This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File:                     uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier:          boOOqIO3QxZ9jiqQOjqkozcUpR37xQWFz80QZWEFs18=
Subject key identifier:   BF:35:EE:68:A9:93:44:F1:DC:3D:83:5A:11:A3:DB:97:51:A6:8D:AA
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer:       /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial:       019BF76394C73492CB9FE2BA6571AB85A649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 23:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:57 +0000
Files and hashes:         1: XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa (hash: wuOiczzJqVh1W7P+ln61FSsyWFsn4n4esHJ/HU/I0Aw=)
                          2: s2iiETsUpUtweaUwFZTgM9aDg7A.roa (hash: /RumfnN7PhI2jQIZLF3QzcmABh/oQLcD7DbhwGLNMV0=)
                          3: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: N2MG8NVjuNAeNlPrFn00/JtiD01CzBxQmT32CkddUas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:94:c7:34:92:cb:9f:e2:ba:65:71:ab:85:a6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
        Validity
            Not Before: Jan 25 23:00:57 2026 GMT
            Not After : Jan 26 23:00:57 2026 GMT
        Subject: CN=bf35ee68a99344f1dc3d835a11a3db9751a68daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:b9:3e:f0:ce:03:69:85:24:50:94:f0:3d:
                    2b:29:e9:71:d3:f1:1b:8d:bc:35:51:2a:15:db:d5:
                    37:b1:f3:db:e3:3d:33:7a:15:57:01:f1:62:84:c4:
                    46:a3:4a:d0:b3:f6:a9:8b:87:2d:fd:9b:f9:fd:8b:
                    0c:6c:dc:78:cb:f0:0c:4f:f0:ee:2b:9b:ee:99:f2:
                    20:16:92:61:9c:4e:1f:0a:80:d2:b0:6a:7c:38:ac:
                    20:de:c8:ed:c7:cb:24:09:c5:89:59:30:62:9c:80:
                    43:cd:0d:91:92:13:22:48:6e:64:c2:cb:e8:68:f3:
                    f7:fb:6d:bf:cb:d7:cb:5a:26:b7:58:bd:d9:04:6d:
                    f4:da:99:1d:a5:f1:3d:76:d4:70:7d:29:fa:0d:b6:
                    fe:93:a5:77:16:9d:08:bc:04:06:8b:07:c3:2d:0f:
                    85:91:a3:50:ad:75:e1:d6:5d:3b:52:db:d0:76:93:
                    76:c2:21:62:c7:89:65:c2:ba:43:6d:dc:29:fe:4e:
                    54:15:1e:e9:c5:2b:3d:c7:c0:4f:33:bd:1c:18:24:
                    ce:ba:89:01:05:6a:d7:e5:d0:0b:e7:7a:a8:c2:41:
                    3f:27:ec:97:d6:39:a6:1d:df:37:a0:83:bd:90:41:
                    b3:90:8d:ef:5c:65:a6:e4:d6:a9:7a:5c:e9:41:c7:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:35:EE:68:A9:93:44:F1:DC:3D:83:5A:11:A3:DB:97:51:A6:8D:AA
            X509v3 Authority Key Identifier:
                keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fe:38:33:ea:f5:08:8b:6e:46:34:c2:6e:b0:60:88:05:cb:
         6f:fa:f6:40:2b:25:4c:24:1e:03:c3:78:aa:eb:95:e3:6b:fe:
         9b:a3:d5:03:28:7b:6c:cd:e6:d5:28:e1:31:6d:39:c1:ed:7b:
         a7:25:06:70:2d:af:a9:39:d6:9e:30:0a:f2:2b:48:06:fe:69:
         af:ae:b8:32:28:c2:cb:e2:4f:ff:b3:61:b3:b9:d8:28:55:2a:
         80:49:d7:7e:0d:00:f5:82:b8:79:b9:0e:75:54:c6:f2:cf:4a:
         2b:49:34:4a:4f:8b:ed:36:df:c5:5f:27:73:21:e2:4c:25:de:
         87:cc:60:4b:e2:50:be:8c:9d:40:32:36:fb:bd:61:cc:a1:8f:
         c4:8b:8f:e6:7c:f3:a8:a9:f2:5b:fd:42:aa:7a:d1:e6:5a:a0:
         62:de:65:e3:5c:d2:ca:98:9c:c4:d6:b3:89:e3:67:ac:77:d7:
         4c:e8:4f:69:0e:e9:d0:cb:e7:62:13:48:b4:96:6f:86:a4:44:
         7f:b8:11:29:0e:bd:6f:23:12:f6:fc:7e:7f:ae:39:4a:18:f8:
         63:6c:4e:2a:cf:df:33:13:97:ed:0d:b7:a6:64:d8:86:85:03:
         fb:7d:47:eb:be:fb:b2:01:b7:e4:2c:2e:52:55:b2:30:43:8b:
         e5:9f:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:20 2026 by rpki-client