This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File:                     uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier:          yuiaCF0lITOPQriPpanIGJUE762JUdAPoCIbRogpUgg=
Subject key identifier:   D8:C3:62:1E:2A:AC:9E:E4:82:9F:9A:E8:50:D2:66:DC:F6:C4:C6:F2
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer:       /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial:       019BF8087032D568BEDA9E97B8EB44615761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number:          06DA
Signing time:             Mon 26 Jan 2026 02:01:01 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:01 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:01 +0000
Files and hashes:         1: 4zHjTJievMCXjs1MUKZY0zgnlZk.roa (hash: jFjIAWns9tkVOTNAS5iBg9kuu8j0fEnt1irbpmfUxy4=)
                          2: QRfdDVkt_h3uZi2qFgrq9ytk9NM.roa (hash: kVt/mkZ/E59+3oUc66185qlzg7hwnqUaLl1xxhgP/VQ=)
                          3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: ghHze/1CLwhuX3rgbFupUdHKL3Naibkbsm8bbnybOKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:70:32:d5:68:be:da:9e:97:b8:eb:44:61:57:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
        Validity
            Not Before: Jan 26 02:01:01 2026 GMT
            Not After : Jan 27 02:01:01 2026 GMT
        Subject: CN=d8c3621e2aac9ee4829f9ae850d266dcf6c4c6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:ef:63:cc:30:6c:b3:14:62:bb:66:7a:39:
                    d4:46:2b:b5:dd:c0:18:b2:58:08:a1:69:fb:e2:92:
                    11:0f:18:9a:d3:f8:b8:5c:4c:08:5e:56:7f:e3:b2:
                    aa:93:67:3d:ba:e8:d6:87:18:6c:dd:24:45:b2:af:
                    c0:38:0c:59:de:6b:ce:1a:a6:30:a4:34:36:66:1e:
                    0d:32:f4:33:f9:f6:0d:18:5d:ae:cd:7a:ea:0d:e6:
                    09:d3:9a:a6:ba:dc:7e:6f:85:a5:c8:58:fe:a2:63:
                    6a:eb:97:96:11:e3:56:31:99:58:6e:af:21:f3:19:
                    89:17:95:34:37:b3:7a:7f:b4:65:f6:07:96:e0:e3:
                    2d:63:8b:7f:3d:ba:f7:f7:c8:39:fe:45:f9:7a:32:
                    35:0f:c5:7e:13:c4:4b:0d:02:c1:d6:ff:b8:24:09:
                    10:48:96:cc:63:76:50:ab:cc:1e:75:0d:04:6d:db:
                    3a:1b:26:7e:15:d0:9e:5f:e6:16:7e:de:7e:47:78:
                    08:cc:dd:e1:18:c6:22:6d:1c:b8:2b:74:57:48:f1:
                    9a:98:d4:f7:b0:f3:8d:1b:2b:d3:ce:95:37:6d:39:
                    16:33:43:85:33:39:e1:d4:9e:22:75:58:e2:1c:b9:
                    3d:bb:c5:6f:19:bb:90:93:82:70:31:82:fb:5b:c2:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:62:1E:2A:AC:9E:E4:82:9F:9A:E8:50:D2:66:DC:F6:C4:C6:F2
            X509v3 Authority Key Identifier:
                keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:5b:f3:24:6c:f0:56:b7:54:7f:07:a4:20:d3:32:b3:8a:fa:
         24:0e:88:6e:ba:8d:14:d7:bb:85:ab:b7:1b:56:0d:55:8d:d0:
         83:0b:37:24:25:a3:81:bd:02:86:8e:af:06:bd:2e:72:23:9a:
         c8:f8:6e:8a:78:a5:d5:02:9d:e9:8d:9d:a9:18:f5:a7:9e:b0:
         88:89:75:fa:3a:52:de:70:ba:cb:93:56:34:45:8e:5a:d5:94:
         a3:c0:e8:83:a0:f1:d8:c2:ed:f7:b4:c1:a0:d8:68:f7:86:38:
         20:ec:63:93:26:1e:7f:61:41:5e:10:51:5c:f8:33:6e:ec:af:
         8d:d6:1c:4d:c1:05:af:81:f8:e1:8b:fa:ba:cc:a6:ad:f8:7f:
         ba:1c:f9:50:89:c7:ce:49:50:7d:72:38:21:89:15:bf:2d:79:
         62:55:41:f8:da:bc:57:ef:86:33:06:dd:d1:0e:d6:08:a5:0a:
         a6:1f:17:99:28:60:4b:9f:d5:cf:94:53:cf:54:af:34:31:d1:
         8e:92:60:22:ec:cd:a7:51:f2:21:38:19:77:3f:0f:8f:97:f7:
         cf:5c:57:3d:1f:43:a2:a7:89:7f:0f:66:5e:2f:79:a7:43:53:
         86:ba:8d:aa:d4:43:a8:1a:ce:fd:93:62:c2:e6:54:78:d4:1c:
         9f:fa:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:20 2026 by rpki-client