This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File:                     zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier:          g7/gOY274ElIncR1kWg1k40iJuqxBGeSOahCdaQ8UJo=
Subject key identifier:   B8:66:F1:52:4B:D8:B3:9B:FE:23:74:38:76:97:65:52:C3:F3:12:5C
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer:       /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial:       019C454772787065BCD9168BDCB538E8370B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number:          07BF
Signing time:             Tue 10 Feb 2026 02:00:35 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:35 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:35 +0000
Files and hashes:         1: uDy0uboGuQ8F6QOEny3tapvn0PQ.roa (hash: 3MCli/TbeRr8V0MnXhO1yofF6LpNILL0P0q1Ula5Od8=)
                          2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: DmVs87wZnd3Fcw/J0doHNVceIUBQ7yu4lb/pdmFe97g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:72:78:70:65:bc:d9:16:8b:dc:b5:38:e8:37:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
        Validity
            Not Before: Feb 10 02:00:35 2026 GMT
            Not After : Feb 11 02:00:35 2026 GMT
        Subject: CN=b866f1524bd8b39bfe23743876976552c3f3125c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:52:12:58:db:09:44:53:78:c0:34:d6:3f:
                    2a:32:57:32:ca:f1:98:8c:64:bb:b6:5b:d4:42:cb:
                    cd:e6:bb:9c:70:b5:c6:3d:3c:9b:e2:e3:9b:d5:02:
                    51:35:32:41:9c:2d:2e:02:ea:13:b9:f7:f9:96:4c:
                    00:22:27:9a:0e:f4:7c:4d:35:e7:b6:25:42:9b:49:
                    4e:ab:5d:4a:7b:84:03:c6:a1:04:d5:e8:8b:60:97:
                    83:18:b5:c9:8a:3b:27:81:4d:8d:03:e2:0a:09:1c:
                    b9:15:cd:9b:02:fc:4d:c9:b2:8a:0f:0b:17:40:00:
                    82:3b:45:fd:6a:92:c8:67:20:21:c8:00:ea:c7:bb:
                    a7:88:c1:34:23:d5:f4:91:64:b3:e2:9d:df:c4:91:
                    56:53:e9:48:9d:35:86:3f:30:06:5d:89:03:06:9a:
                    fc:ec:fc:5b:1a:c5:8b:57:e5:e9:08:7d:4e:8c:18:
                    03:f5:93:c1:11:2a:cf:38:22:10:75:2e:c1:b1:64:
                    2b:fa:a7:e7:95:c2:26:4d:83:ee:c2:db:91:13:a1:
                    4a:c8:94:c5:f0:05:13:c0:e1:c6:f0:c9:39:e7:73:
                    95:f3:d8:9b:f6:ba:29:58:48:72:66:55:9a:8a:73:
                    21:c6:23:18:bb:8b:10:33:e6:38:49:5c:9b:69:cf:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:66:F1:52:4B:D8:B3:9B:FE:23:74:38:76:97:65:52:C3:F3:12:5C
            X509v3 Authority Key Identifier:
                keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:84:8e:81:7d:cc:dd:50:58:57:de:77:78:5a:b3:e4:f7:61:
         fc:9f:3b:0d:3f:69:88:17:0f:3b:69:51:19:dd:74:8b:c2:06:
         db:39:f2:65:ea:52:13:c7:a3:ba:70:ca:42:25:3c:e3:7d:d3:
         d8:08:29:03:e5:bc:58:2e:fc:ec:5f:b3:6e:61:a1:09:5e:8d:
         fb:df:f9:be:3c:29:c2:b4:23:d8:c6:67:b4:9d:80:a9:ce:0d:
         ee:80:bb:8c:33:e5:56:c1:92:84:37:eb:f2:35:b0:26:f9:b2:
         a1:63:47:a6:86:0b:d7:4c:46:23:e9:a6:2e:a7:e8:dd:84:7a:
         d8:08:88:44:45:90:e6:5a:ce:98:55:f8:8e:b0:4a:d2:d2:6b:
         20:13:9a:bc:a4:ac:ae:52:d2:1e:e2:3d:2c:c5:55:6a:f2:22:
         25:1c:23:f7:70:dd:7f:20:f2:94:35:5c:3e:ce:23:0e:e0:44:
         2f:7e:ea:ae:7a:3d:9d:1b:6a:e9:4c:6f:6c:af:17:47:e4:23:
         ee:01:9e:67:9c:93:5d:e5:ce:26:f4:fa:4d:61:d3:f3:36:13:
         6d:01:71:0f:f9:76:8a:83:10:4f:f0:0a:03:8a:8d:97:88:91:
         c2:36:ab:b1:28:29:7b:a2:8e:47:47:3e:3d:2b:03:9a:c4:14:
         52:c9:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:33:29 2026 by rpki-client