This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File:                     uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier:          jZ0STGLB7SssWqPLTQ40WxxHcMAbtUazDiwBIU38ZNQ=
Subject key identifier:   45:86:5E:3D:93:97:EC:97:BB:D1:9C:8F:19:97:20:88:EC:E2:1E:09
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer:       /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial:       019BF53E00C837E7D98D884F400028B784B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number:          079A
Signing time:             Sun 25 Jan 2026 13:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:39 +0000
Files and hashes:         1: cYSlOixvw1IRH_A6U1PmGBfOnLc.roa (hash: ObOoQktNn2mk1CLRsAqDNu4BrgB8VABVPaTI7wXzkNQ=)
                          2: cfljug29MBdwZ2IRskxqcwdwGN0.roa (hash: RSO1UVd7bjnpUDUf4c2ob5lCf11GhEF8w59+h0O9Z8s=)
                          3: e-t5BEEANDkjz8TT0h8YEJKZz74.asa (hash: tAn9UqhREKeh/3lPzeJs+A/xlp0r6QrTew+hGnn6pAM=)
                          4: sPDYGaB0jdjNmv_RI00LaumXHZM.roa (hash: cR+r+JhOtPPtk4/8vr8rgMsCxMQVubUz6os2NddknO4=)
                          5: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: vG5rLfakpclqxXDbr+u2jdHCinrq0+acLaaBb5WpJuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:00:c8:37:e7:d9:8d:88:4f:40:00:28:b7:84:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
        Validity
            Not Before: Jan 25 13:00:39 2026 GMT
            Not After : Jan 26 13:00:39 2026 GMT
        Subject: CN=45865e3d9397ec97bbd19c8f19972088ece21e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:00:5e:ae:66:42:05:9a:4a:93:d7:27:9b:
                    b0:b0:a4:c6:a3:b3:22:cc:4f:5e:b6:bd:fa:1d:1b:
                    a2:99:e4:c9:72:de:f0:39:80:a6:49:db:aa:06:10:
                    46:df:a9:25:d6:f5:0a:b7:35:4b:53:fc:20:03:5b:
                    9a:7c:f9:ed:e0:a9:69:97:77:9f:8f:ac:86:f2:a8:
                    ca:15:eb:61:30:fa:34:8c:d4:d5:68:98:55:e9:97:
                    16:3a:3c:0f:85:16:3f:2b:0e:26:13:96:3c:80:93:
                    0d:a4:d1:c2:b3:c7:91:4d:7f:b3:51:da:04:db:d9:
                    8d:39:ea:fc:db:9f:55:a5:71:c5:ad:6a:cc:96:7a:
                    96:b5:51:25:eb:d8:5e:77:6b:1b:77:7b:52:52:79:
                    39:a6:0a:d5:56:9f:10:0a:6c:dd:85:3a:ac:a5:84:
                    32:88:8d:1c:66:23:87:75:63:79:d9:a9:62:40:d9:
                    e1:9a:93:af:02:a8:57:dc:bc:d6:30:01:0b:b1:24:
                    8f:83:0d:04:3a:fe:e5:d7:7e:5f:4f:51:4e:eb:55:
                    7b:77:ac:59:8d:1a:54:0a:31:56:bc:d3:00:98:43:
                    f2:6b:5e:91:0c:c4:84:d2:7a:69:51:a1:96:1c:85:
