This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File:                     uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier:          rojqwuv/tKy91aW3LrxI7RO8t/SNB2zSL22WHk8TsSg=
Subject key identifier:   7C:D5:62:08:BC:71:B9:23:89:A2:2B:63:FA:D1:71:33:1D:C1:2A:55
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer:       /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial:       019BF83FFEF21846B171F4319DFB450DD0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number:          05DB
Signing time:             Mon 26 Jan 2026 03:01:42 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:42 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:42 +0000
Files and hashes:         1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
                          2: s28CR1gLazBENQfv0iRlHI-K3WE.roa (hash: Tp9gbqVHSFtjO/KmeIi7tCsMEDD0ASIghsoQ31CGOes=)
                          3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: ti6H0qew+TOPaHQZ/43aGzPAp3Xmm0JA1QATjkU1KjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:fe:f2:18:46:b1:71:f4:31:9d:fb:45:0d:d0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
        Validity
            Not Before: Jan 26 03:01:42 2026 GMT
            Not After : Jan 27 03:01:42 2026 GMT
        Subject: CN=7cd56208bc71b92389a22b63fad171331dc12a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:0b:8c:12:e9:22:f7:5d:c7:c4:75:cb:b2:
                    cb:68:8b:b1:ae:8b:9a:6c:32:e2:9c:c6:9d:97:8d:
                    5a:93:36:14:3a:21:dd:35:86:fb:c8:0d:b8:58:90:
                    de:7d:98:de:9a:00:a3:8b:a5:ad:06:55:3f:e6:86:
                    65:ee:7e:da:45:00:f6:39:37:4c:8d:7a:d2:ea:bd:
                    dd:06:7b:ce:a1:c5:55:da:64:74:51:d6:de:3e:aa:
                    56:25:b8:90:30:d4:e8:b8:52:75:d6:22:cd:c7:2d:
                    79:e2:c5:bc:6c:0a:49:bf:46:f9:bf:9e:65:e0:de:
                    86:5f:2d:89:90:10:ac:e8:6b:df:6e:fa:0f:dc:12:
                    00:16:19:67:39:53:5a:69:ad:73:f8:bf:fb:eb:99:
                    4f:e6:ba:05:ac:0a:51:24:44:da:da:ff:a6:57:a8:
                    d2:00:16:c0:00:1a:b3:b9:55:07:05:b7:bf:c7:84:
                    93:66:1c:8f:6c:5e:24:62:34:17:0d:92:ca:01:9b:
                    62:9a:28:39:a6:39:e0:3a:10:81:67:5d:a6:2d:76:
                    79:94:6e:d6:62:75:2a:ed:4e:6b:41:33:e9:e0:78:
                    f6:5d:25:be:86:3b:7b:e4:cc:4b:16:fd:da:81:09:
                    2d:bf:45:25:70:89:64:2c:6a:5a:29:0a:d1:9e:0a:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:62:08:BC:71:B9:23:89:A2:2B:63:FA:D1:71:33:1D:C1:2A:55
            X509v3 Authority Key Identifier:
                keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:0d:59:79:68:9b:d1:07:5a:70:3e:60:4c:c6:b5:cc:f0:
         7f:e3:3d:f9:a0:da:62:3b:19:c0:4b:66:bf:b1:f9:7a:c8:32:
         ca:fb:04:42:5d:dc:49:7a:62:46:23:79:83:a3:2c:e9:3a:d7:
         fe:cd:59:f3:50:a4:b9:e4:25:42:e1:98:a7:3f:44:53:8d:71:
         c3:93:f1:cb:b4:19:ad:24:f2:ea:29:52:bb:b9:fd:fa:34:79:
         b5:f8:7d:b8:5a:35:ab:ed:ec:01:0b:55:d5:f1:4f:b2:35:6c:
         8e:31:94:d2:1d:2b:23:58:dd:61:11:4c:75:95:ed:6c:1a:de:
         87:7d:d2:56:ed:e7:63:4d:6f:0e:e5:7b:e0:86:56:6b:57:c3:
         25:d5:f6:ce:83:b9:20:ff:42:d7:5b:fd:b5:04:5f:c2:c7:48:
         5c:82:aa:b5:53:ec:26:e1:e8:96:44:9d:46:20:00:09:16:86:
         1a:dd:35:37:aa:9e:5f:0f:56:f5:44:bf:0c:d6:89:85:27:cf:
         c1:d9:03:ad:8f:39:a1:9e:89:61:7c:45:22:06:2d:35:ff:b5:
         ff:f4:1d:46:c2:fa:6b:51:6a:31:e1:1e:fd:a6:7c:70:83:11:
         32:b1:d3:dd:2f:a4:27:b6:da:20:af:82:47:04:cd:c9:b8:4c:
         9b:c7:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:58 2026 by rpki-client