This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File:                     x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier:          7/lEEfRReYmJpTzE+40fmVsgx5VMtD7otziqBe4PhAQ=
Subject key identifier:   FE:5A:6D:99:5B:BE:E0:31:F7:BC:FC:3F:2E:26:3A:A0:55:38:97:A6
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer:       /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial:       019BF6BE80F5FFB2A80305807E9E005E8095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number:          0F6F
Signing time:             Sun 25 Jan 2026 20:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:38 +0000
Files and hashes:         1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
                          2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
                          3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: 9ZjUL7RLMnpQ0JAkWw4vNBZTcXOKpKw4upxT4lkwdvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:80:f5:ff:b2:a8:03:05:80:7e:9e:00:5e:80:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
        Validity
            Not Before: Jan 25 20:00:38 2026 GMT
            Not After : Jan 26 20:00:38 2026 GMT
        Subject: CN=fe5a6d995bbee031f7bcfc3f2e263aa0553897a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:18:ee:e2:3b:be:aa:52:01:64:19:50:ff:
                    e5:aa:cf:ee:87:e8:c3:b7:66:01:7f:8e:66:56:db:
                    da:a8:c7:87:ee:1a:34:ea:fb:da:d6:c9:6c:1c:d3:
                    ef:9d:72:4c:04:25:9b:2a:c2:4d:a7:e2:73:cb:c1:
                    51:a4:03:24:a9:68:e6:45:fe:eb:7c:aa:93:0d:84:
                    c0:70:6a:b9:aa:a5:2d:8e:12:1b:3c:f4:93:0f:26:
                    44:6c:4d:10:17:58:4c:21:ac:65:5b:6f:be:84:d6:
                    85:96:92:9c:e7:df:7e:2f:34:98:c7:c3:ac:33:6b:
                    c5:fe:50:51:6e:22:c6:fa:94:3d:ee:c7:ac:19:0e:
                    bf:e7:e1:7f:3e:9e:ae:bb:72:98:57:39:f6:d7:e0:
                    22:5a:7b:39:1a:65:96:e7:3b:57:22:95:38:ae:b3:
                    25:0b:0d:ee:f3:a2:1e:ac:7e:2c:ca:39:51:25:4b:
                    08:25:5f:50:ed:c9:1c:69:96:13:4a:c0:2c:d3:c1:
                    14:63:25:fe:58:3c:3d:9f:a4:57:66:c7:c0:c2:7f:
                    51:42:ee:d8:81:d8:3c:3f:bd:7d:3f:73:b8:36:3f:
                    16:a2:1e:15:74:f0:d7:53:48:8e:c8:14:dc:51:96:
                    e3:ee:b7:23:e7:eb:5c:1f:5e:5e:7e:1b:76:30:7c:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5A:6D:99:5B:BE:E0:31:F7:BC:FC:3F:2E:26:3A:A0:55:38:97:A6
            X509v3 Authority Key Identifier:
                keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:98:35:c1:84:85:a7:ac:09:07:ed:8b:bb:f4:27:e4:d6:b3:
         c6:1c:de:5b:fd:a9:5e:67:a2:39:52:34:be:a4:59:ff:9f:bf:
         74:85:9a:6f:15:50:38:2d:38:0d:1e:46:4d:19:cb:e7:97:bf:
         dc:c4:6e:16:3e:e0:5e:36:54:7f:5c:55:86:f5:36:02:d5:ee:
         14:9d:28:c1:6f:10:dd:1e:7c:1d:d8:55:73:1e:e1:1a:6e:60:
         9b:d2:1b:c7:e5:ec:61:22:a4:67:2e:70:3a:9f:8a:7c:6f:20:
         b9:94:9f:d7:70:f0:99:50:e7:4d:31:a1:c5:1b:76:ec:51:dd:
         05:5a:37:47:9a:79:42:1a:94:5b:d8:b3:d4:ca:85:58:01:8a:
         d3:4b:ad:e5:d4:52:c0:6f:92:55:5d:15:5b:a0:44:2c:93:81:
         ef:da:9a:ae:e0:7a:a5:15:3f:6b:ac:c6:44:85:f9:e5:9d:40:
         ba:dd:80:fc:2d:dc:a5:92:32:75:f4:04:f9:a7:42:07:80:66:
         bd:a7:16:73:b0:64:a1:17:23:bb:f7:31:bc:f3:77:e1:59:6e:
         cd:9d:eb:08:d9:6d:c5:51:23:b4:3f:25:89:d1:81:98:dd:a6:
         7d:24:d0:50:22:5b:c7:1c:94:a0:4c:78:4e:6a:a8:01:1b:6b:
         9b:70:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:31 2026 by rpki-client