This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File:                     cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier:          ZCNKnaLm/r1yFTH3wyyiaxfBwB12Hz1yJiTYQ7j0W9A=
Subject key identifier:   AD:C6:84:98:C2:CA:D9:32:10:D6:DD:57:4A:5C:48:84:06:1B:58:AF
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer:       /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial:       019BF2E2A11D07049E9A9719ECBB6D4776E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number:          C7
Signing time:             Sun 25 Jan 2026 02:01:37 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:37 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:37 +0000
Files and hashes:         1: 1y5lvBRirf64QUUNUs-wPlahoEo.roa (hash: LhMcKD7g9vzXQej5bGx62E/rTFGZbxyNoCRC/nLvA8U=)
                          2: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (hash: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY=)
                          3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: 3q+KHBs/pMakFraSghVH3nCzFtOGK5ecUa6bFostUL0=)
                          4: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (hash: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:a1:1d:07:04:9e:9a:97:19:ec:bb:6d:47:76:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
        Validity
            Not Before: Jan 25 02:01:37 2026 GMT
            Not After : Jan 26 02:01:37 2026 GMT
        Subject: CN=adc68498c2cad93210d6dd574a5c4884061b58af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:4b:c2:d0:2c:15:ca:49:74:1b:18:00:a2:
                    73:19:bb:d3:1a:42:9f:4b:f0:a2:cf:63:3a:7f:9a:
                    c0:ed:5c:29:1a:8d:c2:ff:41:60:7b:94:e7:1c:50:
                    b3:2c:bc:88:c9:06:68:8e:4f:b9:4c:be:2c:b1:4c:
                    72:fc:db:d4:8d:d8:c0:a6:f1:69:56:59:39:b9:09:
                    e6:12:63:cb:26:ba:1a:bb:47:9f:76:70:84:28:52:
                    93:3c:32:d6:dd:2a:e2:35:b2:b4:10:65:61:f1:53:
                    9c:6f:62:dd:1b:0f:63:30:47:1b:a5:ce:ad:03:f7:
                    f0:e8:16:49:e6:bb:be:ec:7d:4a:2b:8d:a7:98:12:
                    08:d0:2f:29:8d:90:62:24:e8:7f:a1:b9:09:c6:b0:
                    03:9c:ee:69:af:55:ce:ee:b3:95:db:f5:f1:4f:e3:
                    6b:13:06:a1:be:67:9e:6a:30:5a:e7:a3:c4:c1:bb:
                    04:bb:ba:c0:a4:96:cf:f2:f6:ec:2e:84:9d:d8:b4:
                    ed:49:5b:93:6d:89:90:1d:57:47:f1:4b:ca:c0:87:
                    04:c7:9b:c4:78:f1:14:29:e2:5d:c9:59:60:0c:42:
                    3d:95:94:cf:38:a9:86:ba:91:1b:4e:bb:24:18:9d:
                    0c:cc:37:07:06:54:00:da:65:47:44:c7:16:3d:f1:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:84:98:C2:CA:D9:32:10:D6:DD:57:4A:5C:48:84:06:1B:58:AF
            X509v3 Authority Key Identifier:
                keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:30:78:c4:f2:58:b8:0d:34:7c:8b:30:56:1b:f2:dd:9b:e3:
         27:c5:d6:b0:84:e8:3a:3c:8a:47:8e:cd:43:4e:4c:94:e3:f0:
         1f:f8:0b:eb:0f:6b:20:9c:d4:b0:c8:a5:6b:45:15:42:ef:be:
         3f:74:f4:6a:84:04:e2:52:2b:41:0a:d7:af:92:8d:19:27:14:
         b9:fc:28:99:24:c7:ee:11:63:f1:6a:ed:1c:15:26:58:b6:3c:
         6f:11:e1:aa:19:d4:6c:3b:86:3f:6f:0b:9e:0c:6c:49:3d:47:
         8a:0d:63:fc:2d:a3:eb:a7:c6:4a:af:bc:bb:b1:23:8e:62:06:
         de:b0:ae:19:9d:9d:d6:01:9f:33:3a:3e:a0:22:62:5e:e6:ce:
         bd:15:69:73:bf:14:70:62:61:87:10:c7:43:6e:be:cd:8c:50:
         97:78:77:dd:b5:46:72:be:aa:c8:6b:c2:79:4c:fa:3c:8a:61:
         7b:e8:ec:58:54:b3:88:bf:b6:cb:3a:61:10:e6:ff:a2:10:42:
         54:16:46:d0:39:fa:e3:e7:92:b0:04:58:08:0c:f6:8f:8d:38:
         5d:00:59:bd:c7:30:9c:8b:c7:f1:fe:5a:8f:db:43:94:1c:2f:
         58:a2:25:fb:11:a5:6e:70:9b:4a:da:3d:29:cd:75:5a:a2:f8:
         3b:0a:9e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4qEdBwSempcZ7LttR3boMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0
NzgwMDgwHhcNMjYwMTI1MDIwMTM3WhcNMjYwMTI2MDIwMTM3WjAzMTEwLwYDVQQD
EyhhZGM2ODQ5OGMyY2FkOTMyMTBkNmRkNTc0YTVjNDg4NDA2MWI1OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6NLwtAsFcpJdBsYAKJzGbvTGkKf
S/Ciz2M6f5rA7VwpGo3C/0Fge5TnHFCzLLyIyQZojk+5TL4ssUxy/NvUjdjApvFp
Vlk5uQnmEmPLJroau0efdnCEKFKTPDLW3SriNbK0EGVh8VOcb2LdGw9jMEcbpc6t
A/fw6BZJ5ru+7H1KK42nmBII0C8pjZBiJOh/obkJxrADnO5pr1XO7rOV2/XxT+Nr
EwahvmeeajBa56PEwbsEu7rApJbP8vbsLoSd2LTtSVuTbYmQHVdH8UvKwIcEx5vE
ePEUKeJdyVlgDEI9lZTPOKmGupEbTrskGJ0MzDcHBlQA2mVHRMcWPfFA3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3GhJjCytkyENbdV0pcSIQGG1ivMB8GA1UdIwQY
MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt
YzlmN2MwZTdhY2M2LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2
LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjB4xPJY
uA00fIswVhvy3ZvjJ8XWsIToOjyKR47NQ05MlOPwH/gL6w9rIJzUsMila0UVQu++
P3T0aoQE4lIrQQrXr5KNGScUufwomSTH7hFj8WrtHBUmWLY8bxHhqhnUbDuGP28L
ngxsST1Hig1j/C2j66fGSq+8u7EjjmIG3rCuGZ2d1gGfMzo+oCJiXubOvRVpc78U
cGJhhxDHQ26+zYxQl3h33bVGcr6qyGvCeUz6PIphe+jsWFSziL+2yzphEOb/ohBC
VBZG0Dn64+eSsARYCAz2j404XQBZvccwnIvH8f5aj9tDlBwvWKIl+xGlbnCbSto9
Kc11WqL4Owqeig==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:02 2026 by rpki-client