This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
File:                     UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json)
Hash identifier:          kpYBovUk7SuHPq9j6FlSMLqf50qB6diMNk+xQW53TkE=
Subject key identifier:   04:AC:AF:AE:E5:48:94:6B:10:DB:D4:50:00:B4:28:25:19:C2:D2:2B
Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
Certificate issuer:       /CN=52413f2e55907004c5ab6989de7eed1543535811
Certificate serial:       019C4246243E7CDF8ECAFCB1F70D7CACE4BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
Manifest number:          08B7
Signing time:             Mon 09 Feb 2026 12:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:18 +0000
Files and hashes:         1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: o2KsUYBNLKg/wI0/VJ4vpaFM6+W1WXQYsGN17qarmMI=)
                          2: zeTmjM1efMeaIVBsxyvvNq4AsaE.roa (hash: 59k70zw01dCfn2bvYSfvqkTPjOjJ1wFS22WS6baIDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:24:3e:7c:df:8e:ca:fc:b1:f7:0d:7c:ac:e4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811
        Validity
            Not Before: Feb  9 12:00:18 2026 GMT
            Not After : Feb 10 12:00:18 2026 GMT
        Subject: CN=04acafaee548946b10dbd45000b4282519c2d22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:fa:25:17:3c:5c:3e:db:55:20:b7:f4:41:
                    81:81:9c:fd:15:fa:85:01:84:dd:86:31:a8:db:7c:
                    9c:0d:f9:82:04:28:b1:1a:24:dd:a7:96:76:e2:31:
                    e6:0b:c8:76:68:24:4a:c1:c4:69:0b:6f:d0:d4:ef:
                    19:20:6e:0a:7c:4a:1c:a9:01:73:c0:fa:9c:79:ab:
                    a3:93:75:53:e6:fc:e4:66:cd:28:16:e1:2c:6a:66:
                    a0:3c:7d:4b:70:49:38:4c:6b:83:16:99:85:30:c4:
                    28:72:55:b1:cf:51:71:f3:4d:73:6d:ed:54:c8:07:
                    2d:fa:86:4f:2c:8d:d6:09:c3:bf:67:fe:7e:5c:56:
                    37:a2:a5:99:95:ad:9c:b6:f8:9a:bf:17:dc:3f:48:
                    b2:af:27:a0:a4:58:c9:3e:57:eb:32:eb:80:94:92:
                    92:bf:77:95:79:26:1a:b5:5f:bb:1c:4b:d7:da:38:
                    f7:b5:3e:9a:88:fb:2d:fc:0e:d7:38:6c:46:33:54:
                    3d:98:15:98:1e:12:b9:39:4d:5c:3c:dc:a6:48:29:
                    06:93:c1:46:60:ab:46:27:60:5a:c4:2f:78:2c:92:
                    a9:cd:6a:3c:e8:4c:72:66:bf:56:d7:4b:77:78:c5:
                    cf:21:2c:13:bf:04:5a:db:98:69:a8:71:13:52:50:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AC:AF:AE:E5:48:94:6B:10:DB:D4:50:00:B4:28:25:19:C2:D2:2B
            X509v3 Authority Key Identifier:
                keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:7f:0c:ea:6a:76:b0:21:6b:e7:4c:e2:8a:fe:41:74:10:
         7b:26:55:b6:b0:de:51:92:ac:83:6b:f8:da:a8:ef:18:8e:e6:
         c6:a1:5b:f0:f4:86:c1:f7:4e:85:b1:ad:c8:fb:13:87:8a:c3:
         af:10:bd:03:ae:e6:ad:4f:2d:92:3a:86:3b:e5:f0:44:bc:96:
         a9:ad:42:e8:23:44:bf:9e:1b:cc:a0:2e:6a:7a:92:3d:7d:06:
         8f:f2:d1:94:20:dc:55:a2:06:05:25:97:a5:83:05:2f:b9:54:
         17:ec:f0:f6:f1:a0:5a:be:b8:a4:f3:9c:13:51:63:93:f6:ba:
         42:1e:39:e0:5e:ad:59:19:3f:0d:a2:42:e9:ee:5c:b3:6e:7a:
         36:fc:74:04:8e:ef:fb:4d:4b:16:95:73:07:5b:39:a6:b5:c4:
         04:80:a4:dd:f5:a3:71:ba:56:32:37:21:17:2d:57:4a:5f:19:
         19:15:65:f5:c0:a1:17:f6:ec:b5:07:25:90:6c:48:b4:57:1d:
         66:d6:bd:a7:93:8b:55:2a:54:ae:67:b7:bb:52:dc:47:8b:fe:
         0c:76:de:72:d4:dd:2f:92:8a:99:3f:bb:14:bb:22:58:7c:70:
         35:5a:38:86:0d:c0:43:a2:ab:0b:df:46:9d:05:64:1a:d9:b6:
         85:10:1b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:48 2026 by rpki-client