This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File:                     uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier:          UGgkyv/BYJ1dTim2wfnC6hHzRe7MslbeyfdHBtJF4Qw=
Subject key identifier:   0B:56:E2:05:2C:69:DC:8B:63:C8:43:70:B4:EC:02:26:39:21:CE:76
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer:       /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial:       019C42B49474D6BD1B20210AAD081C2C7E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number:          49
Signing time:             Mon 09 Feb 2026 14:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:56 +0000
Files and hashes:         1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
                          2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: ULVEooh5b4W3iqPLMlIKWRv0+OBpkyGBDiiCT4RVNvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:94:74:d6:bd:1b:20:21:0a:ad:08:1c:2c:7e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
        Validity
            Not Before: Feb  9 14:00:56 2026 GMT
            Not After : Feb 10 14:00:56 2026 GMT
        Subject: CN=0b56e2052c69dc8b63c84370b4ec02263921ce76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:74:bd:45:c6:60:cc:f0:ed:96:71:cc:1b:
                    b6:65:2f:84:77:63:5d:6e:a1:2a:7c:f1:07:e6:3a:
                    fe:a1:fa:10:54:c8:0c:1f:2c:31:0f:8c:80:81:b9:
                    cc:10:a6:ce:05:eb:6d:b8:06:c0:b9:ef:22:fc:bf:
                    cf:36:ef:aa:ab:2d:ff:b0:7a:09:8d:f3:24:e7:01:
                    9f:9c:44:9c:71:36:c6:29:66:9e:8e:19:54:a2:80:
                    33:d9:eb:57:9d:03:ae:e7:61:a5:d2:aa:4d:9e:39:
                    7d:70:fc:f3:39:76:75:38:ee:38:9e:b9:02:40:d6:
                    c2:d9:9a:7f:ed:62:69:40:19:34:f1:dd:29:fd:f2:
                    d4:4a:bd:27:63:dd:d0:ed:64:7d:04:56:33:d6:60:
                    0b:5f:65:c1:1b:17:fa:31:1c:1d:8a:60:aa:f7:a5:
                    1a:31:1c:df:f6:db:c1:c3:fe:3c:6f:11:12:c4:79:
                    fd:ef:c1:c0:ba:75:03:e8:be:ad:ba:10:c7:48:a2:
                    a8:4e:61:b0:5e:d4:01:0b:03:30:8c:d8:76:b5:9a:
                    fc:5b:4e:7f:06:49:51:2f:f3:9f:b8:87:a7:d9:5c:
                    0a:51:a8:aa:08:91:cf:1e:be:3e:ff:90:17:26:5d:
                    b9:4c:7e:ec:3c:1c:30:19:d6:97:63:dc:56:95:55:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:56:E2:05:2C:69:DC:8B:63:C8:43:70:B4:EC:02:26:39:21:CE:76
            X509v3 Authority Key Identifier:
                keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:54:c6:38:1a:bf:4d:d9:84:43:f5:b6:a8:73:c0:fc:05:98:
         df:89:fc:c1:e8:32:75:3b:14:7b:bd:04:49:68:97:62:95:e4:
         d0:35:d9:45:ce:eb:11:2e:21:3c:16:58:09:1c:ab:cf:9a:1b:
         85:8e:05:40:62:0f:b7:e8:f2:44:cd:77:7d:d5:c5:09:79:29:
         f0:d2:68:21:77:1a:b5:d1:df:ea:f5:f1:ed:9b:42:3c:85:2d:
         1e:46:57:83:39:da:be:46:a4:fa:3f:01:08:95:36:c8:df:3a:
         2b:e9:f7:37:48:e1:f3:27:c7:8c:be:ce:d7:4e:53:49:a5:10:
         7e:63:a1:d5:c0:2d:33:b5:58:ff:d2:e5:3c:a0:2e:03:dd:ba:
         d9:29:5e:87:c4:45:ce:80:f7:d6:77:75:d8:e1:a5:54:37:40:
         61:14:d1:78:78:4c:e1:ea:5f:ab:ca:ef:58:b9:13:59:82:c1:
         fb:ac:59:b4:59:94:fe:0f:f0:8c:df:a0:19:30:b6:77:8c:1f:
         b1:ed:06:94:f7:52:04:63:30:02:c9:5f:ad:5c:52:26:a1:2e:
         a5:bd:ff:ed:bf:f5:66:9d:b7:8d:5b:91:bd:e3:83:60:f5:d1:
         b8:7b:4a:f9:4e:40:35:5c:15:4d:67:35:fd:8e:c5:a2:c0:28:
         72:88:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:29 2026 by rpki-client