This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File:                     uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier:          T+2ZxJU2KZb69HmKcbCig8tWetWVjc5y2NjI89YdTHc=
Subject key identifier:   69:4B:63:46:0B:A2:D5:17:21:50:AC:CF:EA:B5:07:C1:5C:6D:A8:2E
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       019BF34FC57DEFA2E187863B7462F321B435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number:          0320
Signing time:             Sun 25 Jan 2026 04:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:49 +0000
Files and hashes:         1: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
                          2: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=)
                          3: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
                          4: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=)
                          5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
                          6: QFgVTa_d7QcMY8-5_IuqXoD8tZI.roa (hash: jeGiUlHqHgGFamo7VLOuJ0n17v7Q86jD8/H1xHylsKA=)
                          7: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
                          8: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=)
                          9: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=)
                          10: ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa (hash: UPsyzhi87SZnZ58kTtKE+18tmkXvGwl7y+zmR4Y6hbw=)
                          11: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=)
                          12: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=)
                          13: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: 4O2bcbuEXpzZt9WuLhZOhwhaK7VzBx9N/JFOQubnChM=)
                          14: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:c5:7d:ef:a2:e1:87:86:3b:74:62:f3:21:b4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Jan 25 04:00:49 2026 GMT
            Not After : Jan 26 04:00:49 2026 GMT
        Subject: CN=694b63460ba2d5172150accfeab507c15c6da82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:32:7b:44:43:d7:c3:93:c3:95:ca:0a:c9:
                    bc:39:2d:87:53:1f:aa:3a:6c:91:0b:06:80:89:db:
                    39:01:3b:1a:68:92:af:3f:31:ad:03:65:b0:16:d3:
                    06:11:92:f2:23:38:4d:cf:ce:8a:81:4b:87:af:cd:
                    d6:b7:0f:cb:6c:03:fe:72:1a:fc:a4:7c:f0:3d:92:
                    74:78:ba:7e:a8:93:63:9a:f6:0a:1c:eb:bd:43:13:
                    77:1d:52:b8:91:71:38:89:c2:aa:5b:0e:46:31:3b:
                    23:e0:61:8f:d6:b2:50:c3:86:a4:45:8e:86:c3:2c:
                    2f:77:1c:f9:26:a2:b7:c8:be:eb:5c:17:3b:ac:d0:
                    b7:0e:95:e2:83:00:c7:93:8e:1d:bf:0d:55:ac:d7:
                    d9:8e:4d:3e:1a:78:80:7d:77:6f:ca:9d:c7:18:92:
                    66:f2:7c:82:a7:47:fb:6f:97:db:87:14:53:d3:b5:
                    75:02:7a:db:6a:95:10:66:02:4e:33:22:54:45:62:
                    7b:c7:23:08:e7:d8:53:92:f4:e7:e1:3d:64:c8:04:
                    0a:f5:7f:b7:d5:bd:9b:e5:5e:ba:4d:57:e7:05:61:
                    7f:81:e6:ea:35:16:86:8f:df:8b:06:c4:0f:c2:66:
                    c5:a2:52:3b:a7:c5:73:93:38:35:69:bb:31:83:b1:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:63:46:0B:A2:D5:17:21:50:AC:CF:EA:B5:07:C1:5C:6D:A8:2E
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:74:bb:30:be:05:8c:e9:27:13:20:59:f4:37:1f:fe:ac:
         8d:72:ac:99:1d:53:d3:63:16:d5:ee:50:82:8a:b4:d0:94:b0:
         db:9e:ec:f3:29:ed:ea:f6:b9:2a:9d:93:83:4a:42:1c:b4:56:
         d5:1a:75:93:5f:36:be:cd:b4:b2:ac:ea:e8:33:32:46:60:0c:
         2d:5b:53:d4:8e:44:ef:86:60:6c:ad:90:bd:1b:12:1c:87:67:
         e3:d6:0e:6c:c1:2b:27:49:2a:d0:cd:aa:a3:db:5a:32:a4:9e:
         cc:56:21:c0:ad:b6:5d:00:7a:01:68:9c:12:b2:a4:38:8c:4d:
         0b:fc:6c:0b:cf:c2:fb:87:fe:0e:3b:d4:bc:a3:96:77:f9:03:
         4e:23:2e:4f:83:fb:31:5e:43:9f:b5:f6:70:be:67:f8:e4:f4:
         a6:b2:12:7a:9b:99:55:d4:6e:85:7b:39:9e:0c:1a:69:13:39:
         96:f1:04:46:4a:15:b8:54:de:ec:97:a4:1a:7b:56:1b:44:bd:
         19:36:f4:0b:42:5c:b8:83:7e:57:eb:d2:c9:8a:f1:60:b0:04:
         03:e8:cb:91:6f:3f:6d:87:2b:ca:d8:b7:d8:13:23:2e:d0:01:
         79:cb:4d:d9:78:dd:0b:a5:ce:04:a5:34:cb:d0:49:6a:44:97:
         91:07:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:11 2026 by rpki-client