This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
File:                     UAVevD0cUvF65lrCkuvgmTEAnPY.mft (raw, json)
Hash identifier:          LXM343FstveML4oKj3lASl4K3nGRkp2HpSJgawQKYZM=
Subject key identifier:   6C:A1:18:C6:56:FF:3A:B4:B6:62:32:01:04:FB:F1:15:D0:C7:E0:8C
Authority key identifier: 50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6
Certificate issuer:       /CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
Certificate serial:       019BF6BE71CDE13622BF55B548E8FC204554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 20:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:34 +0000
Files and hashes:         1: 8ho9HiR8WuGSEcLEuAu9vgoeEOk.roa (hash: 9ykIDcmL5cz0ycTHRWIGIZIZVyJ5BAMWzb6yGqt8tNU=)
                          2: UAVevD0cUvF65lrCkuvgmTEAnPY.crl (hash: kz41D50rNCKL4YnS0TxbxJ/6julYr1a7DWNVdTzSofo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:71:cd:e1:36:22:bf:55:b5:48:e8:fc:20:45:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50055ebc3d1c52f17ae65ac292ebe09931009cf6
        Validity
            Not Before: Jan 25 20:00:34 2026 GMT
            Not After : Jan 26 20:00:34 2026 GMT
        Subject: CN=6ca118c656ff3ab4b662320104fbf115d0c7e08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:77:1a:c2:25:ee:31:cd:1b:66:39:61:d7:
                    e2:13:58:ab:db:11:ee:e4:f2:1d:ef:64:21:bd:16:
                    07:f5:a8:ce:cf:49:9d:ea:22:ef:aa:88:7c:c4:f8:
                    f0:44:4f:45:48:03:39:13:d0:16:d8:44:c5:9b:7c:
                    2a:e5:cd:6e:ec:9c:19:00:0b:ed:61:f2:ec:d2:9f:
                    e2:aa:6d:b6:f0:41:c7:74:0e:8a:5e:6a:fc:d2:ec:
                    64:99:01:7b:fe:d8:3c:f0:41:f2:2e:f8:3c:da:6a:
                    7c:4a:14:b6:6f:26:0e:eb:80:56:68:1a:a7:d2:64:
                    b3:87:0e:94:3c:72:97:38:71:c5:bf:14:ee:6d:83:
                    b9:c7:00:39:0f:6c:33:4a:f5:6a:aa:e5:dc:7d:28:
                    80:36:9b:f8:17:47:31:f8:c9:6d:64:a5:c6:ea:36:
                    11:40:e5:76:c6:cb:50:f3:07:ef:70:73:a6:a1:9e:
                    be:cd:b3:8a:e0:f2:03:0b:f1:0b:27:00:05:da:2a:
                    24:4e:01:f0:ed:7c:af:42:40:ca:a3:44:20:bd:03:
                    ad:15:0c:5d:6e:ec:34:8a:5e:75:28:7a:ec:52:3f:
                    14:55:89:1a:75:fe:9c:9c:db:0e:c7:79:cc:d2:42:
                    9c:c9:5c:1e:61:6b:23:0b:ad:7f:19:4e:55:f3:01:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:18:C6:56:FF:3A:B4:B6:62:32:01:04:FB:F1:15:D0:C7:E0:8C
            X509v3 Authority Key Identifier:
                keyid:50:05:5E:BC:3D:1C:52:F1:7A:E6:5A:C2:92:EB:E0:99:31:00:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAVevD0cUvF65lrCkuvgmTEAnPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6e2ae2-9b3e-4eb8-83d4-c781324b7979/1/UAVevD0cUvF65lrCkuvgmTEAnPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ed:3e:92:4d:9e:fc:bd:c8:39:e4:1e:75:cd:cd:e7:82:9e:
         87:a3:34:cf:df:69:96:3c:d1:6a:1b:cd:a7:d5:6f:d9:54:f1:
         48:17:31:92:e3:39:35:ff:aa:5a:4e:63:2a:48:51:dd:bc:09:
         f5:b8:62:5d:46:33:b4:e8:34:7f:88:e6:eb:43:53:7f:1f:d7:
         8f:76:35:91:57:37:7e:40:59:d8:7e:0d:e6:f4:09:4b:86:3d:
         3a:24:b0:56:ed:f1:2a:48:fa:ed:90:41:db:68:4a:26:bd:0d:
         41:98:36:e3:77:d1:bd:43:8b:b9:4a:85:49:7d:40:21:de:80:
         0e:50:0e:9c:89:a9:7d:74:21:d4:6f:df:19:be:9c:40:1d:58:
         6c:9f:29:3b:33:81:9f:ad:ab:61:9f:cc:b5:61:48:ec:9e:5f:
         4f:3c:96:9d:29:5d:79:45:c3:95:dc:5b:0c:2c:cc:da:f7:46:
         a1:93:d3:90:be:cf:0a:26:87:82:ee:d7:be:92:aa:87:a8:3d:
         ab:fd:ab:33:db:86:2f:f2:c3:d2:99:84:74:45:6d:7b:70:81:
         42:09:8e:53:3b:e1:15:a7:ac:7d:6e:45:16:c8:47:77:74:14:
         29:74:4d:55:65:6a:e6:83:f9:3e:24:89:4d:32:7b:c8:27:f8:
         fe:a4:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:32 2026 by rpki-client