2026 GMT
            Not After : Feb 10 11:00:25 2026 GMT
        Subject: CN=13928f59cf5147d6cdc7256f4e357680277f291d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:01:ff:cc:52:eb:29:38:82:63:bc:1e:80:81:
                    a7:d6:2d:fd:75:fb:f0:45:9e:eb:12:48:7e:f4:1e:
                    b5:f8:41:ef:1c:b3:3b:60:72:a6:73:42:6f:a5:53:
                    1b:55:07:d6:79:e8:43:46:39:0e:eb:d0:a9:2c:e0:
                    a5:56:57:6e:eb:78:b1:98:3e:5c:a8:92:db:ca:51:
                    6f:28:07:a9:a4:b6:fd:e7:f8:9f:b1:ae:94:f2:4d:
                    37:80:b1:7e:b5:81:b7:0e:09:60:d5:a0:d3:4a:5a:
                    1f:86:75:fa:29:fa:d8:b2:7c:d9:63:b1:39:cd:b0:
                    3f:5a:79:ff:72:89:73:36:b5:91:85:f6:32:1c:a5:
                    1a:4e:21:fc:68:71:9b:9c:90:5f:8c:8d:5d:2a:a2:
                    a4:de:7c:13:64:73:3d:48:93:9f:2f:8d:c6:fe:be:
                    7a:90:ea:c7:41:05:4a:19:3b:02:3e:fc:12:e7:d8:
                    e1:ce:2d:99:db:2e:8a:63:0d:8f:ec:0a:eb:2b:c4:
                    6e:5b:12:ee:59:c1:fb:1e:90:6f:87:b0:8e:1c:05:
                    a8:d9:6c:d9:24:1c:21:33:4c:f7:54:9b:ef:ed:41:
                    bd:19:80:6e:4f:56:3e:e7:a2:42:42:fd:9b:c2:00:
                    a5:4b:43:fd:e2:20:4b:3b:1a:c2:35:0d:f3:21:ba:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:8F:59:CF:51:47:D6:CD:C7:25:6F:4E:35:76:80:27:7F:29:1D
            X509v3 Authority Key Identifier:
                keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:ba:4a:0c:f4:79:60:44:7f:9a:0c:fb:48:7b:14:29:4b:
         26:87:c1:12:5e:d3:d7:d0:ba:38:8d:cf:c4:18:d5:e4:87:d6:
         6a:34:4e:ef:9b:8c:fd:9a:90:b9:d5:56:d8:b3:32:0f:7d:aa:
         b6:34:e5:bc:6f:a5:2f:c3:c5:94:28:5a:ca:76:1e:73:c9:c4:
         fd:98:16:13:11:ce:d4:f5:7b:71:b7:c6:19:e3:54:df:31:32:
         e2:6a:0f:b4:79:47:4c:b2:42:96:3a:07:88:7c:9c:85:9f:9f:
         5e:7a:47:8b:94:86:14:42:f0:4b:8f:66:7d:a4:ca:a3:30:9d:
         af:f9:89:44:ee:15:94:dc:b1:3e:e6:86:68:6a:d9:17:de:ad:
         bd:ce:5f:ae:ce:65:4a:ae:b0:bf:fa:6e:e3:65:17:43:e0:b3:
         91:e5:4f:d6:71:5a:ab:11:63:9e:8c:47:33:e6:46:4a:c5:cd:
         04:cd:2e:b6:8a:1e:af:6c:21:61:8a:8c:d5:5b:09:09:a5:dc:
         af:14:89:be:08:70:44:48:be:26:bc:8b:cf:c4:f5:7b:75:b4:
         b0:ca:9b:53:ba:61:85:9d:b9:b2:98:ad:d1:5c:a2:e4:86:cd:
         84:a9:03:8f:94:cf:a0:a5:dc:80:ab:57:5c:80:b4:8c:aa:e2:
         d7:fc:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:21 2026 by rpki-client