This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          ZZkBg9q8lL5QorRJ9Aq+BgBLWKneK4x+j1wE2HxJeJ4=
Subject key identifier:   67:31:81:5F:78:5C:2A:A0:1B:9B:C0:D7:99:1E:22:13:C8:0D:E3:43
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019BF91AFA3C3E1BBE97D7296B2B8CFBCCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1485
Signing time:             Mon 26 Jan 2026 07:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 07:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 07:00:53 +0000
Files and hashes:         1: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          2: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          3: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: byilUCxnmDYys/gYXgA74KSX4JZqIVfdfT/y0waxh3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1a:fa:3c:3e:1b:be:97:d7:29:6b:2b:8c:fb:cc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Jan 26 07:00:53 2026 GMT
            Not After : Jan 27 07:00:53 2026 GMT
        Subject: CN=6731815f785c2aa01b9bc0d7991e2213c80de343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:6f:13:06:b4:69:92:bd:a5:24:8c:61:75:
                    3a:7e:36:14:ad:2a:3e:91:c7:92:43:31:ca:db:fb:
                    f1:84:4c:b3:5f:64:af:a9:63:a9:b2:c8:27:18:69:
                    15:d7:98:fe:60:38:3a:c4:ee:ef:9c:1b:d8:6a:72:
                    72:7e:b3:64:a6:32:a8:ce:f8:9d:2f:91:32:c6:c7:
                    76:09:7d:37:78:65:05:33:c5:5e:c8:7c:33:2a:9f:
                    fd:8a:a3:3f:ee:cb:87:a1:e7:90:79:85:99:8e:ea:
                    21:2e:4c:32:e7:56:ed:57:e3:05:5b:40:96:1e:e8:
                    65:cf:79:66:52:c0:24:9c:22:90:a0:b1:dc:0a:f0:
                    48:1d:8f:1a:21:e0:e7:92:06:ab:24:d6:2b:f8:95:
                    68:86:f1:4b:a5:fc:68:89:d3:52:41:98:38:74:e6:
                    74:d7:b3:d9:e8:45:50:0e:4d:dc:fb:c5:91:01:cd:
                    e4:f0:8b:21:3f:80:f1:78:de:96:c3:01:d6:f0:d7:
                    60:20:36:e8:9d:52:bd:99:18:99:f1:ea:8d:7e:5f:
                    e3:59:76:0f:3b:04:e9:49:e1:b2:77:0d:73:5c:73:
                    5a:25:79:7e:be:72:ef:87:bb:57:03:d8:08:9d:fe:
                    9a:82:03:7f:c7:61:28:b5:45:47:9b:c9:1b:3a:b9:
                    22:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:81:5F:78:5C:2A:A0:1B:9B:C0:D7:99:1E:22:13:C8:0D:E3:43
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:9a:ce:f5:c8:c7:b0:7f:8a:ad:5b:7c:74:0f:5b:38:b2:
         94:40:b9:58:f2:b9:1a:f3:02:84:d3:54:ff:f1:01:cd:a2:1d:
         e7:58:93:3e:3d:c8:e7:bc:1e:72:f3:cf:3d:ba:25:4e:01:2a:
         2b:cc:ca:d7:76:92:20:6a:d0:9d:44:7a:75:06:77:a8:f2:f4:
         26:f4:8f:aa:e2:28:24:3d:02:b2:7b:e8:31:b6:f6:e6:5a:b4:
         9d:b3:d9:34:1a:de:1a:11:fd:d4:8f:4a:d0:d8:06:31:34:74:
         77:f8:df:b1:0f:6d:29:f9:e4:fe:ce:62:6f:f7:a3:10:fe:af:
         05:c2:48:4d:2b:68:01:43:76:65:8c:02:9c:47:46:e5:67:af:
         6a:17:fb:7b:eb:88:18:07:d5:0f:9b:0d:30:81:f2:e7:62:18:
         2f:67:51:0f:44:68:a2:ac:66:f0:ac:5d:d2:46:e7:36:8b:6b:
         07:4c:9a:8c:8d:72:eb:dd:fa:6f:e2:04:8d:c0:42:da:e0:03:
         09:60:f0:6f:15:b3:18:e7:23:ff:ca:6d:a7:1c:e1:3d:9c:e5:
         eb:a4:d8:0f:4e:2b:4a:3d:af:d9:56:22:8a:e9:8c:c6:31:75:
         c4:24:52:9d:1a:35:04:a9:1e:54:da:58:2a:c5:57:94:ab:ba:
         c1:ae:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:35:31 2026 by rpki-client