This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File:                     UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier:          ZCRleO6KV8iTTMgHd1/XiKQZiBNBihphV8LcxZXLysg=
Subject key identifier:   D6:8E:1D:E1:C2:DC:AB:95:C1:F9:F7:2D:98:B4:82:E6:A8:12:A9:36
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer:       /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial:       019C44348BCFF7B4154684D3C94587E349CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number:          1224
Signing time:             Mon 09 Feb 2026 21:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:19 +0000
Files and hashes:         1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
                          2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: 9Ic4LvuWlZrnGZzqDv3GQxk8f2IO5uPZI7HMPAVqgIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:8b:cf:f7:b4:15:46:84:d3:c9:45:87:e3:49:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
        Validity
            Not Before: Feb  9 21:00:19 2026 GMT
            Not After : Feb 10 21:00:19 2026 GMT
        Subject: CN=d68e1de1c2dcab95c1f9f72d98b482e6a812a936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:0b:4b:ae:6e:ea:5e:70:73:c1:bf:49:5f:
                    13:84:00:0f:69:61:7d:0f:bf:83:59:f5:7d:9b:54:
                    5c:0d:55:15:79:05:d5:a4:77:7c:04:86:bd:e7:b9:
                    f5:5b:9b:6c:1a:48:e0:75:1c:f3:60:d5:14:93:bd:
                    49:ad:58:d4:14:d3:d3:55:64:3b:c6:72:a1:a2:6a:
                    74:c8:e1:0f:cd:c6:89:f5:57:19:41:da:e7:48:70:
                    08:6e:90:5f:d7:9a:08:65:0a:21:03:af:66:a1:d1:
                    d2:6b:3d:43:38:a2:4f:47:a2:1b:e9:6f:96:8e:89:
                    b0:8d:2d:1b:35:e1:69:de:50:0f:64:14:99:21:6e:
                    b4:8f:f9:49:84:53:5f:40:14:42:65:dc:fd:aa:2e:
                    da:ef:7b:c0:c7:94:05:45:26:83:6a:de:db:0b:c4:
                    f7:c8:58:7d:3d:0b:a0:99:77:e8:35:24:10:1f:04:
                    76:5c:9d:21:ce:9d:5c:29:45:1c:60:a0:cd:29:41:
                    fd:d6:54:e3:e2:4e:94:57:2c:b8:82:a6:3e:bc:8e:
                    2c:90:19:05:09:d5:4d:3c:42:0e:98:d7:8e:f0:42:
                    82:3c:b2:e8:4e:9d:6c:2a:10:1c:c8:0d:81:34:df:
                    7e:ab:5e:1f:3e:ec:25:46:ce:bd:21:b3:df:bc:70:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8E:1D:E1:C2:DC:AB:95:C1:F9:F7:2D:98:B4:82:E6:A8:12:A9:36
            X509v3 Authority Key Identifier:
                keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:21:df:67:81:e8:37:e8:62:50:ce:ef:21:79:73:cf:73:
         9f:7f:8f:3f:1d:54:fb:b8:7b:9f:af:be:99:73:3f:9f:2d:8b:
         a5:76:b9:17:45:9a:ca:40:9e:2d:55:69:52:ba:95:93:41:9a:
         78:b4:02:90:8e:0b:9f:68:70:03:2e:8e:5c:ec:67:fa:b6:1a:
         42:44:7e:93:c1:d6:f0:dd:69:d1:91:31:bb:0a:d5:9a:7a:c4:
         f1:19:40:63:e3:fa:0e:d1:7d:85:44:da:8c:5c:6c:72:4f:b5:
         a6:4e:96:59:d4:21:9d:15:3b:fe:cb:bd:02:20:bc:85:a9:66:
         cb:8b:b4:fd:da:bc:8e:9a:9f:b0:20:31:d4:f6:68:a5:8a:84:
         79:9f:60:eb:88:75:ef:2f:e6:94:d4:f5:f1:cc:0f:4e:2f:e0:
         74:7f:31:1a:7f:12:80:de:c1:1e:6e:7b:26:d3:0b:ef:8a:b3:
         a4:39:75:04:09:af:22:e2:70:9d:85:84:50:e1:f4:8d:e4:f9:
         7c:9e:d3:10:b2:a4:a4:59:12:56:d9:52:03:4a:de:4f:fc:4d:
         ca:5d:61:dc:cb:6f:fa:bd:fe:80:3d:c3:40:a8:e5:03:ee:15:
         04:f0:97:85:27:f6:1e:8d:2a:a6:df:4a:d2:f1:8e:4d:41:0c:
         39:7a:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:14 2026 by rpki-client