This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File:                     U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier:          OYOrKTNB24AZMctjaKTLKtzJJCSM4hS075z4h2n2aSM=
Subject key identifier:   C9:65:EE:76:9C:63:6C:C0:2B:0D:AF:3B:40:69:8C:8F:49:B3:4B:7F
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer:       /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial:       019C4435158EBCEEA7B3E5E3984AC39995D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number:          07F4
Signing time:             Mon 09 Feb 2026 21:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:55 +0000
Files and hashes:         1: Tv0ULnXhuU-LX5lHMmtC4uXh3f8.roa (hash: G7sOuhUNSdG8wE7mvWF+cLqHad92elbdv/9zhXuTLxo=)
                          2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: GlXxb45BM6V+XCzLp3Hu/CpqUJHehqJREEeW67ieKyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:15:8e:bc:ee:a7:b3:e5:e3:98:4a:c3:99:95:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
        Validity
            Not Before: Feb  9 21:00:55 2026 GMT
            Not After : Feb 10 21:00:55 2026 GMT
        Subject: CN=c965ee769c636cc02b0daf3b40698c8f49b34b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:bf:43:01:12:4c:57:57:f7:86:72:73:20:
                    90:5e:1a:b6:04:05:43:37:9d:1a:6b:81:c1:20:44:
                    e4:ea:8b:48:62:75:af:b2:eb:bf:59:8c:07:4c:48:
                    1d:7e:fc:3f:82:d1:65:76:d4:28:0b:e6:74:60:a1:
                    7b:3e:f0:b8:46:72:52:27:9d:8b:94:59:46:72:0c:
                    58:14:ad:18:d3:ff:1a:8b:35:b8:12:de:93:2e:c7:
                    6e:b9:4d:22:cb:1a:71:44:a6:67:c6:8c:dd:25:06:
                    8a:f0:28:19:c5:b0:b3:3f:cf:2a:20:41:ba:64:90:
                    81:7e:d3:69:b9:72:2f:a3:7d:35:ca:75:da:21:6b:
                    b7:d7:f1:f7:ac:d9:26:f9:23:ed:fc:1f:5a:b3:6c:
                    ac:40:4e:e1:95:0a:11:2f:de:0e:70:4a:ec:8b:92:
                    a3:51:a3:3c:c3:d3:4d:57:72:64:0c:17:9f:28:23:
                    b7:92:23:1a:d7:6f:1c:e4:cf:64:30:31:65:f9:2f:
                    9c:5d:40:9a:59:ec:e9:c8:78:13:3d:1c:b3:dd:9c:
                    88:f4:59:dd:c2:bf:b0:f8:81:a1:bf:b9:19:32:d2:
                    6b:e2:2a:46:d0:87:49:1d:58:6f:58:b3:a2:46:7a:
                    58:2b:6e:61:50:96:7a:dd:ef:c0:7d:91:c7:ff:74:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:65:EE:76:9C:63:6C:C0:2B:0D:AF:3B:40:69:8C:8F:49:B3:4B:7F
            X509v3 Authority Key Identifier:
                keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:6b:1f:b3:e8:e8:72:bf:28:50:88:f5:ed:7a:61:11:1f:1f:
         87:73:63:3a:9b:87:e8:8c:5d:c7:f6:69:4e:d6:dc:8c:2f:6e:
         ba:2f:11:fd:71:18:55:de:7b:65:34:e4:dc:49:7f:9a:7a:cf:
         92:ff:13:3a:96:c7:08:de:f3:c1:2c:c3:d5:a7:db:52:e5:90:
         8e:0f:d0:a9:19:6a:83:cf:3b:83:56:c3:22:76:bf:ac:16:5a:
         c0:1d:59:a5:b9:89:71:30:1d:6f:c4:aa:97:1b:b9:25:1a:e3:
         67:30:c0:1c:43:80:6e:3c:d6:b2:78:83:8c:31:27:59:a7:be:
         80:af:a0:d5:94:ec:de:3f:81:45:a2:bb:c0:3a:b6:e5:0a:f2:
         01:21:ae:d0:ec:83:99:83:82:f4:2f:d8:f0:6b:7f:23:9c:f5:
         ba:57:71:27:9e:f0:9c:8d:92:b6:fe:d2:bb:86:a5:b2:69:a8:
         97:27:ed:8c:db:98:ae:80:9a:76:66:a7:a2:f1:90:bc:95:58:
         a2:67:28:23:0a:5e:b7:65:e9:45:bb:49:84:c2:db:64:e1:29:
         d0:ef:3f:d7:98:bc:88:90:e0:6d:7e:7d:e5:a4:a9:f9:e3:30:
         74:af:56:28:80:14:91:ea:38:46:01:4b:61:68:25:12:75:b0:
         90:a6:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:17 2026 by rpki-client