This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File:                     uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier:          GNc460dZpGTkdRqj64nRDqt98OYYL0cvHgkFbExig+Q=
Subject key identifier:   2C:73:3D:B3:BB:8C:02:0B:DD:18:EE:6C:9A:81:A8:30:5D:3A:25:5C
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       019BF386BE8921B5C6057686E4B68E2DD342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 05:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:52 +0000
Files and hashes:         1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
                          2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
                          3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
                          4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
                          5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: rH5AQQiwple+/X0zBGNIX7l872PrCROxZdDbs/inQMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:be:89:21:b5:c6:05:76:86:e4:b6:8e:2d:d3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Jan 25 05:00:52 2026 GMT
            Not After : Jan 26 05:00:52 2026 GMT
        Subject: CN=2c733db3bb8c020bdd18ee6c9a81a8305d3a255c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0a:57:9f:ba:30:f6:d3:eb:1e:b7:3e:14:e0:
                    62:82:cd:0c:9e:95:84:21:8b:a1:08:d6:b5:10:fc:
                    eb:ae:45:3e:a5:d4:eb:d2:a0:e9:5d:c2:52:fa:a1:
                    3d:d1:ce:4a:78:47:6b:cc:8f:b8:95:8b:35:5c:c1:
                    f8:28:cb:70:08:8c:49:66:5e:e3:73:fb:e4:cc:54:
                    88:75:eb:60:d5:9f:91:9b:07:e4:d8:bc:92:41:01:
                    26:e5:07:88:96:bc:f8:1b:20:81:69:65:25:f4:c1:
                    92:04:5a:77:99:31:00:c2:45:bc:aa:d4:e5:92:8e:
                    42:0c:22:53:44:e5:b2:af:16:fa:88:bd:ec:3e:03:
                    de:72:1e:77:88:e8:eb:78:b3:64:32:4e:0e:c9:5e:
                    ab:f1:5f:a0:59:77:b4:9f:cc:61:41:9c:84:25:01:
                    90:b3:23:95:29:7e:8f:a0:e5:0d:b2:f9:7c:92:0b:
                    bb:96:7c:fd:ef:5f:68:4c:f2:df:34:77:31:08:cf:
                    53:66:4f:42:08:79:ff:5c:f7:fd:cc:95:76:d8:e3:
                    b6:60:06:13:c0:ec:51:23:5b:1b:23:58:c4:cf:bf:
                    a5:0c:83:21:95:89:bd:28:2e:1e:27:3a:64:66:1c:
                    49:8c:f7:f3:ec:b7:88:34:8b:13:7f:bc:db:f2:3a:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:73:3D:B3:BB:8C:02:0B:DD:18:EE:6C:9A:81:A8:30:5D:3A:25:5C
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:47:cd:d1:c9:7c:a9:eb:2f:83:13:af:3c:c8:6b:5f:6a:
         0a:23:cd:6e:32:6a:93:ca:d5:15:ac:90:b6:1f:ca:29:25:6b:
         4a:00:cd:bb:3e:8a:42:fb:71:9a:e2:20:98:23:65:50:ed:90:
         26:3f:77:ab:3f:10:26:0a:ba:d9:58:a9:91:60:4e:3a:a2:57:
         27:9c:26:39:7e:26:2f:49:56:4d:20:fb:fb:57:e4:4a:1d:5c:
         49:05:91:49:5a:43:22:81:f8:0c:ae:2a:0b:4c:3e:98:18:80:
         85:22:dd:f8:9d:9b:ed:f4:1e:66:ae:5c:70:09:7b:03:51:5c:
         0c:1b:41:4b:2b:35:69:8c:4f:6b:15:7f:93:ad:7b:dd:b2:f2:
         93:8f:57:6b:62:54:8e:5e:03:90:07:cf:c5:f3:5b:3f:6b:20:
         e5:8c:71:88:a1:7e:5e:6b:de:af:80:6d:e3:6d:d2:5a:4e:35:
         1c:ae:59:ff:d3:34:7c:13:52:79:7e:e9:2b:9d:74:f7:5d:f0:
         98:e3:f7:2d:de:d2:c6:cf:2b:e9:50:e2:d1:97:34:87:b4:f5:
         e5:d8:39:22:22:0c:cd:6c:56:91:73:7c:4d:68:e2:d4:7a:10:
         d5:14:45:7c:b0:14:16:58:05:f7:5e:23:c8:bf:ec:3b:b7:eb:
         c2:de:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:10:17 2026 by rpki-client