This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          3mUbT87eCWi7JAvA7HuOVZxz5GWuNw2GOSXiohkXl0Y=
Subject key identifier:   D4:63:81:B5:6D:82:3B:29:3B:10:8B:B0:C4:A0:4F:45:24:BB:1C:1E
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019BF50780447969F7E325626B05EFF19C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          16B2
Signing time:             Sun 25 Jan 2026 12:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:07 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: E5LXQ/tTIKMr3+Zwu//ovJRgk2XKyxBiEa43SC49UGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:80:44:79:69:f7:e3:25:62:6b:05:ef:f1:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Jan 25 12:01:07 2026 GMT
            Not After : Jan 26 12:01:07 2026 GMT
        Subject: CN=d46381b56d823b293b108bb0c4a04f4524bb1c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:64:10:e7:05:9e:23:ca:f6:ae:ca:20:ed:
                    14:2c:74:f8:9d:76:39:4a:84:ff:65:a1:49:f3:5a:
                    4c:63:4b:67:06:1f:42:be:a6:ce:a0:33:b1:d0:54:
                    6a:6b:3c:c6:40:78:98:93:b4:5a:04:d1:61:0d:4d:
                    fa:bb:5e:81:dd:a9:51:02:91:ea:9d:a8:e3:e4:a8:
                    8b:f6:39:f5:ff:d6:7f:c6:c1:c5:c7:2f:fd:03:4e:
                    47:71:4a:68:e2:1c:ee:46:bf:63:e2:87:8b:a9:d3:
                    52:6a:60:54:a4:dd:83:45:d7:65:9f:26:5a:1f:3e:
                    74:42:9c:fd:ef:d1:90:c7:47:ad:03:e1:90:cb:34:
                    7a:3b:22:b7:c7:05:b1:8b:9e:b1:ef:5c:ca:6c:fe:
                    0a:29:fd:19:04:11:6c:b4:60:2c:c1:b5:13:24:32:
                    2d:da:c7:4b:67:37:4c:52:18:ca:ba:4b:c1:9a:85:
                    e1:e2:4d:1a:7a:ec:be:ab:56:ca:6f:c1:13:55:83:
                    a8:0d:09:90:09:15:1d:9f:de:dc:2b:66:cd:94:9f:
                    2d:be:e3:45:b1:9b:5f:0c:43:f7:1d:28:5f:4c:e5:
                    13:f7:ae:30:b8:0d:2b:d7:4d:64:34:58:03:30:bf:
                    c4:44:aa:fc:d1:64:7a:ed:06:60:89:20:b7:39:f9:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:63:81:B5:6D:82:3B:29:3B:10:8B:B0:C4:A0:4F:45:24:BB:1C:1E
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:84:82:bc:cc:a5:4a:fc:7f:13:18:0e:ff:d7:a6:1b:36:70:
         5c:04:e4:b2:92:05:f9:77:d1:7f:b9:f2:69:91:b9:c8:ca:72:
         46:2c:1b:fc:35:bb:5d:e4:bc:e3:d5:52:b1:f2:b0:d5:6a:20:
         1d:26:c5:9c:a3:a3:3a:fa:da:28:f6:c3:d0:c4:32:21:80:d6:
         60:a6:b5:fa:92:c5:29:ab:4c:8d:50:d8:72:0b:39:ca:72:8e:
         73:8f:9d:6f:6f:a8:7f:65:8e:68:66:b1:da:03:de:c4:83:26:
         17:1e:51:ff:15:59:37:d3:af:21:e4:d9:20:f6:ca:27:dd:fe:
         1a:00:a2:45:97:9a:de:0b:89:2d:c1:0b:4b:87:e2:b3:2e:af:
         be:5c:fd:aa:6d:e8:1e:00:01:68:40:08:fa:9d:9a:0b:85:64:
         9b:14:0b:55:40:7c:e0:70:1e:67:59:b1:ea:9c:6d:8f:1f:fa:
         83:d0:88:e5:3f:77:bf:1c:f0:a0:e8:3e:95:ba:40:e0:07:99:
         00:ef:29:17:72:74:2f:f6:dc:44:e4:1b:24:50:1b:f2:85:a1:
         ee:05:79:ca:7f:50:15:a3:e8:e8:79:db:21:d5:12:d3:3f:42:
         da:90:a5:6e:86:55:e9:f7:80:90:35:85:8b:4c:a7:73:b6:dc:
         fa:9d:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:21 2026 by rpki-client