This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File:                     U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier:          hDP4Grg6SP8IFOdDkw5kwLRs3JrcH2NMF2a+uLG/xoc=
Subject key identifier:   D2:C1:CD:4E:E3:2D:E6:27:0F:B6:CE:D2:39:04:9D:DD:BB:0B:81:66
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer:       /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial:       019BF7D27A842076E3DDDB5AEBC3F3FC4C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 01:02:04 +0000
Manifest this update:     Mon 26 Jan 2026 01:02:04 +0000
Manifest next update:     Tue 27 Jan 2026 01:02:04 +0000
Files and hashes:         1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
                          2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: 1JzD3TWj3mB2O6e0UH5tk4ZVPCgecPeXAG1NSGsM4ZQ=)
                          3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:7a:84:20:76:e3:dd:db:5a:eb:c3:f3:fc:4c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
        Validity
            Not Before: Jan 26 01:02:04 2026 GMT
            Not After : Jan 27 01:02:04 2026 GMT
        Subject: CN=d2c1cd4ee32de6270fb6ced239049dddbb0b8166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:93:36:03:83:8f:b3:ee:74:fd:3a:12:b2:
                    65:4d:dd:27:5c:4f:3b:3f:65:b6:96:0a:06:c9:eb:
                    7a:80:0d:22:d0:ff:4f:bb:ef:14:2f:9d:58:da:1b:
                    3e:d1:7f:74:51:53:74:42:5e:29:11:d1:53:5e:8a:
                    a7:17:07:8d:c8:24:57:a7:0b:ce:70:c5:41:54:20:
                    a3:f0:aa:27:78:3c:51:98:d3:d9:bb:35:6f:76:60:
                    56:34:e3:3c:26:a3:58:97:2b:18:b2:04:ee:43:c6:
                    dd:94:0a:94:a1:ef:33:60:b1:c6:22:85:41:a6:73:
                    eb:22:8c:83:3b:7f:bb:86:e1:f7:d9:67:a0:d8:3e:
                    7e:90:75:d6:a3:79:c2:90:e8:4d:bd:ec:fe:ff:e4:
                    d7:0d:81:ba:68:59:cd:06:a5:5a:c3:d7:7f:05:d7:
                    28:a9:00:88:29:7e:e8:ff:88:9b:3a:4d:ab:af:a8:
                    08:68:c5:55:b9:84:83:8c:a2:f2:84:11:57:89:b6:
                    5a:7b:af:cc:71:80:b6:7f:61:26:08:e0:87:ae:59:
                    39:45:00:de:17:ff:c9:40:17:80:ac:b1:f6:72:68:
                    4d:44:05:3e:0c:1f:1e:1b:92:41:c5:d2:ef:31:39:
                    75:f2:99:02:17:f0:a2:2f:50:6f:a2:b1:ab:ab:23:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:CD:4E:E3:2D:E6:27:0F:B6:CE:D2:39:04:9D:DD:BB:0B:81:66
            X509v3 Authority Key Identifier:
                keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:44:6a:7d:63:3c:4b:d8:d5:79:69:28:b4:24:c4:64:7d:
         f3:57:76:09:38:64:3c:37:72:bc:09:38:b3:86:98:76:34:67:
         a9:c2:cd:db:2a:71:5f:05:4f:96:22:01:f0:ee:ef:93:68:93:
         4a:5e:fa:21:c6:cc:76:9d:9a:3c:e5:04:76:ef:70:e4:0b:61:
         b0:63:05:d7:4c:a7:31:f7:71:88:05:24:f6:1a:a5:43:bf:4f:
         c5:9f:5b:cc:8e:4d:c2:c1:4c:f9:bc:b6:50:74:14:81:09:0d:
         b9:95:9f:36:fe:c6:d2:fa:eb:98:cf:6c:61:9d:53:37:90:ac:
         fd:45:db:d9:46:0f:ef:7a:21:de:06:8b:b6:4b:89:78:54:c3:
         81:0e:32:45:cf:c1:31:78:3b:91:63:00:d8:39:80:0b:0c:d5:
         ed:2c:f4:04:e5:d3:85:83:a6:6c:1c:eb:68:8c:40:ea:a0:d9:
         09:63:72:4e:de:26:20:d8:76:35:20:7b:56:af:34:d9:a9:01:
         f9:16:ce:20:12:f0:ef:d9:08:49:87:64:98:ed:58:05:9f:40:
         61:74:ab:a1:f9:3a:6c:01:05:78:7c:4e:4b:1a:d1:c5:65:87:
         84:62:2d:10:00:b4:af:2f:e3:c4:c4:4e:7f:22:12:3a:b6:3b:
         fe:25:e9:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv30nqEIHbj3dta68Pz/EwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmQwOTkyODcyMTUyYTg2ZDYwZDk2M2I4N2QwMTgxN2Mw
MGZjNTMwHhcNMjYwMTI2MDEwMjA0WhcNMjYwMTI3MDEwMjA0WjAzMTEwLwYDVQQD
EyhkMmMxY2Q0ZWUzMmRlNjI3MGZiNmNlZDIzOTA0OWRkZGJiMGI4MTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtiTNgODj7PudP06ErJlTd0nXE87
P2W2lgoGyet6gA0i0P9Pu+8UL51Y2hs+0X90UVN0Ql4pEdFTXoqnFweNyCRXpwvO
cMVBVCCj8KoneDxRmNPZuzVvdmBWNOM8JqNYlysYsgTuQ8bdlAqUoe8zYLHGIoVB
pnPrIoyDO3+7huH32Weg2D5+kHXWo3nCkOhNvez+/+TXDYG6aFnNBqVaw9d/Bdco
qQCIKX7o/4ibOk2rr6gIaMVVuYSDjKLyhBFXibZae6/McYC2f2EmCOCHrlk5RQDe
F//JQBeArLH2cmhNRAU+DB8eG5JBxdLvMTl18pkCF/CiL1BvorGrqyNFDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLBzU7jLeYnD7bO0jkEnd27C4FmMB8GA1UdIwQY
MBaAFFO9CZKHIVKobWDZY7h9AYF8APxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQt
ZTE1ZjRmODQwOWU2LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZTI2NGUtZDZjZS00MmQ1LWIwNWQtZTE1ZjRmODQwOWU2
LzEvVTcwSmtvY2hVcWh0WU5sanVIMEJnWHdBX0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtVEan1j
PEvY1XlpKLQkxGR981d2CThkPDdyvAk4s4aYdjRnqcLN2ypxXwVPliIB8O7vk2iT
Sl76IcbMdp2aPOUEdu9w5AthsGMF10ynMfdxiAUk9hqlQ79PxZ9bzI5NwsFM+by2
UHQUgQkNuZWfNv7G0vrrmM9sYZ1TN5Cs/UXb2UYP73oh3gaLtkuJeFTDgQ4yRc/B
MXg7kWMA2DmACwzV7Sz0BOXThYOmbBzraIxA6qDZCWNyTt4mINh2NSB7Vq802akB
+RbOIBLw79kISYdkmO1YBZ9AYXSrofk6bAEFeHxOSxrRxWWHhGItEAC0ry/jxMRO
fyISOrY7/iXpjw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:08:59 2026 by rpki-client