This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          RYRS3N2ycKFXl6zGT30cNzFXauRTu84RrQluP4e3zyk=
Subject key identifier:   A4:2E:0D:30:0F:4C:0C:26:E5:BC:EA:BD:BF:C8:02:DB:33:E0:98:23
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019BF42B8850F50B330BB778C3901CE7F124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          0545
Signing time:             Sun 25 Jan 2026 08:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:51 +0000
Files and hashes:         1: 1N-RfUNK7TJOADuEd5LwU0pc9dA.roa (hash: giwWtGGz0qJdTRyYsC2mxOvkudQ3rDLs13BtvMl+IcU=)
                          2: F28Fou-cp6zKompMDBRHB9PzBO8.roa (hash: c+aWa88g+fAFN00H3xZY62Nx+3z9Djpk4RWhZ/ftbEM=)
                          3: GRurkR15IRibny01c2SgIJfB2ug.roa (hash: HYnLeHjwl0NzFIGJaGbDg+VGhR0vZ/WRcnjZj+Q9dqw=)
                          4: MnYY-Ftfzolwr8e6LxWc7bisHtU.roa (hash: zl2cWXTK7oGfiqUfR6zbQjVBrUy/mOT4mFf5K0bogqY=)
                          5: PrsnZ-IEBEB2ESdFkpvSZlXdbj4.roa (hash: 00EaG3/DL87W1Q9d8sgB5UffnCBSpq+IkvKtAw1IPxA=)
                          6: RD-lUB4Ei36QxtI-FiOM6NM_U2Y.roa (hash: A93vzTs8DQd1xXreJpQ+GUKXK5PpHkGlwVbRSd1LD8Y=)
                          7: RNooxoPY3lLAM-uAghLz8fxjGqA.roa (hash: UpZ11CFlKFt4PXECoPaj1SbS3l0bpqo9jOt7fVabYlM=)
                          8: TTolVZDGDqJ96cw1ao2YfurArxw.roa (hash: cosgXImXqaLN2GDpw6pQx/7KB01l2Y7hSMANdeb88IU=)
                          9: Te6cIbUUusPhjEpjZLV30Q4irW8.roa (hash: cM0qzNPxtkyPtYXGSyvQf0/VwJhZ/7yblxzGGTP8Rew=)
                          10: VurK4Op9VVyDM898guR0PGmZun0.roa (hash: etVWe2qpJw25LoM9LGLg0h2tpADseIfR7Y6SaHgsFBk=)
                          11: XUASNYXbi-huANrVaIURORtUIpA.roa (hash: +AF+AoWlKgYDtvtJSR2fVM4jb67bbJihIgbo4mO4YrU=)
                          12: XXCfSA5i6cR4GsHNYWAJo9hST8U.roa (hash: WC1z/2WX2c5pLdJ9psJam8Dm0HPb89b8Rv4EcBWL6sg=)
                          13: Y5JlWrPT3zTUlpZ-rj9Kxvt4-wk.roa (hash: 2a68m4BNFp5jydkDZJ1/wjh7V6M7PNsvIuSb/K1IRxQ=)
                          14: YJd-1raR94ty3e3I_U-O_Msqbcw.roa (hash: 5OEecA95crTZEV2zOr87dEQBIjiCM6GYAQ548/GNEBA=)
                          15: ahxR1iTqeBFOP143gRwFt5yO29g.roa (hash: wPdQP2L3pRSTzcMk3v/3ELfzo7fD95eUibqdJGL8WL0=)
                          16: bLv7pvLK6_7fvMuKuQZL0mXT-w4.roa (hash: 8uNB/ILMFrq3sToFR+5ug40e8NIIul6S+LEO82VmTuM=)
                          17: eiBp3riEsH_TyOBVbVUiHplY4Jk.roa (hash: PI2KpI5NcyEngDeDOYyNH/V6GDpxw4GW3kFlPalkcBU=)
                          18: hvSBwCaj_tJ_7ZE6Ma831F6v3xQ.roa (hash: JWw3/L4UCUSDwP9XiLbzJj8Sl5rwZU+IUTS89T822ZM=)
                          19: juoDqBJ7n299gPxuH0Kb4uGBHEw.roa (hash: QknnOGTrcO8rMkdB2tP33xE6C8CQ2VIITStYWv7rx7Q=)
                          20: nKphHTLZ9wAiEaZHJ3GE-SBj4B4.roa (hash: vS4SbJavvGCy6afeQpD8NQ8z7X7Q99Ou3a4Euk5tYic=)
                          21: p0AgDh6yKQcVidh5G8BlsJJI9Dc.roa (hash: o4urzIe4Ny6+8AzMH8GzYP0G9nt64kHg01PYzA5GDfs=)
                          22: qU_heo92V_7ktbIEU7O5a9lknfE.roa (hash: CB0hHmuh07mb6c1bZ7apzs3X1NptXEZeA9FKVZCoXgg=)
                          23: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: JfiePyZ1ywY+rNNg+Mp7QWvqvvbUgzJVQCpwTu51iz4=)
