This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File:                     U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier:          6R/hZLeMRt8KW8ZEE1FpHKGacZ78z7X49W6auWc6E2A=
Subject key identifier:   27:A5:5E:DB:CE:D8:C3:C1:F7:D2:98:D0:64:E3:52:66:C1:6D:1E:08
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer:       /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial:       019C435926394A91C7AB57B241BDBB322083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number:          0C73
Signing time:             Mon 09 Feb 2026 17:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:41 +0000
Files and hashes:         1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: eGtxgmM2Y23l0odrnFnMNtkTzDeCLlQBkhlmg9iRl0k=)
                          2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:26:39:4a:91:c7:ab:57:b2:41:bd:bb:32:20:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
        Validity
            Not Before: Feb  9 17:00:41 2026 GMT
            Not After : Feb 10 17:00:41 2026 GMT
        Subject: CN=27a55edbced8c3c1f7d298d064e35266c16d1e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:ad:69:04:b9:21:28:d7:5a:ef:56:6b:cd:
                    e1:6f:74:b3:8e:a7:0b:29:99:7c:d1:fb:9c:76:77:
                    a5:22:10:1a:1a:f1:11:38:80:1b:00:ec:2f:b0:66:
                    93:35:47:7a:4c:37:6b:b9:50:ab:bb:eb:79:2b:53:
                    5f:b5:bb:5d:76:9e:f7:4c:81:15:41:66:4e:ad:89:
                    f7:19:30:80:31:e5:ec:78:67:a5:e1:f8:7f:bc:d7:
                    d4:db:e7:29:2e:8f:ff:b4:99:07:07:a1:9a:59:9f:
                    e6:08:f2:de:a7:73:f4:45:50:25:f9:01:58:70:ca:
                    91:c8:7e:fb:58:00:59:00:c8:ac:38:97:35:f1:44:
                    42:ea:90:86:2a:c6:b4:e0:a4:46:16:3a:af:2d:15:
                    e7:23:5e:2c:aa:88:72:60:31:9a:6c:b7:a2:32:1a:
                    d6:5c:c2:79:71:88:cc:cb:5c:82:3f:5d:1d:a1:e8:
                    08:cf:5a:db:97:22:c5:d2:d4:ec:5e:42:6c:f9:03:
                    5c:60:e1:85:62:39:c7:8e:31:6a:5e:29:a0:35:a4:
                    a5:2e:96:f6:e5:80:e2:ea:10:cf:09:07:78:76:7f:
                    bd:97:c1:38:2c:b1:07:cb:d3:03:bd:0c:2d:b6:5f:
                    d6:69:76:1d:28:6a:80:d8:0e:d3:15:8a:fd:5a:df:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:5E:DB:CE:D8:C3:C1:F7:D2:98:D0:64:E3:52:66:C1:6D:1E:08
            X509v3 Authority Key Identifier:
                keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:0c:65:8e:af:8e:cf:60:b2:d0:45:e9:f2:24:f3:93:65:
         40:73:1a:2a:7d:a0:1d:0d:04:1c:ce:f5:61:57:fd:1d:f3:55:
         91:80:64:14:ad:0d:bf:7f:09:13:1a:9b:6e:42:98:52:aa:23:
         01:5d:d7:ed:60:d3:dd:fd:a6:7b:96:30:7a:1a:26:44:ab:f1:
         ea:52:f5:a1:c6:b1:a0:21:dd:7c:d2:0d:9f:2e:f1:25:40:a1:
         02:f1:59:ad:59:79:d9:66:c0:bc:f0:9a:56:70:ec:af:d0:76:
         f2:45:11:9c:e5:e5:ac:38:2c:de:2c:84:d4:39:e8:17:d2:33:
         92:8f:30:fc:e1:a7:6c:fc:84:1a:22:b8:d1:30:5f:54:0c:d6:
         d0:db:26:99:80:b7:30:d3:a5:74:75:5a:06:e4:d1:f1:6a:33:
         c6:65:3f:be:d8:04:3b:8b:96:e5:51:91:80:74:22:bf:76:79:
         4b:6e:17:83:c2:aa:08:86:d4:8d:d7:e3:e6:fc:68:d3:f3:b1:
         60:b3:0f:57:e8:82:15:ea:b6:9c:5d:a5:07:24:87:5f:fe:fd:
         8f:92:de:ee:ef:d4:ac:78:71:ee:21:e3:f6:ea:b3:1e:c2:a3:
         2b:c0:20:21:3e:e9:b0:9c:2a:c8:27:a5:2a:4d:a7:50:6b:dc:
         01:5e:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:07 2026 by rpki-client