This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File:                     UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier:          N6GJRKfPutGmtI8F9+SKr8O3XdE9Mz30ltBORABJRPs=
Subject key identifier:   FE:7E:C6:59:97:E2:2E:1D:8E:43:E6:B9:7E:C3:14:00:49:8D:1A:BA
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer:       /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial:       019BF763369665785A11575AB14A98346DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number:          0AA3
Signing time:             Sun 25 Jan 2026 23:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:32 +0000
Files and hashes:         1: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: CRFNLESWG4JxtJ6CkfdqGtt2oMK4ngcjVg0IwnkeCXc=)
                          2: oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa (hash: 4HJuj+rF75MFgy3hHG2f3m8rThIv9PhuU60sXijKG80=)
                          3: vwvW1Ad1jPnRXRdjbJDp97AR8iQ.roa (hash: rHp1bLQ38wfktmQvruIWIEUStakR7R1FCh+zLkjl1H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:36:96:65:78:5a:11:57:5a:b1:4a:98:34:6d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
        Validity
            Not Before: Jan 25 23:00:32 2026 GMT
            Not After : Jan 26 23:00:32 2026 GMT
        Subject: CN=fe7ec65997e22e1d8e43e6b97ec31400498d1aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:09:74:3c:30:e2:20:2d:60:5c:49:e5:ef:
                    db:d4:bd:c1:b7:9a:ac:9d:7f:ee:26:3a:39:f5:8a:
                    8d:e7:5d:5a:17:52:95:03:e6:17:11:1a:19:b8:ef:
                    0e:0f:f7:f7:7a:1c:7b:65:9a:08:30:5d:25:08:b1:
                    3f:32:a6:b8:af:67:72:09:ea:18:6b:b0:af:3b:1c:
                    21:69:39:e0:3f:fb:5c:dd:ad:87:ea:0b:c5:20:4c:
                    e2:ef:b9:e2:89:7e:6a:f1:86:bb:b8:ad:4a:66:90:
                    81:b7:dc:1f:e2:6b:3d:b5:2c:02:f1:f4:c8:17:c1:
                    1f:ce:eb:30:c5:2f:4c:06:13:94:31:f4:13:43:7e:
                    8e:4d:c7:7c:77:3b:ea:0f:b6:d1:27:5e:19:3f:62:
                    72:9d:3d:20:80:77:5f:ef:d5:eb:79:42:ae:20:c1:
                    8f:5b:93:7b:c0:f2:76:06:04:fc:89:99:0c:14:9e:
                    30:8e:bd:b0:3b:2b:c1:47:73:bf:a7:29:9a:a9:e3:
                    55:0f:78:9a:53:e8:e9:da:a6:7a:75:dd:10:ac:66:
                    e6:bb:6b:d0:7c:ac:c1:30:05:ca:d2:b1:85:8c:b0:
                    12:e0:ea:57:3f:30:f0:02:7d:22:d5:3b:93:37:7a:
                    38:ea:5b:5c:42:aa:9f:36:99:23:eb:84:c1:0b:92:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7E:C6:59:97:E2:2E:1D:8E:43:E6:B9:7E:C3:14:00:49:8D:1A:BA
            X509v3 Authority Key Identifier:
                keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:13:9c:f2:22:7f:a5:f9:59:74:37:81:40:36:0b:a8:5b:50:
         07:1a:a3:00:fe:db:05:7f:89:c2:d7:d3:49:1f:29:7f:db:c2:
         de:6e:df:f8:51:5d:53:2b:2a:a1:c8:bd:12:75:f0:b3:0a:d7:
         31:b0:7f:f2:fd:99:98:a0:0e:f9:5e:72:d7:68:67:51:0b:4f:
         85:b1:24:02:6c:fc:e4:20:3a:f8:98:2f:5f:73:ce:7e:f4:45:
         88:a5:3e:d1:53:60:31:b8:09:46:70:70:cc:de:9c:4f:01:18:
         ee:94:d2:5e:68:dd:54:3a:ec:94:a6:38:98:c9:d9:87:95:79:
         eb:d0:ae:42:e8:67:0d:9f:dd:f8:80:dc:ea:f8:38:7f:75:eb:
         16:da:6d:19:96:11:e8:63:ca:95:49:9b:c6:67:22:1e:df:3e:
         b3:11:d7:b6:b4:4e:ee:57:0d:e3:df:d0:b0:72:b6:0c:b2:7d:
         73:44:34:ea:e1:f8:17:8b:30:8f:3f:f2:cd:5e:47:aa:d0:d7:
         c5:39:4a:31:2b:a4:00:bd:3b:7d:6c:e9:3b:04:2b:ab:01:da:
         20:24:d3:e1:b3:79:9c:f8:d2:f5:f9:ca:ee:9d:da:e9:92:98:
         18:d1:8f:d4:52:f2:d5:d7:e4:dc:63:21:4d:46:df:6a:24:f8:
         33:45:b4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3YzaWZXhaEVdasUqYNG34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwN2U1ODJhZGM5MzY5ZGE4YWU4NWRkOTM1NzQwMTIzMDgx
YzdlZWQwHhcNMjYwMTI1MjMwMDMyWhcNMjYwMTI2MjMwMDMyWjAzMTEwLwYDVQQD
EyhmZTdlYzY1OTk3ZTIyZTFkOGU0M2U2Yjk3ZWMzMTQwMDQ5OGQxYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOAJdDww4iAtYFxJ5e/b1L3Bt5qs
nX/uJjo59YqN511aF1KVA+YXERoZuO8OD/f3ehx7ZZoIMF0lCLE/Mqa4r2dyCeoY
a7CvOxwhaTngP/tc3a2H6gvFIEzi77niiX5q8Ya7uK1KZpCBt9wf4ms9tSwC8fTI
F8EfzuswxS9MBhOUMfQTQ36OTcd8dzvqD7bRJ14ZP2JynT0ggHdf79XreUKuIMGP
W5N7wPJ2BgT8iZkMFJ4wjr2wOyvBR3O/pymaqeNVD3iaU+jp2qZ6dd0QrGbmu2vQ
fKzBMAXK0rGFjLAS4OpXPzDwAn0i1TuTN3o46ltcQqqfNpkj64TBC5Lc6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5+xlmX4i4djkPmuX7DFABJjRq6MB8GA1UdIwQY
MBaAFFB+WCrck2naiuhd2TV0ASMIHH7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMt
MDU2YmFlMjcyODhlLzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMtMDU2YmFlMjcyODhl
LzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxOc8iJ/
pflZdDeBQDYLqFtQBxqjAP7bBX+JwtfTSR8pf9vC3m7f+FFdUysqoci9EnXwswrX
MbB/8v2ZmKAO+V5y12hnUQtPhbEkAmz85CA6+JgvX3POfvRFiKU+0VNgMbgJRnBw
zN6cTwEY7pTSXmjdVDrslKY4mMnZh5V569CuQuhnDZ/d+IDc6vg4f3XrFtptGZYR
6GPKlUmbxmciHt8+sxHXtrRO7lcN49/QsHK2DLJ9c0Q06uH4F4swjz/yzV5HqtDX
xTlKMSukAL07fWzpOwQrqwHaICTT4bN5nPjS9fnK7p3a6ZKYGNGP1FLy1dfk3GMh
TUbfaiT4M0W0Xg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:12:58 2026 by rpki-client