                          24: vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa (hash: KgFZjrNJ+4xk/AWdnTgN+umWyd65NfXlzGKus00+cNs=)
                          25: yK_rq1qKxY3NT-5pPsVf-TgWnNE.roa (hash: qAGiyOp7/gR0aIiRv19K1is+KEj839TVxinvG6Vn5jg=)
                          26: zajVd5Ts_bTh8-XMc1sBRZbd3Xg.roa (hash: QnbiOgy/Y+Wr7LieVKnfsD3uCN5eC35E6EWP56OL3+Q=)
                          27: zj5taZjjhdwiLqYv5pODda2Zbac.roa (hash: KiZrGb0dbN2vh+XlNRMzZClIBxdDlFw7IVjwNS6448E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:88:50:f5:0b:33:0b:b7:78:c3:90:1c:e7:f1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jan 25 08:00:51 2026 GMT
            Not After : Jan 26 08:00:51 2026 GMT
        Subject: CN=a42e0d300f4c0c26e5bceabdbfc802db33e09823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:9b:c2:61:27:aa:ed:11:12:c0:8e:1b:66:
                    07:47:8e:07:14:d0:f0:f6:7b:f8:5f:88:4f:59:82:
                    ee:ae:79:31:bb:96:69:2a:88:7d:02:38:bc:8b:cb:
                    52:c9:a8:66:2b:43:ef:66:da:d6:75:72:e9:ed:cf:
                    8f:9b:12:17:ac:52:d2:55:66:98:83:af:87:de:6c:
                    e6:66:6d:6e:ef:c1:81:b9:fa:f6:d5:98:2a:50:ca:
                    5d:ca:8a:b1:72:d7:d8:69:f0:f9:9a:70:70:b7:56:
                    82:eb:71:d1:d7:a4:ca:84:eb:a3:e8:eb:50:ab:26:
                    48:1c:3e:d1:8f:63:b5:66:ee:30:a6:cc:ab:7e:c7:
                    9b:70:ee:9a:32:f9:f8:39:7b:88:33:8c:e9:a3:24:
                    13:ea:e4:ed:56:f0:4f:2e:e7:4d:12:00:6a:52:f1:
                    dd:3f:00:36:86:0b:71:6c:fa:34:4f:ce:dd:72:b9:
                    45:29:7c:f0:50:4a:b1:9e:13:9c:91:d8:6d:f0:53:
                    93:f0:5a:73:f6:ba:81:4d:96:6f:8f:e0:8a:5b:e8:
                    42:5d:12:70:7c:6d:c3:b5:a1:a7:05:9f:05:10:21:
                    85:94:f3:f5:80:29:05:d1:c4:f5:c0:ba:3d:3b:d4:
                    14:20:9b:09:d3:27:21:7e:83:07:db:49:e8:7b:21:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2E:0D:30:0F:4C:0C:26:E5:BC:EA:BD:BF:C8:02:DB:33:E0:98:23
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:08:84:55:70:95:f7:53:86:de:42:ff:51:ac:87:20:bf:b5:
         40:0c:95:95:d4:25:8b:13:58:c7:07:ce:c8:c4:f9:0c:9b:ed:
         d3:65:92:64:51:2b:cf:23:7b:a8:be:a0:f1:0d:54:dd:56:62:
         f8:50:0c:21:a7:c0:dc:77:2f:ee:cf:62:a2:3d:e0:8c:de:b4:
         cf:1b:7f:5f:d2:08:00:7f:04:0e:ee:c6:0a:7d:d2:5a:43:f1:
         c1:47:f3:7c:bf:48:53:e0:3a:24:b7:43:70:f8:9e:1a:22:5c:
         da:73:f1:dd:a1:05:b9:58:1c:39:88:8a:32:09:c7:3f:57:48:
         a6:3d:77:94:c9:a7:f6:0c:03:a3:3a:ea:f3:4c:67:50:08:e3:
         c8:fa:d1:4c:20:e9:d3:c3:7d:73:61:5e:7a:95:a4:69:96:d7:
         91:f8:10:98:1c:7f:18:83:68:e2:78:83:8b:84:71:b1:e3:8b:
         48:93:c8:59:d1:7b:cc:de:77:77:3d:43:83:c6:a1:ac:64:cd:
         3b:e2:34:09:71:da:44:46:80:ac:b5:68:c3:6f:f9:9d:b8:3c:
         5e:b6:f9:0a:d4:2d:d2:7e:6e:fc:8b:db:93:dc:13:50:07:77:
         6a:02:a5:67:b3:ac:51:d6:3c:3c:5a:15:73:b6:da:55:71:bd:
         bb:7d:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:42:19 2026 by rpki-client