This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File:                     uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier:          YZ7Q9jD0BM8hFdx+1HvvyR7eguTEtPV0IlkWTitu9/w=
Subject key identifier:   88:13:86:98:1B:3D:CE:CD:7B:9D:DC:49:D9:52:DE:6D:8A:DC:26:83
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer:       /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial:       019BF4994FB8DA1EE504E6CF579466415B86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number:          0733
Signing time:             Sun 25 Jan 2026 10:00:46 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:46 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:46 +0000
Files and hashes:         1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
                          2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
                          3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: 7HBWHC5TvEjYOKTeG61fSY6NiSfIUUpqVimrV/8ltfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:4f:b8:da:1e:e5:04:e6:cf:57:94:66:41:5b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
        Validity
            Not Before: Jan 25 10:00:46 2026 GMT
            Not After : Jan 26 10:00:46 2026 GMT
        Subject: CN=881386981b3dcecd7b9ddc49d952de6d8adc2683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:b2:b2:db:a9:dc:7a:95:2a:76:82:78:c2:
                    02:42:ce:43:49:92:95:0d:6a:c5:94:00:1f:a6:cc:
                    99:4e:de:4b:56:3b:6b:7e:fa:0d:bc:af:da:68:0b:
                    8a:3d:62:da:a6:8a:34:52:2c:6c:f0:48:9a:6c:56:
                    34:4e:97:63:4d:87:4f:bf:93:c7:22:50:b0:22:22:
                    f9:4d:32:bc:0e:b7:d6:de:8e:1e:5e:b4:d1:39:9f:
                    ae:34:98:58:5b:a5:7d:f0:3e:a5:af:c2:1e:bb:db:
                    c1:da:93:96:d0:78:c4:7b:30:24:a2:c2:97:95:0b:
                    a9:dc:5c:81:5f:73:7b:5c:4b:72:19:49:9e:ca:da:
                    3f:ce:79:1b:65:5f:46:b4:e7:d6:2a:50:82:dc:63:
                    53:c5:6c:08:0f:b2:fd:4b:a3:0b:45:c0:4e:9d:83:
                    d1:d2:07:c3:16:07:fe:5c:33:fc:4c:b1:d7:2a:1a:
                    3b:ed:fb:d2:d8:6d:bf:43:e4:8e:b6:b3:39:82:13:
                    b5:19:f7:2a:dd:07:09:95:74:4c:ba:f6:e4:1d:df:
                    a7:b1:06:d4:91:f0:9a:41:37:60:e3:b7:71:43:82:
                    25:a9:d2:7b:8d:8b:c8:ee:5a:27:3a:2b:08:ae:98:
                    13:f2:0f:52:f6:8c:31:a9:ee:a4:b5:9a:9a:4e:c5:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:13:86:98:1B:3D:CE:CD:7B:9D:DC:49:D9:52:DE:6D:8A:DC:26:83
            X509v3 Authority Key Identifier:
                keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7e:f4:00:a7:5f:41:4c:09:e6:43:89:f8:dd:52:fb:58:81:
         c9:f5:d5:7e:b2:55:25:ae:47:5f:3f:2c:7c:f8:88:43:6b:66:
         dd:6d:4e:eb:5c:54:70:61:d8:1e:12:6c:18:63:85:b1:43:b0:
         6a:e0:e2:22:d9:57:a6:78:c0:11:1e:b5:67:0e:6d:6f:fc:0a:
         8e:86:ae:31:d1:0b:9b:27:5a:26:9e:d0:5f:9c:07:a3:89:ae:
         b8:1e:90:e7:6e:0c:cb:37:79:31:64:4c:83:54:ae:14:21:7e:
         19:bf:c2:04:c2:d3:49:6f:6e:20:6f:66:75:3d:b4:48:a2:95:
         99:d7:40:1f:0f:78:86:5c:8b:b8:74:25:5e:64:b1:7a:50:81:
         e1:96:dc:96:48:19:2c:95:31:06:62:10:c4:22:54:3c:7d:c8:
         68:a2:98:d4:22:ed:05:11:83:9f:3d:7c:50:11:58:0f:62:9a:
         3b:67:15:5d:9c:ac:2d:18:9d:d0:4c:9a:97:81:45:79:0c:fc:
         7e:d4:06:4f:99:59:1d:11:b2:8c:9a:62:3a:05:7d:6f:37:d5:
         14:8b:a8:d8:6d:50:a1:d0:d4:b7:2d:ec:f3:89:a8:d2:0a:1a:
         b3:9f:13:48:27:da:c2:69:07:4a:b2:7c:b1:58:2c:dc:9b:a7:
         0f:ee:61:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:48 2026 by rpki-client