This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          9BTlPo1tiGyIqlQDGIuTfqzldD/wut8lWUgIGiQaPb4=
Subject key identifier:   43:B4:55:B8:75:09:16:77:76:95:36:1A:D5:15:F8:D1:19:D6:1C:E5
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       019BF650E1B43770FCCCCB46F4E16B43F366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 18:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:54 +0000
Files and hashes:         1: 7_ksMt69-ko9Gs3LCNVMY5Yua58.roa (hash: psyoJRhZwf9m2YaavxF9lBoTofEe6e2bqkYbKXhQaKc=)
                          2: fVnni3HY7sky3f7i5b4WxqKCK1w.roa (hash: EnePOrLQan0VYDSXsgvz+/fx8DR+bHj24KExzs6KuKQ=)
                          3: m35mxfiiz904INQeQIrVDjuOzJw.roa (hash: i+J1jgfb7rEYgW3Y5tYB7Y9arIQtP02Ur8/LX7WJu3Y=)
                          4: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: h1/DK902EOltoAxCKHk4lKPxirJ0PTtqzsTkz30q7qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:e1:b4:37:70:fc:cc:cb:46:f4:e1:6b:43:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Jan 25 18:00:54 2026 GMT
            Not After : Jan 26 18:00:54 2026 GMT
        Subject: CN=43b455b8750916777695361ad515f8d119d61ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ff:bb:d2:0e:39:cd:c4:bc:46:93:18:05:ae:
                    5e:18:45:ef:c6:10:0a:09:d6:2e:a4:70:64:f8:81:
                    2b:5f:c1:c3:85:f1:97:b2:ee:26:19:ac:b3:a0:f9:
                    d5:79:8e:68:c9:c3:22:ec:b9:79:48:ad:39:d7:40:
                    43:a0:ef:3b:71:74:e0:9c:4c:2d:fb:bd:6d:9d:20:
                    ff:50:39:92:99:bb:f8:15:bc:35:b7:60:18:9f:99:
                    5a:5e:8c:9e:68:d8:db:76:90:b9:e4:4f:52:97:87:
                    cd:e0:8f:61:8b:ed:86:60:90:44:4c:33:d3:a3:c8:
                    36:2b:e7:92:83:e8:bc:a1:12:62:93:53:f8:d9:f5:
                    ba:cf:1e:ac:0f:5d:4b:45:00:aa:b4:8f:85:ff:d8:
                    d0:b0:ef:24:17:f4:99:59:7d:dd:7d:a9:41:46:66:
                    b4:85:49:d4:11:d1:8b:b4:d4:c6:da:6e:2b:f5:79:
                    b1:12:8c:77:ed:96:ea:a9:5a:1d:71:3a:14:ee:24:
                    59:26:79:05:5c:20:b8:46:2f:15:8d:2b:96:16:f2:
                    1b:3a:46:fb:fe:72:cb:28:5f:92:88:7d:a7:74:c9:
                    32:22:91:05:6b:a2:20:b3:32:d1:e3:11:d3:0c:61:
                    04:3b:d5:ea:fd:9a:67:53:2c:7f:e7:3e:90:ec:a3:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:55:B8:75:09:16:77:76:95:36:1A:D5:15:F8:D1:19:D6:1C:E5
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:28:e8:bc:20:01:9f:da:71:47:c5:ee:a3:7d:9e:14:82:b5:
         de:7d:c4:55:d0:07:f0:88:ba:72:1f:2a:a7:5f:ab:d8:57:90:
         94:75:6f:ce:7e:ae:d0:d5:1a:f8:c3:bd:14:2f:4e:8d:30:10:
         4e:ac:fb:f8:17:4c:03:c7:19:10:d9:3d:7f:c9:9e:34:b1:6e:
         77:ea:ba:31:9f:16:ea:e2:bd:8c:10:05:98:93:bf:18:06:fe:
         b7:6c:5e:84:7a:ea:ef:c5:4d:5f:80:2d:c1:1e:27:98:84:77:
         bd:26:c3:17:6b:ba:6b:ad:c3:85:e2:a8:a2:53:1b:6d:56:0a:
         71:2f:5e:e2:33:fa:d6:d9:fb:ec:f4:49:96:56:c5:d6:38:5b:
         f7:94:4a:ff:22:13:91:3c:d5:04:71:71:2c:73:2e:53:32:39:
         92:70:01:1b:ec:62:84:e8:d6:4d:48:ea:4b:45:5a:13:e9:73:
         01:a8:61:25:24:1a:99:29:47:7b:72:1b:90:e6:c5:e7:ff:88:
         05:55:10:4b:60:18:ac:25:0f:da:de:24:fa:82:68:2a:a3:e5:
         2a:0b:1a:27:d5:31:f4:f7:75:81:3a:72:64:76:a0:e0:ae:3a:
         34:73:92:94:8c:05:9e:72:31:ee:15:c6:b8:14:23:ce:ae:f3:
         d7:67:da:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2UOG0N3D8zMtG9OFrQ/NmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjYwMTI1MTgwMDU0WhcNMjYwMTI2MTgwMDU0WjAzMTEwLwYDVQQD
Eyg0M2I0NTViODc1MDkxNjc3NzY5NTM2MWFkNTE1ZjhkMTE5ZDYxY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/+70g45zcS8RpMYBa5eGEXvxhAK
CdYupHBk+IErX8HDhfGXsu4mGayzoPnVeY5oycMi7Ll5SK0510BDoO87cXTgnEwt
+71tnSD/UDmSmbv4Fbw1t2AYn5laXoyeaNjbdpC55E9Sl4fN4I9hi+2GYJBETDPT
o8g2K+eSg+i8oRJik1P42fW6zx6sD11LRQCqtI+F/9jQsO8kF/SZWX3dfalBRma0
hUnUEdGLtNTG2m4r9XmxEox37ZbqqVodcToU7iRZJnkFXCC4Ri8VjSuWFvIbOkb7
/nLLKF+SiH2ndMkyIpEFa6IgszLR4xHTDGEEO9Xq/ZpnUyx/5z6Q7KPDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO0Vbh1CRZ3dpU2GtUV+NEZ1hzlMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECjovCAB
n9pxR8Xuo32eFIK13n3EVdAH8Ii6ch8qp1+r2FeQlHVvzn6u0NUa+MO9FC9OjTAQ
Tqz7+BdMA8cZENk9f8meNLFud+q6MZ8W6uK9jBAFmJO/GAb+t2xehHrq78VNX4At
wR4nmIR3vSbDF2u6a63DheKoolMbbVYKcS9e4jP61tn77PRJllbF1jhb95RK/yIT
kTzVBHFxLHMuUzI5knABG+xihOjWTUjqS0VaE+lzAahhJSQamSlHe3IbkObF5/+I
BVUQS2AYrCUP2t4k+oJoKqPlKgsaJ9Ux9Pd1gTpyZHag4K46NHOSlIwFnnIx7hXG
uBQjzq7z12faoQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:09:45 2026 by rpki-client