This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File:                     ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier:          JgI1EasMS0xUQABGqLmeHhwHuhBQc3NmWxRLG/W0DZQ=
Subject key identifier:   2C:99:18:AE:CB:52:A9:0B:97:D9:71:51:28:3E:09:44:5F:95:65:9D
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer:       /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial:       019BF72D7D42F3A630ABAFB1164E71622C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number:          0BB9
Signing time:             Sun 25 Jan 2026 22:01:52 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:52 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:52 +0000
Files and hashes:         1: QCLNg4PNOl11XDmyCY2IfSAv4u4.roa (hash: jT4JDY6Kk9V6/J+VGMgmAaLrU2fWlyxRaRtTYMCcfOY=)
                          2: RdkaFRkALmXWppyPovm4lLqOuf4.roa (hash: k34PYcy+lvNt5vspbUF9swbWIcTSvLB8s2++XmOPKz0=)
                          3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: L+Xa2LecikDT7AjYNgAtpQYKFnrGUSnh1UbJCc88l6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:7d:42:f3:a6:30:ab:af:b1:16:4e:71:62:2c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
        Validity
            Not Before: Jan 25 22:01:52 2026 GMT
            Not After : Jan 26 22:01:52 2026 GMT
        Subject: CN=2c9918aecb52a90b97d97151283e09445f95659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:3c:81:7e:91:11:f2:e2:69:de:19:c1:70:
                    7e:3c:a1:e7:af:12:2e:ca:d9:c1:d6:85:9f:bc:d4:
                    c4:1b:de:b4:ad:1e:f6:61:5a:43:c6:b5:bf:94:df:
                    91:dc:1b:15:a4:23:80:08:9a:6e:a6:f5:4f:ee:81:
                    95:b4:ff:39:fa:3f:eb:4e:31:5d:e1:ee:46:a5:b8:
                    be:44:ec:b5:83:53:86:80:c3:34:08:f1:ca:09:fb:
                    2f:1f:ef:f7:93:29:19:6a:c5:87:e0:e2:a3:3d:a3:
                    f8:d5:99:40:13:ad:f1:b2:e6:ea:0c:b8:71:ec:57:
                    17:58:05:10:82:3c:10:fa:e2:43:14:c6:f1:aa:cb:
                    af:ac:be:0e:cd:af:a1:89:25:38:54:16:db:7c:03:
                    3c:26:ae:bb:a3:15:8e:ef:21:f2:92:73:db:c8:3b:
                    11:7e:6a:e8:61:64:ac:ca:8d:15:17:6f:3b:84:71:
                    64:a5:8f:d2:44:03:62:74:c5:94:ed:31:d3:f7:d3:
                    cc:83:eb:5b:07:bd:77:95:97:8e:b6:40:99:d5:f5:
                    c7:f6:a8:8a:5c:86:b8:02:d7:08:1a:7c:0c:79:e5:
                    78:05:50:03:10:1b:ad:29:a6:d6:68:a9:28:f9:58:
                    8a:fd:29:20:ba:c4:20:f3:68:83:b3:83:0e:ff:24:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:99:18:AE:CB:52:A9:0B:97:D9:71:51:28:3E:09:44:5F:95:65:9D
            X509v3 Authority Key Identifier:
                keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:34:59:f9:af:67:fb:f5:a4:99:c5:c7:13:25:10:3e:55:
         16:fa:d9:9c:35:d8:ec:95:6d:e6:5d:d6:ce:f1:64:43:36:5e:
         44:f0:d2:22:f5:4e:33:02:18:de:87:d1:1a:cc:ed:6d:cb:32:
         bd:6f:9b:63:ae:90:00:dc:c4:4a:11:58:35:00:2a:f4:60:d7:
         14:05:4a:e9:f2:52:30:66:2c:30:84:e1:1b:b0:c6:2c:f2:a1:
         a4:8e:37:76:14:e9:60:c6:5d:60:51:a4:52:3d:8b:e9:89:f7:
         01:1c:1d:6f:73:54:f1:b4:db:69:50:5d:fd:19:b3:12:bf:34:
         2d:29:8c:32:17:52:2e:d0:54:75:2c:5f:8c:29:fa:b5:8c:ab:
         a2:cf:55:3a:de:ed:9d:91:ef:3b:d6:21:0f:58:7c:b2:f9:13:
         f3:c5:30:94:91:64:ce:fd:eb:29:3a:82:17:d0:a1:2f:f5:0c:
         2a:b2:c2:5c:63:1a:ab:55:a2:43:cf:e4:d1:e4:55:c3:39:df:
         08:5a:59:2a:d2:57:a5:fa:ac:63:c1:d1:5f:b9:30:ac:c7:3f:
         0e:4d:72:81:4d:0b:d1:f9:8c:3b:16:15:af:ab:2f:e2:a7:26:
         05:5a:f1:f5:00:a9:6e:64:bf:27:38:9a:74:89:8f:95:4f:99:
         bc:2d:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:19 2026 by rpki-client