This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File:                     uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier:          CBIPlrHazBMfdjEVE2+pf0Pnzu9/JXi0v/a9nH+4+TY=
Subject key identifier:   77:06:9F:FF:BE:42:E9:42:7E:54:1E:C3:E3:98:9F:35:3E:27:AD:0D
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer:       /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial:       019BF42B7CB547D21E4419D4E5B07DEE2C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number:          0FF3
Signing time:             Sun 25 Jan 2026 08:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:49 +0000
Files and hashes:         1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
                          2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
                          3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
                          4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: kVuVX/ukRTUnGKIP0ySEECst6dRPSgCD+5Ss+fpPi8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:7c:b5:47:d2:1e:44:19:d4:e5:b0:7d:ee:2c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
        Validity
            Not Before: Jan 25 08:00:49 2026 GMT
            Not After : Jan 26 08:00:49 2026 GMT
        Subject: CN=77069fffbe42e9427e541ec3e3989f353e27ad0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:0f:79:3f:3d:47:27:fb:2f:46:d4:78:79:
                    d7:81:5a:d7:26:f0:2c:9c:c1:ea:12:5e:c4:fe:17:
                    04:4b:9f:99:ad:4e:0d:77:bc:84:1b:a7:b2:35:26:
                    8a:0e:5f:d7:1e:6a:83:8f:c0:5f:af:b4:70:70:48:
                    d8:4d:b6:5d:1d:ef:78:3f:5b:30:2c:80:ce:17:e7:
                    3d:85:98:d6:64:b5:0a:4e:de:99:89:63:5f:4f:61:
                    9c:54:2c:6e:4c:ad:bb:1b:eb:88:36:aa:8a:c0:c1:
                    24:a0:f3:74:53:81:82:7b:87:dd:e0:d1:d8:b3:30:
                    cc:30:d3:b2:76:ae:f2:5b:a6:c8:5a:99:1c:f8:df:
                    f3:3e:08:43:4e:b9:7c:24:c3:94:d4:a5:83:e1:28:
                    77:7f:2d:58:fe:f8:5e:36:6b:7e:8b:33:20:9e:5a:
                    b2:62:19:36:e9:9f:07:f4:8c:f1:2c:0b:fe:49:20:
                    d4:2a:b5:ab:f9:5a:1d:68:ee:1a:f7:a5:ec:a0:41:
                    d4:3f:26:3e:61:1b:22:e4:85:33:c0:d9:31:77:1a:
                    14:61:f5:9c:96:2c:03:76:8f:56:08:9e:27:fd:da:
                    f4:a0:26:34:09:0c:b5:68:0f:15:b9:1c:3c:c6:ae:
                    5b:17:c1:55:b6:15:39:1e:16:bb:fb:33:01:f8:4a:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:06:9F:FF:BE:42:E9:42:7E:54:1E:C3:E3:98:9F:35:3E:27:AD:0D
            X509v3 Authority Key Identifier:
                keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3e:ef:f8:3e:cb:5a:1c:5f:3f:40:af:55:65:66:9b:35:80:
         26:6d:d9:61:91:c3:57:2e:0c:19:21:42:cb:cf:f2:4e:38:bf:
         6e:24:3f:d7:19:04:94:bb:4e:76:67:d9:aa:fe:0d:f4:4d:01:
         43:65:a0:1a:d6:0c:63:93:93:d2:06:24:76:ba:99:c0:20:b5:
         e4:40:50:42:95:a8:f6:79:e2:49:7d:9f:51:4f:18:fc:1c:8d:
         dc:d3:85:34:37:d8:c6:2e:22:a1:fe:ed:f6:5a:44:20:2f:9f:
         f3:61:22:10:46:cc:87:2b:07:36:96:62:d3:6c:5b:3d:20:b9:
         7b:23:41:f6:77:85:60:4b:bd:ec:9b:06:25:b7:f0:52:c7:66:
         de:37:bf:c0:b7:a4:82:04:9c:dc:65:47:dc:c3:96:46:9d:a4:
         f4:06:27:e1:5c:c3:cc:f6:6c:d2:a4:6b:fa:aa:08:38:c7:87:
         6a:c8:12:6a:7e:2d:a5:d0:b0:9e:df:9f:84:82:53:20:2c:a4:
         7a:26:34:01:f8:d0:24:58:1a:34:65:c8:30:33:82:cd:f8:1a:
         0b:43:0e:28:c6:3f:c2:01:88:63:dd:f2:2d:70:07:4f:38:a0:
         3f:97:e3:c3:84:95:9b:d6:98:97:ad:34:a5:cb:83:01:e3:e8:
         c8:98:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:14:24 2026 by rpki-client