                    7a:70:b7:25:0e:d8:00:d1:20:d1:b1:53:92:37:b8:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:5E:3D:93:97:EC:97:BB:D1:9C:8F:19:97:20:88:EC:E2:1E:09
            X509v3 Authority Key Identifier:
                keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:b1:51:1a:90:74:a3:74:cd:66:11:e8:ee:98:8b:83:95:
         d9:26:ed:ea:ce:40:cb:36:c3:47:b1:a5:e8:2b:4d:a0:d7:04:
         35:63:d4:df:90:54:19:1a:c2:be:56:14:66:d5:44:47:96:fa:
         18:75:5a:1e:15:68:97:bd:94:10:70:7c:e8:f2:af:3c:b9:e4:
         0a:05:5f:97:39:4f:ff:47:85:78:ba:49:ac:0a:4a:90:e3:96:
         20:3e:0b:28:ee:27:79:cf:14:f0:86:64:f7:2b:47:ce:63:5c:
         73:00:d1:e0:be:a4:67:93:d5:f1:91:85:25:7e:84:1b:77:0b:
         45:9b:21:5d:81:98:d1:26:7c:94:20:c3:cc:90:cc:43:c2:db:
         bc:94:0b:04:25:74:a7:86:4e:b8:ea:c8:57:dc:60:15:59:14:
         19:e4:83:01:1d:bb:fb:4b:b2:85:75:76:ba:fa:bc:b3:fe:16:
         dd:ce:5b:cc:30:f3:4b:f0:76:0c:df:32:a8:f7:b2:62:9a:e6:
         8d:5f:59:0e:14:dc:99:c2:33:cb:af:3f:92:ae:48:36:7e:ff:
         f2:13:37:4f:6c:12:f5:67:6e:27:61:09:8d:32:14:14:19:53:
         d3:9f:a2:88:9f:27:b2:a4:3b:84:9d:82:18:f4:e8:2b:a8:5c:
         3e:38:a9:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PgDIN+fZjYhPQAAot4S4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMjNiMDdhM2MwYWM5ZTMzM2Y1MmU4YjVkNDFhNzY4YTNk
MzkwMjUwHhcNMjYwMTI1MTMwMDM5WhcNMjYwMTI2MTMwMDM5WjAzMTEwLwYDVQQD
Eyg0NTg2NWUzZDkzOTdlYzk3YmJkMTljOGYxOTk3MjA4OGVjZTIxZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lUAXq5mQgWaSpPXJ5uwsKTGo7Mi
zE9etr36HRuimeTJct7wOYCmSduqBhBG36kl1vUKtzVLU/wgA1uafPnt4Klpl3ef
j6yG8qjKFethMPo0jNTVaJhV6ZcWOjwPhRY/Kw4mE5Y8gJMNpNHCs8eRTX+zUdoE
29mNOer8259VpXHFrWrMlnqWtVEl69hed2sbd3tSUnk5pgrVVp8QCmzdhTqspYQy
iI0cZiOHdWN52aliQNnhmpOvAqhX3LzWMAELsSSPgw0EOv7l135fT1FO61V7d6xZ
jRpUCjFWvNMAmEPya16RDMSE0nppUaGWHIV6cLclDtgA0SDRsVOSN7gG9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWGXj2Tl+yXu9GcjxmXIIjs4h4JMB8GA1UdIwQY
MBaAFLojsHo8CsnjM/Uui11Bp2ij05AlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEt
ODA2OWM0Njc3MWNjLzEvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEtODA2OWM0Njc3MWNj
LzEvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+axURqQ
dKN0zWYR6O6Yi4OV2Sbt6s5AyzbDR7Gl6CtNoNcENWPU35BUGRrCvlYUZtVER5b6
GHVaHhVol72UEHB86PKvPLnkCgVflzlP/0eFeLpJrApKkOOWID4LKO4nec8U8IZk
9ytHzmNccwDR4L6kZ5PV8ZGFJX6EG3cLRZshXYGY0SZ8lCDDzJDMQ8LbvJQLBCV0
p4ZOuOrIV9xgFVkUGeSDAR27+0uyhXV2uvq8s/4W3c5bzDDzS/B2DN8yqPeyYprm
jV9ZDhTcmcIzy68/kq5INn7/8hM3T2wS9WduJ2EJjTIUFBlT05+iiJ8nsqQ7hJ2C
GPToK6hcPjipGQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:34:21 2026 by rpki-client