This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File:                     uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier:          iO+HXF3qIqN8dAOeleNHnwgPf8+EDcfcuoveUUrlG0U=
Subject key identifier:   8E:F6:4A:63:C2:7D:ED:2A:B6:AA:98:9D:8F:D2:E4:1B:22:82:43:B0
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer:       /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial:       019BF7D164985050BFC1292E3ED4BEAB1022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number:          17F0
Signing time:             Mon 26 Jan 2026 01:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:53 +0000
Files and hashes:         1: G4rPRPH0TevWDN4JhwggPa4i_ew.roa (hash: vucNfqDoD46iq3ADWrbmOLpg+GWhl8NHwQXonzDbGUE=)
                          2: JHMmDbVRrRsKn48GITbyHSYvb4k.roa (hash: JTG+SkQZDZHDvGwrOeoKbRRR7PNa8rHubeMF5VYtzkQ=)
                          3: ZnUp6stV5socGkmCtp3XXdwZNt4.roa (hash: pcLU5hRWx9tbU/nzWNHzQ9gO7KrRDtWeT3kX5BEAeI0=)
                          4: mxGPtlml0cC3fgCiKtLv-Fjx0tg.roa (hash: BPcVgU4gGWv1T2VHL8hZhWOkWk8wdsCpDTIDhtWwrK4=)
                          5: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: 332KFvZajfwONXiF50jq3qJO8d6oy5aqVVqI6T9f/54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:64:98:50:50:bf:c1:29:2e:3e:d4:be:ab:10:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
        Validity
            Not Before: Jan 26 01:00:53 2026 GMT
            Not After : Jan 27 01:00:53 2026 GMT
        Subject: CN=8ef64a63c27ded2ab6aa989d8fd2e41b228243b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:f7:58:ba:d7:ec:79:d6:0e:5e:1c:15:e0:
                    57:d1:ac:f4:db:7b:5c:2f:f2:70:c0:6c:29:10:5e:
                    4a:48:e6:35:22:46:73:76:85:5b:93:dc:81:78:a3:
                    3c:99:c2:cd:99:0c:28:4a:4f:b6:0f:8a:c7:33:c8:
                    11:1a:c1:9f:cf:8e:d9:60:64:13:9c:5a:97:c1:07:
                    c3:3a:9b:90:d3:39:19:da:e6:a4:47:fd:de:7d:0d:
                    fc:c7:ff:95:d5:c6:e3:bb:18:7b:56:10:d8:e8:98:
                    32:9d:28:1e:c2:5e:bd:d8:fc:b1:3b:6f:4e:70:f4:
                    b1:44:f4:2b:42:60:34:fd:8c:d7:ab:5e:3c:69:b1:
                    99:9f:8b:60:0d:bb:6a:14:92:ae:78:d9:7b:86:39:
                    d3:63:a5:c1:dc:d6:75:3d:87:f4:23:32:3b:5e:b1:
                    58:f8:cc:62:a1:90:56:9a:b8:ea:96:40:3c:65:dd:
                    6f:90:55:86:17:99:32:d8:59:04:01:e2:a7:5f:8a:
                    02:44:01:3a:16:b0:3f:34:3b:dd:29:ae:75:ee:2d:
                    bf:4e:d3:aa:b6:2d:fa:5a:4e:16:1d:5f:a8:bb:8b:
                    42:73:02:4f:68:10:b2:d7:e0:dd:7c:24:6d:22:cf:
                    0f:58:02:e5:82:a0:39:52:3a:e2:cd:f9:4c:7f:fe:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:4A:63:C2:7D:ED:2A:B6:AA:98:9D:8F:D2:E4:1B:22:82:43:B0
            X509v3 Authority Key Identifier:
                keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:12:a6:2d:07:25:2d:4e:90:6f:f0:d1:9a:43:5b:44:58:
         38:74:4c:53:ed:05:aa:a4:62:9e:58:a2:60:be:ea:a4:65:9b:
         92:55:17:8a:bc:68:fe:c0:81:f5:e4:5e:a0:c2:42:33:6c:9c:
         52:c7:ce:c6:62:38:f3:3f:cf:26:68:32:5c:5c:65:e3:d1:d8:
         1a:f2:da:68:dd:52:f5:f8:e4:5a:5d:44:0d:65:92:b2:c6:4d:
         75:0c:33:ec:b1:cc:84:82:50:74:28:ae:75:d1:b1:be:ee:b5:
         a7:31:ba:a2:00:eb:68:0e:50:f8:e6:71:b7:2b:9b:d6:19:00:
         4c:6e:7e:e6:41:bf:13:c4:1e:82:ad:8c:af:1a:1e:e3:3b:9a:
         80:ed:d9:a7:f5:9f:b2:fd:7f:df:45:43:44:00:25:e1:5e:0d:
         ab:b5:4c:b3:a4:73:2b:46:44:07:ee:b5:c7:4f:cf:c3:c3:47:
         e8:15:8d:18:90:fc:22:f5:17:96:ba:e9:14:5d:7b:32:dd:52:
         f4:11:c5:da:9b:98:a9:54:1f:d6:a2:c4:25:ce:b4:4b:7f:53:
         e2:ca:0c:03:66:a0:c9:20:65:22:78:f5:31:10:2d:d4:93:3d:
         0c:97:8e:9f:29:66:a4:3e:fa:99:6c:83:9b:54:08:23:b8:a0:
         85:6a:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:07 2026 by rpki-client