This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
File:                     uBcWKHfan0Awu8uf6KwUPmqyhxs.mft (raw, json)
Hash identifier:          MpBB8eUulfQOp7hgct+eUw+Hd7APQtHjT0ZdG4PgW5g=
Subject key identifier:   A4:10:FA:B8:12:01:A8:16:4E:03:96:1E:DD:5E:50:69:21:4B:88:6A
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Certificate issuer:       /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial:       019BF5ABD14877CA941B5AEB381C84DF78F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
Manifest number:          1673
Signing time:             Sun 25 Jan 2026 15:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:36 +0000
Files and hashes:         1: 2WXoZsn32fgVX8aqYMrc08d9fY8.roa (hash: bkwPNVH2ORQnIRn5LBtVmwQryOqVX18kB3tiu7t2/40=)
                          2: D48UgkokE1vhCTwhPkqZ0LLoocA.roa (hash: fMJLF+vFo9vEbRLFDDkPD4SnqGkEa/lJe6CpbUSG9eQ=)
                          3: PEnbwEnEOUP5a1qMbrFIPU4NOkU.roa (hash: CnUSPKXJdJobJ8CN6jHtjZLTtAxSZjk1/h8PvReUstg=)
                          4: sDmZmF3fo3gdZLDEv2WCfsdt6Z8.roa (hash: EiTHbukI/Tpn+Gtw5R4ZOGfo0HNyDTx7rIEuV9YoQNo=)
                          5: uBcWKHfan0Awu8uf6KwUPmqyhxs.crl (hash: 4h/z0ylMHVHtVmhB3Z58sLTVnmndZ3czkZ+syoJbG4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:d1:48:77:ca:94:1b:5a:eb:38:1c:84:df:78:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
        Validity
            Not Before: Jan 25 15:00:36 2026 GMT
            Not After : Jan 26 15:00:36 2026 GMT
        Subject: CN=a410fab81201a8164e03961edd5e5069214b886a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:db:36:f4:ae:6b:f7:b4:5c:43:62:02:22:
                    d4:8d:f8:0c:05:e5:df:e7:61:6e:1b:21:be:de:e3:
                    84:f3:d7:de:e1:8f:81:75:d3:55:9d:25:2e:14:7d:
                    d8:52:b8:f5:d6:69:ef:0a:bb:90:50:f7:e3:39:f8:
                    b6:7a:7b:5e:40:c7:45:f0:8a:fc:fa:85:be:20:ca:
                    ab:ab:1b:fe:cb:88:8f:94:0c:17:cd:71:4c:30:99:
                    c8:cd:f4:5a:68:11:e5:42:5d:42:4b:70:dc:51:fb:
                    11:a4:b8:5b:36:70:76:26:dd:24:d5:f0:a4:00:91:
                    38:46:42:d0:11:e1:15:ae:e6:5b:ac:93:b5:e9:9a:
                    3a:8e:92:be:81:94:c8:5d:a0:aa:2a:56:31:d0:17:
                    d2:de:c6:3d:c7:df:ce:bf:39:58:43:d3:27:e0:e2:
                    36:11:62:8e:52:1c:6e:f7:67:94:22:07:f6:1a:94:
                    3d:7a:f3:20:04:d3:45:fd:25:bd:e7:4c:e1:78:32:
                    9f:a3:cc:75:92:de:6c:95:a2:eb:77:db:f8:50:20:
                    6a:1d:57:1c:04:da:cf:16:87:e7:9d:60:df:2d:7f:
                    f8:43:e9:63:ec:7e:8a:cd:f0:0e:f5:68:59:a6:f9:
                    9c:a6:ff:57:c1:90:29:e9:33:d1:f3:11:b1:a8:f2:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:10:FA:B8:12:01:A8:16:4E:03:96:1E:DD:5E:50:69:21:4B:88:6A
            X509v3 Authority Key Identifier:
                keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:2c:04:8a:8d:82:67:9a:48:00:34:60:9d:84:9e:44:ac:
         59:2b:da:c5:e2:e8:89:6b:f1:01:cf:d1:ad:92:75:e7:2e:7a:
         23:7e:77:30:64:d5:8b:ab:b6:b5:26:db:2d:11:e9:7c:db:47:
         29:a4:ec:0f:00:eb:89:dd:01:c7:8a:e2:5e:12:d1:4d:9b:78:
         71:71:f3:54:a6:41:ac:f8:96:fc:13:b3:28:2d:17:41:3b:39:
         fb:2b:3c:26:04:4e:62:77:6f:b4:72:2e:1d:0f:e1:6d:80:3e:
         d0:e4:61:82:21:5c:32:12:05:7e:d3:78:43:4d:b4:f3:11:74:
         ed:ff:85:9d:e3:66:56:dd:00:b5:f7:e3:50:d7:35:e5:b2:04:
         95:22:9c:c7:8a:ca:a5:21:58:cc:94:c4:cf:61:1a:f2:43:34:
         b9:ba:80:c1:d9:1a:4f:c5:b4:bc:a6:17:48:06:51:38:dc:b2:
         3e:0f:33:fd:06:9a:47:4f:09:a4:37:c6:cf:12:38:a3:68:72:
         c5:3b:70:ba:9a:6e:10:33:cd:73:2c:de:68:20:05:3e:9e:98:
         26:86:e1:d9:37:8c:a6:3a:cb:56:b3:e4:ca:e3:55:4a:0a:33:
         12:51:ff:b3:73:dc:ab:0b:ae:b2:a4:19:18:d6:13:41:d8:74:
         9a:12:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:43 2026 by rpki-client