This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
File:                     UTTRMgZFZE4urzaFh51pP3JSLHY.mft (raw, json)
Hash identifier:          l/MslFqZQ6vERJ2iEz5xfBfGbFo9Yk1/UrgCXXtTjsA=
Subject key identifier:   A0:6D:CE:3F:6F:45:F2:37:AD:00:2E:D6:1D:FD:9E:EE:9E:C8:2A:C0
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Certificate issuer:       /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial:       019BF619E031C85516843D0B627F7D872F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
Manifest number:          15D2
Signing time:             Sun 25 Jan 2026 17:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:49 +0000
Files and hashes:         1: GpAYSqSBnbVI2jkqmZjF4cqN00c.roa (hash: watcT2RtTX9xWmhyi/0Z0eqDamt+a0rTkZyma9vwbuw=)
                          2: UTTRMgZFZE4urzaFh51pP3JSLHY.crl (hash: T2DMtzUcfAICNg36uqJD22lOrQg8MAO+VE8OV8hyDHc=)
                          3: gmjG60yO-dM5NBY95RTYVC92dCU.roa (hash: dL9a0J4WqVdYe7nzF2w3AJROlcgyQJx3wd5YtcwcZ6U=)
                          4: n11sLe7Mij0tIk_cwXwqcrYI4nE.roa (hash: mIg+KoW9zx0USKuS5S4U3XDpJKvtCU9K4ikguJjTQms=)
                          5: wyt5ptFXgbMrupCNzfQ3MMlFH4M.roa (hash: wsSbFZeuuJRkMGSymeRGA6zSq6ntn49Ubzt9NPIc7xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:e0:31:c8:55:16:84:3d:0b:62:7f:7d:87:2f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
        Validity
            Not Before: Jan 25 17:00:49 2026 GMT
            Not After : Jan 26 17:00:49 2026 GMT
        Subject: CN=a06dce3f6f45f237ad002ed61dfd9eee9ec82ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:18:95:53:14:09:72:0e:a1:5d:dd:4a:cd:33:
                    9f:7f:ec:b1:73:54:fc:2c:70:0e:19:32:e0:bf:e1:
                    5e:b4:8f:72:eb:c0:cb:90:d8:24:f5:47:7b:de:a3:
                    ef:b4:25:8a:6d:76:ec:72:6e:52:1b:f5:ea:ea:f4:
                    b5:c1:c5:37:f6:70:c2:c8:de:27:8a:23:d2:4d:5f:
                    af:4d:68:bb:e4:52:34:db:ba:da:3d:41:03:d0:0e:
                    5d:f1:a1:a1:f3:86:8a:a5:84:ae:f9:53:9f:e5:78:
                    d6:47:97:5a:c3:87:0c:a6:83:73:75:cc:c6:fe:8c:
                    e4:e7:23:cf:b9:0a:9f:4c:2c:69:9a:f6:fb:fb:87:
                    c8:a1:c1:81:83:a2:d4:69:5c:77:17:67:57:68:cd:
                    c1:a4:50:21:52:a0:d0:57:f2:e9:4b:88:c6:e8:95:
                    ca:bc:f6:16:d2:54:6d:37:b4:4d:dc:ac:64:ea:7d:
                    fa:8c:7f:3b:0d:34:3f:39:20:28:9f:f0:6e:e6:f7:
                    30:b2:b7:d1:da:15:27:5d:b2:82:74:07:c1:5d:e3:
                    59:03:67:e3:15:61:b3:05:0f:0b:e0:48:60:b3:9c:
                    7b:34:1f:17:ac:50:73:b8:b3:f0:f8:a0:da:3c:1f:
                    fb:c7:5e:f6:10:85:0f:19:87:da:d2:4a:7d:03:54:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6D:CE:3F:6F:45:F2:37:AD:00:2E:D6:1D:FD:9E:EE:9E:C8:2A:C0
            X509v3 Authority Key Identifier:
                keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5f:ce:9f:77:b1:90:f5:c2:4f:14:6f:fd:66:0c:8c:60:38:
         b6:65:33:77:31:45:7b:1d:38:f6:8c:2b:70:db:69:ae:86:11:
         f4:be:b9:30:2e:32:58:e8:83:a8:bb:74:4d:d9:7c:fe:d4:09:
         2e:de:b4:0d:fb:ae:f9:9f:32:cc:6d:f3:bf:dc:fa:ca:ba:ba:
         fe:8f:a0:fb:af:33:87:15:98:53:78:75:58:c6:fa:68:34:b0:
         e3:5a:2b:0e:dc:9a:b4:f6:aa:a7:fd:78:57:46:76:b3:36:05:
         aa:65:8b:60:fb:60:5a:3f:53:2e:e1:d2:cd:b4:be:9b:c1:88:
         76:67:fb:3f:de:f9:16:79:52:08:5f:4c:18:07:34:1f:ad:ed:
         e7:d6:bd:a7:45:96:d3:94:d0:09:73:d4:18:25:25:ad:55:19:
         47:88:74:c5:07:4f:c6:fd:3e:e0:af:fa:a5:1a:cb:3d:78:52:
         4f:e4:4e:3f:26:3d:a3:5a:1e:fd:b2:88:eb:e7:13:4f:cc:74:
         83:c7:8c:bb:3c:b8:4d:e3:39:cd:4a:19:e7:e7:60:af:53:3c:
         26:40:6f:4d:b1:0a:6b:4b:7b:02:33:93:37:74:bf:79:fa:6c:
         ec:cb:d5:3f:53:00:15:4f:72:39:34:45:8e:9b:11:33:ba:01:
         4f:86:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:41 2026 by rpki-client