This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          lxCWTTmRBnmNJ+g8FLjatNXliaBqG7K2z0OVvtblcjc=
Subject key identifier:   6D:23:AB:28:08:66:D0:24:11:D7:8D:84:B8:F9:E0:AA:6C:30:E2:98
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019BF7D25709A7B1FFFCE354DB2394B1EC60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 01:01:55 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:55 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:55 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: vwio5c+j5fpxhkjevcEmPuYK4l/e5RpINSVBPiLV+kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:57:09:a7:b1:ff:fc:e3:54:db:23:94:b1:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Jan 26 01:01:55 2026 GMT
            Not After : Jan 27 01:01:55 2026 GMT
        Subject: CN=6d23ab280866d02411d78d84b8f9e0aa6c30e298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:44:94:77:df:77:40:dc:9a:49:92:cb:1a:
                    f9:09:ce:3a:76:a3:ab:4a:4e:e1:b0:bd:d1:b6:ea:
                    38:a3:2c:18:8c:d9:eb:b4:89:c3:18:20:9c:c7:28:
                    8d:51:67:8c:22:6b:84:1d:69:83:f3:52:dc:c4:1c:
                    c2:f5:f1:d5:1b:48:2f:63:49:f8:c5:6e:0d:56:ff:
                    da:8f:8b:ec:66:db:80:9b:83:85:45:3b:0a:6e:c9:
                    1f:b7:8b:e6:e6:13:f9:2a:74:d5:b0:15:bb:0f:fe:
                    eb:8d:d4:bc:fe:37:0f:a8:3b:54:f3:26:1c:db:08:
                    19:4a:a3:9c:ef:cf:50:d0:fc:5b:d4:e4:0a:bd:35:
                    72:2c:66:fe:a1:1a:db:38:48:4e:7b:48:3d:d1:27:
                    8b:dd:b5:1e:c7:5e:4b:d4:46:cb:18:2b:8e:63:57:
                    d0:73:1f:55:78:c5:96:bd:ff:a6:c6:69:3a:e8:dc:
                    c2:7a:8c:35:f0:7a:7e:57:cf:99:52:a9:77:b2:d9:
                    31:3a:6c:b5:89:44:27:a4:08:a0:ab:10:ef:94:77:
                    d2:82:47:bd:db:c9:93:1d:43:f3:81:56:df:ce:ca:
                    fd:f2:9c:36:0f:b6:0c:61:8b:7e:6f:96:b7:9d:2f:
                    d3:b4:b7:89:4c:5f:b6:69:94:32:e6:ac:82:1c:63:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:AB:28:08:66:D0:24:11:D7:8D:84:B8:F9:E0:AA:6C:30:E2:98
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bf:40:2e:b3:60:01:ed:37:d4:63:31:e5:8a:83:1f:24:b9:
         6e:f9:ac:cf:99:ca:5e:aa:b7:06:50:63:e7:42:4f:a6:bb:98:
         d8:ba:68:3d:30:bd:e8:f4:bf:fc:d9:38:34:da:9d:a3:ae:f0:
         8b:c0:d1:98:69:b7:39:2d:4a:8f:24:68:76:fb:e4:78:66:52:
         83:98:56:7a:9c:b0:d5:6f:2c:19:a7:e8:2f:f3:a4:82:37:04:
         e3:c7:2c:6f:24:3a:1c:f3:68:77:85:70:6b:93:81:12:b7:77:
         f1:c2:52:0b:2d:ff:a0:f0:90:2d:b0:10:49:6a:8e:5b:a5:28:
         b4:50:11:67:0b:04:18:94:71:3b:a7:79:02:4c:47:f9:c7:ca:
         02:b6:be:58:87:fd:3b:56:fb:8a:73:01:ff:9a:ef:97:72:83:
         59:34:40:3f:95:bb:92:c1:37:50:f3:7a:71:46:41:19:d8:e3:
         06:a5:98:48:30:26:1b:03:7d:89:0f:61:b5:a7:6c:1c:e7:0a:
         ae:b4:9b:63:37:8d:27:12:47:74:a0:c3:84:1b:64:65:6c:51:
         d8:11:66:5b:df:2a:0f:20:d3:82:91:53:db:99:74:ff:70:33:
         b1:0d:75:2a:de:43:a1:46:83:0b:78:68:ec:39:d5:58:47:56:
         5a:c4:df:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:57:04 2026 by rpki-client