This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File:                     ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier:          iAEb5/L8MvTxEFiAttiaQQjAfJZ/oWDowJ9FV1ejQWA=
Subject key identifier:   F8:48:02:B0:AB:7A:2C:80:9A:2D:9B:30:4D:9C:87:05:E1:15:C4:DA
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer:       /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial:       019C4321E402BCE9DAEEB924F49000E58D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 16:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:20 +0000
Files and hashes:         1: MyMck_OWz-rJpmQgWGb6jlbkutw.roa (hash: 5JHTiUXVtXyR9bkNJgqG0siIzJTx3VY+ufE9EFCZFgY=)
                          2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: CAnUE6o6QmpnTK+00rpXyZj9kIVRrp1E3nMhy6Up+Hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e4:02:bc:e9:da:ee:b9:24:f4:90:00:e5:8d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
        Validity
            Not Before: Feb  9 16:00:20 2026 GMT
            Not After : Feb 10 16:00:20 2026 GMT
        Subject: CN=f84802b0ab7a2c809a2d9b304d9c8705e115c4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:13:80:50:3c:d4:0b:54:3e:76:97:e6:cc:
                    5f:2b:bd:7b:9f:fa:89:2f:2e:1d:49:c1:6a:78:3d:
                    e5:34:71:51:9b:86:7b:70:88:a5:d5:aa:c6:76:38:
                    ed:7c:ed:f1:2a:36:18:10:f7:f2:d9:7d:19:38:60:
                    6a:e6:18:17:0f:67:86:d4:50:77:a5:8c:66:8e:cb:
                    53:55:47:d2:7e:2f:54:07:ae:e2:02:3a:95:42:54:
                    cd:e7:95:16:81:b6:c8:6e:5d:44:89:1c:10:29:2e:
                    3b:83:98:6c:94:aa:b9:07:1a:7b:7e:fc:35:d5:d8:
                    f2:0d:72:3f:81:4a:9e:41:91:ce:36:53:73:1a:62:
                    a8:f9:d0:f9:54:8e:0b:87:d6:72:c1:ae:f8:78:95:
                    c8:fc:bb:09:13:b0:5b:77:f2:b5:12:0d:3b:01:97:
                    49:53:21:b1:f0:20:3b:42:12:74:a9:be:0c:3a:11:
                    64:33:4b:8e:5e:0d:a0:a3:aa:18:2a:9a:d2:85:25:
                    fc:35:4b:a4:9b:07:dd:55:e5:2d:49:8d:2f:2a:d5:
                    70:86:be:b1:4d:b6:c4:c2:05:34:92:14:49:b8:82:
                    6d:51:45:6d:e1:94:cb:74:cf:aa:03:2d:ef:8f:1e:
                    e9:e9:0c:67:bc:c4:bc:32:47:55:2b:3f:9a:7a:24:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:02:B0:AB:7A:2C:80:9A:2D:9B:30:4D:9C:87:05:E1:15:C4:DA
            X509v3 Authority Key Identifier:
                keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:27:7d:27:94:f8:5d:3d:68:92:15:72:09:e1:15:38:55:d4:
         e8:4b:70:10:42:ab:f3:13:d3:78:da:7e:fc:d5:18:a4:35:d5:
         a3:90:83:f6:65:8d:b2:36:00:a8:e8:e6:52:51:11:ad:16:9b:
         5c:05:a7:e3:f6:73:06:8f:9d:e6:45:ac:1c:22:01:81:15:d2:
         6b:f9:97:ba:d8:bf:32:78:15:2a:35:ee:df:b6:e1:e0:59:88:
         06:2e:bf:09:e3:3f:45:f4:b8:5f:d2:d9:cb:24:81:8b:fb:17:
         e3:50:fa:0a:f7:5c:7f:94:22:52:43:a6:59:53:c2:32:f8:17:
         e6:03:d7:31:ae:41:57:53:00:56:a2:01:68:70:8b:47:92:b6:
         cb:44:28:15:bf:e5:5c:0b:1e:eb:c8:43:b4:30:a3:35:af:c9:
         7a:95:ab:50:64:4a:30:35:1e:5f:63:4f:87:33:6a:8d:f4:e8:
         d3:66:fe:20:cf:6a:cd:3e:31:f4:c3:7e:34:f1:c4:ef:2e:7b:
         ed:78:18:87:eb:98:f7:5d:32:5a:5d:6f:1a:d2:7a:d4:10:d3:
         96:41:a9:e1:cc:af:96:e2:cf:73:67:22:5d:d2:5c:c7:2d:c5:
         60:4c:28:5c:f4:51:fc:6f:5c:54:57:b2:e5:d3:a4:7c:d1:c8:
         e2:95:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:54 2026 by rpki-client