This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          noLPKSNgYCed7cNmMLTe05ggKEIlgzuSf5VCKK40djQ=
Subject key identifier:   35:D6:D5:28:39:7F:7C:65:14:75:D4:A9:1B:3A:F5:F9:A5:46:B8:35
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019BF6F5A106E37A6A959C42FB520BCE4B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          0804
Signing time:             Sun 25 Jan 2026 21:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:51 +0000
Files and hashes:         1: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: 3LJl35s+PKkGtLgQX1mqrWw7B/8GN+J6SK+zP8HLzLg=)
                          2: cYBrnaocLjA_DaHgp5BukHetZEw.roa (hash: WSYQBuYEacORy4ZqYo8p12iSgdVpFErki2QNc5JX+Q8=)
                          3: nfAlOJt-tJuBQ6TVdWgraK4LPcs.roa (hash: u0sCdtCOmFGO0vVCgVhH5vis+INdwLq690ISXBM58Ak=)
                          4: re1kMr4ZO4EcntSxzQLItfZHji4.roa (hash: pb/ZpVFwMQItfSjJxD0Eukfy73dUuFN63jAongafzPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:a1:06:e3:7a:6a:95:9c:42:fb:52:0b:ce:4b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Jan 25 21:00:51 2026 GMT
            Not After : Jan 26 21:00:51 2026 GMT
        Subject: CN=35d6d528397f7c651475d4a91b3af5f9a546b835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:e0:0d:f7:92:24:fd:fa:5b:67:f5:75:5d:
                    1d:2e:17:b2:75:ff:fa:22:11:9d:4c:c2:bb:2d:b2:
                    3e:ed:8c:de:55:d8:2e:e5:93:2c:4e:5f:f2:0c:4a:
                    3e:a4:2b:3f:21:5c:38:6c:95:93:d7:1d:75:fe:4c:
                    ab:e5:aa:8d:91:e4:dc:32:93:7d:bb:17:eb:43:9d:
                    33:5b:b3:56:46:3c:fc:87:aa:95:66:57:79:75:aa:
                    a7:01:04:80:a3:81:f1:17:2d:b0:58:9f:c6:9b:9e:
                    7d:95:79:96:5b:5b:d8:c0:3c:1d:c0:5b:08:ca:8a:
                    88:1f:f4:48:e9:06:f4:ad:90:19:9f:f1:d2:b6:a3:
                    a3:76:ad:98:59:8b:f9:80:ac:a6:eb:47:27:f7:db:
                    dd:4d:52:c6:22:32:2f:8b:b7:49:2a:7c:e8:ab:36:
                    bd:c6:92:be:4b:9a:dc:12:64:72:42:64:fa:6d:13:
                    2f:2f:fe:c5:52:7e:01:70:52:a5:6c:51:3b:8a:f9:
                    fc:7f:6f:78:2f:10:69:6b:43:d8:35:d6:6e:6f:c8:
                    3c:0a:49:48:ed:3c:2e:24:48:94:2e:83:72:51:55:
                    8c:df:7d:5f:91:57:22:10:62:1b:82:57:41:83:90:
                    8d:52:11:39:87:3f:80:95:e9:25:a9:3b:15:f0:66:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D6:D5:28:39:7F:7C:65:14:75:D4:A9:1B:3A:F5:F9:A5:46:B8:35
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:40:81:79:51:ba:3d:e5:0d:52:fc:f5:a0:67:81:b8:67:
         ec:57:8c:0c:c4:45:c0:da:4b:68:61:bc:15:0b:a9:f2:02:bb:
         5c:0f:83:0f:07:7b:c0:99:ba:34:3e:f2:03:01:3a:b8:02:d8:
         02:67:4c:15:18:d4:e0:1c:ff:44:e7:09:1c:92:5c:00:2a:62:
         78:8a:24:09:a6:38:fa:7a:14:56:5b:6f:3c:d9:90:b0:8d:77:
         42:b6:a9:18:40:3b:92:bb:ef:f8:8d:ce:2a:e1:86:f5:ca:a7:
         bb:2f:cc:84:36:52:5a:a7:60:f7:5c:78:a0:e6:9e:43:c8:a9:
         68:b6:f8:aa:aa:61:e4:19:97:77:9f:bb:3e:c9:cd:09:2c:f6:
         16:5f:9f:27:cd:1c:01:f4:ba:df:c3:7d:45:ae:83:ae:1c:56:
         fb:b1:f4:89:98:70:03:f1:ae:d6:f1:92:31:3c:f9:f4:f8:6f:
         55:76:1c:0c:5c:d7:28:fa:57:42:71:d1:74:b8:5c:55:11:1f:
         1d:75:95:ff:0c:8e:da:49:f2:1e:4c:2e:e9:4d:ae:99:79:94:
         14:b7:6d:c1:b5:db:2d:b5:c9:63:e6:1d:d6:9d:f5:8e:bb:27:
         9c:32:3d:c4:72:12:4a:7c:8e:a3:04:d6:c9:f3:80:2d:da:ae:
         c8:90:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:47 2026 by rpki-client