This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
File:                     1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json)
Hash identifier:          xx0+67QTq0VRu5T59A0G9U7WJkEtByRNtLLXit8DXJs=
Subject key identifier:   72:66:98:23:74:FC:81:36:73:81:52:01:CD:26:10:76:77:42:2E:4C
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Certificate issuer:       /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial:       019BF8087D5DE1226D26A981DDCCF3E86175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
Manifest number:          0F89
Signing time:             Mon 26 Jan 2026 02:01:04 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:04 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:04 +0000
Files and hashes:         1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: tpmQ6+UX9zI9lqSzJWjrrEBCedANqkxroD/YaRp/JSM=)
                          2: CqbH3RIH6k3OGToDcKs74wUqaFs.roa (hash: 4evCpjOyfa/KENR+HMxzfPquOr1nNuAfj2oYSaueXwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:7d:5d:e1:22:6d:26:a9:81:dd:cc:f3:e8:61:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
        Validity
            Not Before: Jan 26 02:01:04 2026 GMT
            Not After : Jan 27 02:01:04 2026 GMT
        Subject: CN=7266982374fc813673815201cd26107677422e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:c1:cc:89:07:be:d2:ea:24:3b:fb:00:e6:
                    ba:6a:e2:27:65:6c:97:e2:63:23:c7:17:b8:4e:fa:
                    49:95:83:f0:13:03:92:26:30:76:0e:2a:b2:63:86:
                    7a:e5:6f:d7:a3:e0:df:aa:a3:3c:5e:bb:d2:42:bf:
                    3a:04:8f:56:79:98:34:f5:64:11:d3:76:9f:b1:0b:
                    8c:63:8b:55:f3:d4:18:f5:b4:c2:3d:cb:8b:7d:51:
                    70:9e:b0:4a:89:cb:55:b8:c6:d7:d9:ea:16:84:86:
                    f0:a6:3e:b1:86:ae:b6:ad:29:6b:76:89:f8:61:35:
                    7d:07:31:88:5c:e5:fc:49:18:a2:df:02:21:ac:71:
                    0e:2c:f3:7e:bb:5d:7e:43:e6:9a:ad:a8:d2:2e:1f:
                    e3:7f:05:d0:4b:68:a9:ce:03:92:a7:e2:04:2e:aa:
                    3e:ed:bd:67:a8:d7:2c:fc:eb:d6:d2:46:6e:41:48:
                    fa:c3:3a:37:11:2c:d2:e0:6b:79:9a:5d:a9:20:f9:
                    4a:9d:bc:59:f4:17:ce:a4:05:e0:aa:5c:4e:ec:40:
                    ec:1d:63:6b:8f:35:f5:c9:4f:3a:15:e0:eb:87:26:
                    f5:9a:47:c6:d7:80:46:ba:5d:cb:df:ea:e3:99:7f:
                    36:85:7f:18:07:18:4a:7b:53:0c:cf:0c:55:e7:2a:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:66:98:23:74:FC:81:36:73:81:52:01:CD:26:10:76:77:42:2E:4C
            X509v3 Authority Key Identifier:
                keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:13:2b:dd:db:59:d3:b4:12:6f:15:29:ac:17:c9:ed:a7:80:
         04:ca:5d:41:3b:ae:1c:04:9d:0c:17:7e:70:17:fd:34:67:cc:
         a8:73:d9:0e:66:b7:76:af:ca:f9:1c:a8:71:19:a7:bf:b4:58:
         ad:ad:1f:f4:76:a6:98:04:d6:38:91:3b:b9:e2:ed:b5:da:fb:
         ab:77:77:31:2a:ab:5a:f9:5c:9d:27:5f:a2:38:17:86:50:68:
         24:ae:06:c1:1b:17:57:70:eb:ee:b2:50:34:2b:64:f4:37:10:
         ca:fb:ea:ec:f3:89:38:55:e7:cb:37:d7:e1:74:b0:70:b7:ed:
         c9:06:ca:47:2f:74:ce:f1:2d:f0:13:c0:8e:37:42:11:26:96:
         4e:8c:00:c9:f0:67:1a:c1:11:3d:c3:eb:c6:88:f2:29:68:8f:
         02:f2:23:2e:2a:e5:ab:19:9a:f3:8b:f6:c9:79:23:a1:01:fb:
         02:de:76:41:34:c4:a3:62:93:b9:ec:56:24:52:80:e6:ae:b8:
         8c:dc:df:c8:2f:9e:16:25:43:43:e1:65:0f:c1:6d:e9:0a:b4:
         2c:2c:43:6a:2e:e7:2b:6c:af:1b:22:34:5c:e8:0c:46:fb:89:
         43:8b:15:2e:67:a4:d8:99:23:01:51:9a:68:73:00:e1:88:bd:
         fc:e6:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:48 2026 by rpki-client