This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File:                     U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier:          /DucTqVeCyjWG7N4JDKYehx58u9Skq/WsZyDiL24guA=
Subject key identifier:   A3:E0:7B:92:70:6F:39:D0:B9:EB:F0:CD:7B:CD:7B:FC:00:C3:32:BE
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer:       /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial:       019BF65133B04979CF978373182A9A58529A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number:          06D0
Signing time:             Sun 25 Jan 2026 18:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:15 +0000
Files and hashes:         1: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: 588dCB+ny+FEeel1YfmSkuugJwoW3MjVwfajpCK4/pA=)
                          2: dYKJcrjXuTpS6_7bUiBb2osa674.roa (hash: wfR3v7wfu8CdCj0DaXJsMGWbP8IlPqI3MSKZ+73rZNw=)
                          3: wgPEXzOb8kcqeH0Gh05uACqdrFQ.roa (hash: iNHYhiuIOvx+WnYo71O2iLGhS7LwuKNxzeVE0KBxbXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:33:b0:49:79:cf:97:83:73:18:2a:9a:58:52:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
        Validity
            Not Before: Jan 25 18:01:15 2026 GMT
            Not After : Jan 26 18:01:15 2026 GMT
        Subject: CN=a3e07b92706f39d0b9ebf0cd7bcd7bfc00c332be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:89:68:e6:0c:35:ff:3f:67:26:b5:51:85:
                    64:9b:19:3d:70:8e:7a:2c:76:51:de:b8:51:80:1d:
                    e8:cb:7d:44:6a:70:e5:22:38:26:d6:65:7e:45:6d:
                    04:a7:22:f1:82:f3:04:09:81:2c:f0:c1:99:08:7d:
                    7a:90:db:a6:92:43:64:57:7c:fa:96:ce:a0:e3:4a:
                    c1:ea:6a:2f:71:9d:0b:77:67:b6:65:6a:62:c6:0a:
                    48:92:6d:c3:83:a1:74:b7:da:30:08:e9:39:db:02:
                    de:9e:ee:92:17:ce:78:f9:fc:f1:58:58:cd:d9:ed:
                    5f:61:c0:35:6a:04:88:03:89:1a:a0:06:30:6c:61:
                    05:1d:60:dc:b7:15:53:63:28:d1:06:08:40:44:d8:
                    0a:62:76:64:d1:a7:e8:4b:54:28:ff:53:ae:6c:a2:
                    ba:28:d6:50:60:66:e1:dc:51:80:cf:99:4c:63:c9:
                    69:02:e3:79:d2:71:86:75:da:9c:cb:ab:9c:36:7e:
                    df:8e:63:59:1d:bc:66:76:26:b2:43:ce:92:65:52:
                    a0:9b:ee:ce:3b:31:8c:14:57:5d:31:80:18:95:81:
                    12:39:04:61:c4:59:3c:f3:99:43:ed:43:cd:ec:1e:
                    26:18:7b:a2:28:10:e8:6d:6b:0c:77:3c:54:58:50:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:7B:92:70:6F:39:D0:B9:EB:F0:CD:7B:CD:7B:FC:00:C3:32:BE
            X509v3 Authority Key Identifier:
                keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:ce:28:17:cc:5a:a5:be:d5:8f:bb:66:90:e2:71:45:68:
         84:b4:e9:1f:18:8f:93:d3:bd:d6:7f:45:d3:2d:8d:35:e1:af:
         d7:7f:90:a1:b7:a4:cf:51:97:e5:1e:2b:ba:bc:a4:87:79:95:
         ef:92:18:b0:87:5c:47:7b:74:d0:df:8e:55:0d:91:94:97:3c:
         30:27:47:eb:0b:6d:18:3f:08:d5:c8:12:91:a7:6c:a2:3a:41:
         19:c1:b9:0d:58:e0:79:82:c0:dc:ef:86:02:35:02:ef:10:1f:
         c2:8b:d9:2b:76:e1:d1:6b:e0:64:3d:02:9b:e6:8d:0a:2e:90:
         2e:29:4b:0b:8b:c0:a6:23:ac:12:19:4f:6a:09:95:7d:a0:fc:
         c9:e9:a6:ae:bb:79:fa:7a:c7:0a:de:4b:40:7a:e4:e1:39:45:
         97:02:b3:9d:26:1c:93:f6:53:10:89:76:a0:aa:1c:8f:90:a5:
         17:b8:d8:50:c0:75:77:c6:33:8e:5d:98:a5:f1:5f:45:e8:16:
         b1:19:fe:f0:a0:d0:cb:b0:5d:a5:9a:1d:ba:0c:1d:6a:87:5d:
         5f:20:c7:76:67:b8:b1:e3:ae:05:d6:88:46:5e:37:cc:c5:0a:
         fd:3e:0b:e9:7d:dd:14:c0:57:79:f4:1c:e3:af:bf:d0:e2:7d:
         5a:13:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:08 2026 by rpki-client