This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
File:                     uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json)
Hash identifier:          ujt6e2zyLD3L5wYiKF6nVO0fTDdBKIUw0N7jaFQh3LI=
Subject key identifier:   BC:23:88:D8:29:33:62:3C:2A:46:24:FC:E3:07:1F:5D:B7:EE:00:45
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       019BF650AD4C7702A31A2044DE6744722DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
Manifest number:          1819
Signing time:             Sun 25 Jan 2026 18:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:40 +0000
Files and hashes:         1: FVXBitmEbgj_li_6czx1XRbqiNw.roa (hash: R8xG/GltnW5vfmFXsInhF+U1K0ZAPEo6gDTassjkZ70=)
                          2: FgBhFfbpwOIh2yLDcYR6t3XYeXI.roa (hash: Xt2Do+PhLFCTF4jZSTOrbDv16PG0FRvMZ65nQcWYGuI=)
                          3: InntupDduHTVC0cqwDJelb8weXU.roa (hash: vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=)
                          4: KTOGyEIzZTvz0cK9QLa-fpUPjxQ.roa (hash: QEovE649tWS9gIrwPoqmHnxEiPeuGa3E2iwZoAPFly4=)
                          5: RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (hash: KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=)
                          6: crlxWYRKnMsCCBJ1tth-hPygkaA.roa (hash: evxq4WD5Z/WNje3kIBlBqohmCQYIqt7B3zr5TFR6NKs=)
                          7: l20iodI7qHF5vK-NH6_rVPCVyQM.roa (hash: OGH43ltJUkqqtDPaQP0DDDhIoPXBMr7s0StXwhpwKJo=)
                          8: lpxrIgCiC2xkznZ89CgmdfgEhCw.roa (hash: JtumJ30bGMVW5iKbWBu0sHNH8SQyWNPkrCzX/38M+zQ=)
                          9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: Ckuj+GPnJXpFd87P5FjMK6c+Dh9r7aWatHFBI7rrcSE=)
                          10: vyNI85-k_7HIHmckCmjXLKePDU4.roa (hash: HwnFl6Kr7AQloXq7jUppVJIclmXUrEisdnMVtoaKo9E=)
                          11: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (hash: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:ad:4c:77:02:a3:1a:20:44:de:67:44:72:2d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan 25 18:00:40 2026 GMT
            Not After : Jan 26 18:00:40 2026 GMT
        Subject: CN=bc2388d82933623c2a4624fce3071f5db7ee0045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:13:d4:4b:6e:48:38:94:0a:c1:7e:69:c3:
                    f8:b3:41:69:14:c8:f2:08:66:af:44:44:99:ac:9c:
                    6a:cd:f3:00:a9:06:c1:02:a2:12:10:43:db:23:68:
                    28:14:4b:c0:9a:1c:bd:b2:1f:4c:37:c5:a6:1a:4e:
                    f6:a5:c2:04:b7:fe:db:12:bd:5b:87:18:3c:93:69:
                    00:7a:c9:01:c7:0d:cc:2f:a9:96:b5:18:64:3a:98:
                    8b:9b:78:21:66:ea:22:a8:ab:53:a4:11:80:48:28:
                    48:08:fd:ae:b8:e0:5b:84:a5:29:78:c9:4d:47:f4:
                    c0:de:f8:94:b6:52:7a:7f:e7:6b:16:b4:32:e7:f6:
                    1e:d5:ac:09:a5:84:2f:8d:11:37:7a:b1:e7:c1:36:
                    6a:5a:ff:24:ec:3e:18:fc:29:f6:ff:f9:d7:92:3c:
                    73:e2:a2:d4:07:d7:17:f9:c9:6f:73:42:cb:fa:5c:
                    5f:e3:be:2a:e7:03:ef:74:41:9c:6c:c9:4b:56:af:
                    1a:9c:b9:48:d6:7e:af:57:a3:47:96:e7:6d:d0:da:
                    3c:99:62:e9:00:45:48:2b:47:c1:45:c3:11:d5:df:
                    d9:a6:45:ea:64:ed:a1:98:17:15:b6:10:8c:73:3d:
                    2b:f1:be:6a:e4:44:54:0a:f6:49:34:9f:b5:cc:ae:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:23:88:D8:29:33:62:3C:2A:46:24:FC:E3:07:1F:5D:B7:EE:00:45
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9e:8f:27:e0:85:f4:40:e9:0a:1f:9e:38:ee:28:18:77:b4:
         95:a0:2f:a9:88:38:63:7e:f5:37:74:92:29:30:38:36:b2:d3:
         c8:0d:f5:fe:1b:64:e6:8d:33:ef:7e:2d:25:e3:26:49:a3:4e:
         ec:74:02:ea:aa:d9:7f:57:ea:0f:4d:ba:87:91:d5:d5:45:aa:
         02:54:99:90:06:c4:cf:c9:34:17:23:dd:fc:b5:18:ba:3c:b6:
         11:69:5a:22:d0:15:63:fb:d1:ea:fa:80:ec:f2:97:9f:31:d0:
         bf:ee:cc:35:2c:d3:ae:a2:47:a2:44:09:2f:e3:13:88:d4:8b:
         49:05:e6:c0:fd:0b:ab:76:95:02:fa:2d:08:d1:fc:43:cb:e8:
         b7:9b:c2:cb:6f:06:52:66:8e:26:5f:8c:a2:c8:81:a2:80:d8:
         8d:b2:0a:08:67:00:1d:ef:51:d0:87:84:d0:7e:a7:89:18:c7:
         bd:93:01:de:6b:2e:e2:48:59:16:eb:bc:37:2f:99:d6:84:64:
         c0:c0:39:be:16:8a:21:ac:da:8c:ff:97:c7:31:c2:60:e7:05:
         9e:10:8d:1e:cc:b4:9f:77:f2:82:0c:38:e8:c2:0d:37:30:71:
         25:09:66:a3:75:87:26:4a:8c:31:ee:18:2e:50:6d:87:aa:e0:
         30:3a:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:43 2026 by rpki-client