This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File:                     uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier:          6XjcLImP3i0OcZL2/tupLLnncdoE+GoCZbJV1Zq9jxY=
Subject key identifier:   1D:DE:69:94:A2:AE:A3:68:50:F8:F6:86:F2:CC:F4:9C:23:C3:BB:42
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer:       /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial:       019C432202FE87EFACDD8C29DF72BA990B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number:          1823
Signing time:             Mon 09 Feb 2026 16:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:28 +0000
Files and hashes:         1: NM07OftKQkCH2joVcvMTn-HHTmY.roa (hash: rU/LdGSeAxe5BfVN3XEqDaj1sPRpRHFtD8l5ShzGTNQ=)
                          2: kLGeIFwIepUgbnOKoqHRUYefBPQ.roa (hash: F4tTQgdXduDuBtHDnLeKsOpcxeDgSOzzu6aJ7AclprY=)
                          3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: +vIYSIb6OgEJTVOVvor7M/LVBHz3EvlqvMmGdmtwmqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:02:fe:87:ef:ac:dd:8c:29:df:72:ba:99:0b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
        Validity
            Not Before: Feb  9 16:00:28 2026 GMT
            Not After : Feb 10 16:00:28 2026 GMT
        Subject: CN=1dde6994a2aea36850f8f686f2ccf49c23c3bb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:bc:b5:b7:9b:e9:4b:3d:77:8e:94:c5:10:
                    f4:66:1c:7c:2b:af:3c:f9:bc:3f:e0:db:71:d4:dc:
                    0d:7a:c1:60:4c:fc:e6:71:dd:46:ad:b8:6d:78:8f:
                    b6:1c:e4:c3:31:55:2c:40:61:2c:cf:d7:c4:a8:72:
                    d9:f4:c1:c1:67:87:ec:e0:c0:34:33:c4:8c:97:f4:
                    ad:41:eb:d5:fa:4d:0c:7b:94:5f:47:63:d0:ba:02:
                    bc:26:96:04:a7:c0:b8:43:85:38:36:41:db:73:10:
                    b7:3b:38:a7:b7:cc:27:97:12:45:63:3e:19:91:59:
                    ba:75:41:d8:17:f4:2c:0a:4b:aa:42:9e:61:75:9c:
                    05:92:8f:21:c7:d8:e0:bc:04:19:09:67:d6:43:a3:
                    78:21:de:d4:27:9f:d7:cc:8f:e3:44:40:ce:2e:05:
                    5b:f6:df:65:93:7b:63:ef:ae:b7:67:b6:3e:42:07:
                    9f:4d:89:9c:89:e7:d7:2d:ad:e5:f2:7d:66:84:74:
                    17:8b:5d:65:49:dc:3f:85:a9:9e:c8:b2:ab:06:db:
                    a4:5f:65:8c:74:2d:ec:7e:60:c4:86:62:b2:26:56:
                    b8:81:07:14:f2:75:50:f8:23:ef:f6:30:94:52:f3:
                    f4:71:d2:11:ab:4d:20:a3:75:79:1f:d2:e3:3d:75:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:69:94:A2:AE:A3:68:50:F8:F6:86:F2:CC:F4:9C:23:C3:BB:42
            X509v3 Authority Key Identifier:
                keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c8:f3:31:9a:08:92:eb:46:04:78:6d:e0:94:8a:29:e6:a3:
         25:ae:52:ac:26:32:e9:89:d2:6f:a0:7b:fd:a6:6d:fd:3b:4b:
         89:7f:0c:c7:1d:85:37:48:70:c4:72:50:44:85:37:b5:f6:7f:
         cf:be:5c:84:e7:0b:c0:64:75:0c:97:fb:96:a7:53:b8:b4:4c:
         13:78:06:b9:10:a9:64:17:23:3e:fe:9b:24:8d:ff:8d:a1:26:
         de:0f:66:22:8c:b3:33:b4:2a:2b:9a:b1:7c:84:f1:1a:37:e0:
         5f:3f:c3:d4:46:a6:00:e2:ee:bb:0c:3f:5b:ee:d0:0e:ef:09:
         93:34:d2:44:69:cb:fd:23:54:ed:0d:e5:56:e9:45:df:e9:00:
         42:cf:69:76:b9:a6:a0:ee:ca:88:15:8f:78:3e:f5:b0:41:09:
         48:28:21:f6:75:0b:1e:75:b0:15:76:41:96:fd:ab:e4:3e:83:
         4b:d2:f0:0e:fe:38:71:97:45:9a:7b:a3:cc:f8:8e:f1:d8:a7:
         9e:e9:ac:1e:ee:82:19:7c:e8:a7:36:63:2c:40:5d:8e:9d:1a:
         0e:4a:c6:62:28:a8:5c:cf:1b:f5:07:61:54:90:8d:de:a7:d3:
         25:36:37:4d:1c:fa:dd:e5:f4:f9:da:ac:6f:49:2e:4b:a7:82:
         7b:c8:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:31 2026 by rpki-client