This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File:                     uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier:          ucWToYUhn0Cod6mJ4d2DeXmwBmURiKvG/oREXiXZR2Y=
Subject key identifier:   66:32:F3:0D:79:31:C8:52:B3:9F:B5:51:39:37:CF:E4:12:64:00:11
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       019C4C5BFA3F2BD832BC18A29BCB6CF13AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number:          61
Signing time:             Wed 11 Feb 2026 11:00:22 +0000
Manifest this update:     Wed 11 Feb 2026 11:00:22 +0000
Manifest next update:     Thu 12 Feb 2026 11:00:22 +0000
Files and hashes:         1: JLUhby2yTluIzfgutM7IOpP0thQ.asa (hash: 2X1kWmJgLro3B3EW8sYEHZFWIksrB86Qq9r7FnJ87SY=)
                          2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: UY78b/VSJbBNcwKOzUN+dFWTLJOLLyfypbvDAZq0cwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 11:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:5b:fa:3f:2b:d8:32:bc:18:a2:9b:cb:6c:f1:3a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: Feb 11 11:00:22 2026 GMT
            Not After : Feb 12 11:00:22 2026 GMT
        Subject: CN=6632f30d7931c852b39fb5513937cfe412640011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:ae:84:97:15:42:a7:05:0f:82:a4:f8:8d:
                    0f:14:64:c0:f5:6f:ca:fd:cf:19:cf:6c:22:a2:a2:
                    f6:74:c3:cc:7b:08:17:c9:f5:58:47:dd:97:f1:83:
                    db:76:b9:d0:c0:8d:e8:64:cc:ca:53:75:bf:8d:62:
                    d9:50:0d:c8:47:d2:68:42:1a:92:f6:2c:70:7f:c7:
                    74:c4:bb:c7:4a:0e:e5:9f:ba:cb:21:e7:6a:a1:5d:
                    09:66:05:d0:12:af:c5:74:41:9a:5d:bc:d3:b7:d3:
                    6b:26:40:f8:cc:60:36:7f:59:b4:29:00:74:39:8e:
                    b1:b2:01:b8:d2:72:c1:97:23:1f:1f:6c:df:70:24:
                    16:44:9d:eb:4d:a3:77:11:bc:11:b9:79:c7:aa:c2:
                    3b:5b:55:2c:7f:b6:bd:8d:df:8e:35:94:7d:56:83:
                    3e:4f:f3:5f:18:96:5b:93:49:0e:42:8e:c6:74:fe:
                    09:4d:ac:70:6d:41:44:0c:4c:f1:42:44:b8:54:72:
                    bd:ea:10:64:8d:e6:e4:5d:ae:c2:b4:b6:a5:8b:42:
                    46:bc:bb:61:91:98:e8:81:1e:bf:2b:df:2b:04:2f:
                    3c:38:3c:b5:40:b0:18:7c:1b:15:81:3e:f1:e4:67:
                    29:57:2a:fd:c5:c4:2d:2f:42:f1:18:05:b9:3e:d3:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:32:F3:0D:79:31:C8:52:B3:9F:B5:51:39:37:CF:E4:12:64:00:11
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:d2:4a:12:58:90:0a:8c:91:b5:de:d7:04:d4:45:03:78:
         90:3f:ef:2e:73:9d:8c:bf:a7:3c:dd:78:26:2e:0f:a2:15:89:
         ce:b8:55:f6:e9:05:3d:d2:8d:12:f7:cd:d6:10:a1:30:19:11:
         16:52:36:f1:f7:02:76:3f:70:da:55:da:81:52:aa:72:b7:0c:
         fd:61:95:5a:3b:57:77:b6:93:9c:59:12:a2:44:bd:de:2e:68:
         9c:98:17:1e:25:67:84:11:96:e6:a0:bd:bc:1c:be:80:4c:77:
         de:9c:5e:30:3b:35:b6:6d:6e:71:18:03:f9:24:ef:49:37:0b:
         16:2f:a3:c3:93:c4:3b:b5:18:6b:f5:1a:ed:53:db:ac:67:bb:
         d4:b9:18:c9:05:ae:92:f4:2a:52:23:47:94:cc:63:53:82:b8:
         45:0d:50:0b:b1:d8:dc:f9:ec:e3:7c:e2:7e:2f:06:ea:e1:e2:
         43:65:21:28:2c:31:af:6d:df:11:de:b5:e7:fb:88:ad:7c:25:
         99:c5:46:2d:b4:ba:42:8b:17:ba:a2:f8:cd:40:1b:f0:05:c7:
         e2:a9:83:fa:db:15:3a:31:a5:4d:1f:da:1b:42:cb:7b:64:13:
         c7:ad:32:ac:18:56:c7:1b:0b:2a:f4:89:b1:e7:6c:13:7f:cb:
         62:2a:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 18:59:46 2026 by rpki-client