This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File:                     uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier:          B++fVMW0xblxl3gwEKT1LRev66UUNzCUJv6/AW4uBto=
Subject key identifier:   9A:69:8C:FE:07:33:4C:C1:A1:29:37:F9:01:C2:71:DB:B2:C1:15:79
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer:       /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial:       019C4390357BA6C87C63C8502585BEE4C345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number:          0657
Signing time:             Mon 09 Feb 2026 18:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:50 +0000
Files and hashes:         1: 2llKod88bt0IEq1tT4r35WnwAuo.roa (hash: ESzVnKbY8Eb1kfzk8LLe6etZCeWG9pKGgAtF7wa98es=)
                          2: OJRh5gd7Pe9nU-AfQ29x1O7oo-4.roa (hash: VAxeLy6zs4coz1rkit5AaGjkqY0PRlhQfcQmh9gEriI=)
                          3: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: TNP0sx2Uf75AwZ985OyqoA710r4m6tVgtFoQtC3rj1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:35:7b:a6:c8:7c:63:c8:50:25:85:be:e4:c3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
        Validity
            Not Before: Feb  9 18:00:50 2026 GMT
            Not After : Feb 10 18:00:50 2026 GMT
        Subject: CN=9a698cfe07334cc1a12937f901c271dbb2c11579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:23:21:26:f2:e9:48:4c:ff:17:b3:57:e4:
                    3e:4c:a5:cf:27:5d:fb:e7:22:88:a7:96:4a:75:a5:
                    2e:8a:69:d1:57:ac:41:01:01:2d:55:2a:60:ed:bf:
                    7c:14:6e:10:fa:81:75:83:2d:c3:03:49:24:de:fa:
                    bf:90:0f:41:91:db:31:79:da:13:77:89:89:54:eb:
                    e0:05:76:9d:86:19:61:8d:0f:9e:0f:c9:96:d8:64:
                    57:a4:6f:17:83:58:12:04:6b:21:6f:f4:7a:a4:48:
                    66:31:d3:e9:47:ae:c9:ce:96:20:e3:80:5a:16:a4:
                    66:a3:07:d4:6e:1e:24:f7:57:0f:1d:ad:b8:d1:1a:
                    05:21:d9:00:0c:83:e2:92:d5:1a:19:13:a5:c5:e8:
                    33:ed:55:43:fe:00:d3:18:1c:3a:d8:67:d6:8e:1f:
                    ff:a7:51:09:c8:03:5b:98:9a:dc:1f:c3:7c:6b:15:
                    2c:38:35:5b:79:97:50:37:bd:d5:e9:a5:89:92:dc:
                    99:b4:18:20:f7:3d:c0:b4:85:cd:b0:af:03:ad:08:
                    e6:92:11:1d:60:b2:71:32:1a:69:4f:1b:eb:26:5a:
                    e5:81:81:40:f9:0a:e1:da:00:8c:27:8b:95:4d:b3:
                    53:54:52:56:54:9c:22:21:ec:0e:56:86:67:8b:40:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:69:8C:FE:07:33:4C:C1:A1:29:37:F9:01:C2:71:DB:B2:C1:15:79
            X509v3 Authority Key Identifier:
                keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:c4:c1:36:7d:1d:fb:5f:67:74:1f:a8:b2:b0:06:1b:92:
         31:68:a9:95:35:79:d8:b1:25:26:3c:8a:5c:d9:bd:c9:40:5d:
         31:7e:3c:30:29:b3:cb:97:be:4f:6c:68:c2:ae:f7:b2:4d:3d:
         cc:47:ad:26:38:29:26:e8:09:a8:ea:5e:48:0e:c0:19:55:c1:
         51:52:d6:63:e5:1c:4b:54:50:13:29:91:d4:bd:90:7e:3d:a2:
         72:ed:dd:61:eb:20:0a:c4:82:b3:ee:ee:e2:c5:fb:18:bb:ac:
         a4:ae:87:02:90:d8:ba:b8:9f:cc:cb:b6:92:6f:80:7b:bb:d9:
         58:42:b3:47:76:80:2a:7e:54:bc:98:0d:0f:d0:4c:ec:64:8b:
         71:d3:9f:88:a6:72:fb:4c:9b:75:ec:be:9f:57:95:cd:a9:b6:
         7b:a2:a7:56:de:ab:2b:60:8c:20:8a:42:25:3e:22:b8:b9:50:
         d9:9a:bf:c3:91:34:e1:e5:9a:fc:78:00:0b:43:de:f0:c1:74:
         7c:9c:12:15:82:cd:4e:b4:0f:96:dc:b2:d4:b8:d1:c4:1d:b6:
         c2:43:fd:da:da:28:82:35:a0:27:03:8f:c5:a6:91:71:d9:97:
         38:83:45:d2:63:27:03:c9:86:ef:6c:e0:e6:5d:2c:24:ad:62:
         05:b1:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:36 2026 by rpki-client