This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File:                     uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier:          WWKWJiaK0ta7F8RK0X+r6T9agxObpaa4rWx7eA3iX0k=
Subject key identifier:   04:57:66:CF:CA:0D:32:A6:BC:CB:F0:44:4C:CF:CE:F4:E4:53:7F:FB
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer:       /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial:       019C435958BF6B7944D9D3B47EFB4F11A64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number:          15F3
Signing time:             Mon 09 Feb 2026 17:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:54 +0000
Files and hashes:         1: N3jaze7YJRe2qAy_Yl4PgjOPV78.roa (hash: J9hAHBk9hnYVFJwAFN6kZ7iaHqqOjhd7Ue4bGVAtGs4=)
                          2: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: Bt7XT18hFiHmdq99wnrC6InaNjL1OqlDgyLAHGNJXxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:58:bf:6b:79:44:d9:d3:b4:7e:fb:4f:11:a6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
        Validity
            Not Before: Feb  9 17:00:54 2026 GMT
            Not After : Feb 10 17:00:54 2026 GMT
        Subject: CN=045766cfca0d32a6bccbf0444ccfcef4e4537ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:47:d3:4c:56:fa:e9:1c:d0:92:19:d9:57:
                    5f:7b:a1:4f:fd:c4:cb:06:dc:e1:a8:17:6e:ce:4e:
                    a7:b8:9c:bb:f3:dd:39:ca:ef:fd:c1:a0:eb:3d:d5:
                    6f:4e:83:a6:d2:b5:97:75:ba:fa:21:54:de:ce:cb:
                    c4:51:53:be:95:56:da:96:55:fe:bf:db:6e:3e:00:
                    4a:bd:5b:68:a0:ff:2c:25:f1:8e:23:73:84:a9:a2:
                    0b:15:78:33:5c:6a:93:9d:42:f0:59:a4:f6:b9:be:
                    92:05:1c:cd:79:f5:e6:12:0f:10:4c:eb:da:44:01:
                    77:3c:ee:5f:79:5d:cc:80:e9:f5:bb:3c:82:c6:8d:
                    d8:ad:3d:95:cb:1b:92:c1:8c:6a:c8:1c:0b:b3:5b:
                    3a:e3:4a:9e:25:b2:57:8c:7a:b8:6e:7a:74:89:80:
                    23:45:22:37:c4:fc:e6:f2:1b:2c:0c:6f:48:bd:08:
                    ab:86:ef:87:e0:c3:fc:8a:4f:cf:10:11:f3:75:89:
                    34:b3:04:bd:28:bf:36:34:58:41:b6:92:69:9c:59:
                    cc:18:9a:f2:f8:d5:80:8d:77:64:25:e5:28:e4:cb:
                    8f:12:ef:62:f5:d2:b6:c6:c7:70:3d:42:de:d9:19:
                    8d:c7:a9:da:07:91:fd:9c:0e:1e:0c:ea:34:2c:d5:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:57:66:CF:CA:0D:32:A6:BC:CB:F0:44:4C:CF:CE:F4:E4:53:7F:FB
            X509v3 Authority Key Identifier:
                keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:cc:47:f7:db:cd:cf:a6:2a:c0:bf:55:40:27:d9:18:5f:
         bd:b3:8e:3c:a6:e7:c5:a0:73:2a:34:b3:bd:c4:27:74:67:8e:
         c2:59:c4:28:11:fa:a2:46:d4:58:24:a9:18:70:40:39:cb:73:
         91:19:1a:9e:19:32:4f:2f:4f:c1:e6:1a:d7:9e:ad:55:60:f2:
         6c:09:35:cb:47:7f:0a:9c:cf:e9:31:67:33:35:99:dd:b9:2f:
         7f:04:03:f3:54:19:ba:77:d4:d5:11:e6:19:f5:59:29:b5:c5:
         0b:1f:28:1c:e7:e6:64:d5:3a:18:92:65:92:4b:46:92:e7:29:
         9e:9d:d4:93:00:44:ee:08:f1:d2:28:20:b0:9f:35:80:bf:8c:
         31:5c:3c:82:25:0b:9b:47:74:bc:71:31:32:02:43:8e:87:c3:
         92:83:72:a0:ec:d7:76:88:58:ca:fe:0e:3c:c3:50:f6:d4:cf:
         df:0a:f2:fe:8c:71:54:66:5e:31:25:e8:75:cd:96:4b:31:95:
         43:39:aa:5b:a9:a4:e4:56:96:7a:e8:b2:71:ad:94:a9:66:d3:
         a8:ab:97:a8:02:90:f2:20:5e:c1:21:29:d4:1e:a6:bd:f1:86:
         bb:ac:07:af:0d:14:0a:4e:94:4c:3f:6d:ca:45:91:2b:5a:95:
         68:3f:d4:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWVi/a3lE2dO0fvtPEaZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWEwMWFiMzUyNmI4ZWJiOGFmYjE3Yjk4YTcxMjdmMGY1
NGNhNDUwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD
EygwNDU3NjZjZmNhMGQzMmE2YmNjYmYwNDQ0Y2NmY2VmNGU0NTM3ZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupxH00xW+ukc0JIZ2Vdfe6FP/cTL
BtzhqBduzk6nuJy78905yu/9waDrPdVvToOm0rWXdbr6IVTezsvEUVO+lVballX+
v9tuPgBKvVtooP8sJfGOI3OEqaILFXgzXGqTnULwWaT2ub6SBRzNefXmEg8QTOva
RAF3PO5feV3MgOn1uzyCxo3YrT2VyxuSwYxqyBwLs1s640qeJbJXjHq4bnp0iYAj
RSI3xPzm8hssDG9IvQirhu+H4MP8ik/PEBHzdYk0swS9KL82NFhBtpJpnFnMGJry
+NWAjXdkJeUo5MuPEu9i9dK2xsdwPULe2RmNx6naB5H9nA4eDOo0LNVNUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARXZs/KDTKmvMvwREzPzvTkU3/7MB8GA1UdIwQY
MBaAFLmqAas1JrjruK+xe5inEn8PVMpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEt
NWE3YmZiM2NkMDhiLzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iMjQ3ODYtZTc3Ny00YjJmLTlkODEtNWE3YmZiM2NkMDhi
LzEvdWFvQnF6VW11T3U0cjdGN21LY1NmdzlVeWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxrMR/fb
zc+mKsC/VUAn2RhfvbOOPKbnxaBzKjSzvcQndGeOwlnEKBH6okbUWCSpGHBAOctz
kRkanhkyTy9PweYa156tVWDybAk1y0d/CpzP6TFnMzWZ3bkvfwQD81QZunfU1RHm
GfVZKbXFCx8oHOfmZNU6GJJlkktGkucpnp3UkwBE7gjx0iggsJ81gL+MMVw8giUL
m0d0vHExMgJDjofDkoNyoOzXdohYyv4OPMNQ9tTP3wry/oxxVGZeMSXodc2WSzGV
QzmqW6mk5FaWeuiyca2UqWbTqKuXqAKQ8iBewSEp1B6mvfGGu6wHrw0UCk6UTD9t
ykWRK1qVaD/UWQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:11 2026 by rpki-client