This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File:                     U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier:          jvDlDUU6/oVJm5B96XwQEtkr/cm0crV60aVT4WRQi50=
Subject key identifier:   FD:72:41:2D:3D:03:F1:93:A4:DF:5F:56:4C:88:AE:F3:0A:38:45:02
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer:       /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial:       019BF53E8A8B7CF43F95337D4A8F579ADBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number:          17F8
Signing time:             Sun 25 Jan 2026 13:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:15 +0000
Files and hashes:         1: 4T05fIk1IL5XmP-J7JePysAxRKE.roa (hash: CZTtj6ljL4ZrRColIvs5nHru+2r0m25Gxfk+juu8BnA=)
                          2: GIKwXPgpp9tYu44qAWsgouqavSk.roa (hash: U0ZjuWOGhkNCjwceAqeYAxKQDQUWsJyAsTBPjUkaiJM=)
                          3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: 8E2U2i3EA1GsCxJp+pQtrsuYxzftGiqPyvKZX+Ai1tU=)
                          4: _r56llLnHAPpXxxxkXq1tr0D3E8.roa (hash: GaXEko33otm3bGM4yo2EOeA4n0z4wsimGbz5tJkDlo0=)
                          5: hdiJUsn-mGkGSUlT1Hqx92eDVHA.roa (hash: LJKbx4az7vTER8ap7GuxbSzBoud2G6PQUC4oXRhpf84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:8a:8b:7c:f4:3f:95:33:7d:4a:8f:57:9a:db:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
        Validity
            Not Before: Jan 25 13:01:15 2026 GMT
            Not After : Jan 26 13:01:15 2026 GMT
        Subject: CN=fd72412d3d03f193a4df5f564c88aef30a384502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:60:63:87:ad:b2:82:62:50:ef:ec:9e:51:
                    78:52:2c:48:e2:c6:f9:6d:50:1f:32:09:c7:c1:6c:
                    1a:a4:da:00:54:a5:d3:9d:ed:99:12:c8:51:68:af:
                    51:7e:a7:99:dd:f1:ea:9b:37:71:94:39:a1:db:e6:
                    a3:ba:63:e1:75:73:d2:a1:a4:7d:1b:1b:ea:43:25:
                    fd:31:86:e5:ed:e3:c2:24:1d:e3:73:b1:71:8b:99:
                    2b:7d:6c:55:7f:8e:cf:7d:3c:55:29:e3:86:fd:30:
                    ed:e3:43:74:7f:8b:26:4d:b0:54:76:2d:3b:59:c0:
                    cb:7d:a1:d4:70:50:0f:e7:cf:4c:9c:22:ee:8f:2e:
                    e8:0f:fd:8d:16:c3:53:32:a1:be:91:65:3f:92:88:
                    45:89:f2:55:c2:e1:92:69:02:e0:47:20:b0:e9:43:
                    87:49:ec:69:ae:25:a9:11:08:bb:42:63:76:a9:d6:
                    47:a3:b0:43:31:5f:7f:20:cc:db:25:f8:57:8a:ea:
                    18:86:25:af:ca:bf:3a:57:13:44:3f:24:96:bb:46:
                    7b:c3:92:12:b2:cc:8c:ab:6e:b9:6d:bd:f7:53:4b:
                    d1:d2:b6:36:e2:ea:14:57:24:40:58:14:ab:25:ec:
                    69:4a:1f:21:56:fb:24:d2:68:3f:59:dc:41:b9:eb:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:41:2D:3D:03:F1:93:A4:DF:5F:56:4C:88:AE:F3:0A:38:45:02
            X509v3 Authority Key Identifier:
                keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a5:e9:7c:05:7f:65:8b:f6:d9:84:73:a7:7c:9d:ce:81:06:
         78:d8:93:2e:af:c6:f8:20:cd:a4:24:57:ba:9b:de:f0:be:c8:
         0b:cd:cf:d0:a9:e6:d6:39:57:90:4d:ab:ff:5e:3a:60:90:c4:
         56:63:73:50:4f:59:3d:f4:47:33:7b:1c:57:d5:8a:92:3e:34:
         4b:83:4b:75:46:d4:f8:7c:a4:4f:8a:b3:53:95:8b:02:ac:39:
         5f:25:02:4f:b0:b4:35:81:82:c0:bd:a4:f6:2c:f2:84:c4:af:
         b4:9f:3b:ba:41:a0:56:e8:7d:23:1d:e3:31:c1:53:fb:50:2c:
         6f:e4:1c:b2:23:cc:0b:ca:cd:72:0f:a5:54:b0:f3:54:db:93:
         e1:3a:8c:5b:34:e9:36:dd:d3:a5:39:1f:b4:47:4e:62:39:e1:
         ab:a8:8d:b7:65:fd:67:c6:c3:78:44:fc:45:42:f5:b7:fe:4e:
         aa:a6:20:e6:07:8b:00:0f:d2:7a:33:2e:6c:67:dc:28:13:74:
         4c:99:5e:2a:18:ff:c1:5f:86:ba:f7:38:78:57:d0:40:54:2b:
         f6:a7:78:9a:00:b9:69:c1:76:1b:87:37:aa:3f:7b:e2:b3:57:
         45:a8:0c:d2:b0:55:22:62:71:a2:a5:78:a1:4a:e0:89:d5:57:
         8c:d4:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:20 2026 by rpki-client