This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File:                     Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier:          VKAtGX8AowqMoembvnoVqZvXdrkK6weXoPAT5FtnFEs=
Subject key identifier:   65:F8:90:EB:96:2E:FE:9F:94:EB:BB:5E:D2:88:C4:93:92:89:56:97
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer:       /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial:       019BF50767059F999F9D2F8323FC5D6CE077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number:          17F5
Signing time:             Sun 25 Jan 2026 12:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:01 +0000
Files and hashes:         1: 1PnK9cELFJueJptrXJSb31qB-8g.roa (hash: ysJjVCrRDnCwue+Z8cjhJMdlMs4FN7B0hch20MyG2Ic=)
                          2: LqDWuGzHYEKyWD-0J71Yqy_PTe0.roa (hash: XOv2DO/Z4VpNTpwruJxK+1Cieqox7ARRO30Wur/mB0I=)
                          3: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: TrVcbW9/UbxER7cO+/m67/PVI7Y+/wnoPzbKZTQRv5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:67:05:9f:99:9f:9d:2f:83:23:fc:5d:6c:e0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
        Validity
            Not Before: Jan 25 12:01:01 2026 GMT
            Not After : Jan 26 12:01:01 2026 GMT
        Subject: CN=65f890eb962efe9f94ebbb5ed288c49392895697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:c4:c9:3f:38:8e:dd:8a:2d:22:ee:2e:69:
                    7d:fa:b1:ed:35:a9:84:64:03:6d:37:23:ba:f6:46:
                    de:c8:56:29:18:d7:17:1a:04:90:b9:6b:96:0b:30:
                    a8:b7:04:68:e9:07:f8:41:7d:e9:ec:e4:e8:ef:1c:
                    b5:5a:24:3d:2f:57:3d:be:77:9b:23:61:62:48:49:
                    8f:ad:49:4e:f2:02:8b:06:01:66:dc:e9:22:57:6a:
                    24:aa:b0:62:ba:aa:0f:f9:4c:55:fa:64:41:37:63:
                    b0:b9:af:17:e8:24:4d:8e:b9:f9:b9:41:d0:78:d4:
                    0b:7a:25:e0:ad:33:d3:0b:0e:80:c7:bc:6d:eb:e6:
                    28:db:33:fa:c2:8f:2c:20:62:ae:8c:02:92:7c:43:
                    91:8f:f6:69:bf:12:07:df:f4:31:38:0e:a3:ee:e9:
                    79:89:8a:49:b1:44:01:0f:80:c5:c9:e6:4d:e7:ee:
                    b7:11:64:3b:ab:1b:64:76:75:71:f3:9a:11:05:df:
                    b2:e0:30:84:02:29:e2:e2:9d:c5:89:40:fa:5e:8e:
                    8e:fa:be:a3:4f:0e:7d:fe:0b:00:c1:42:fd:6e:31:
                    8c:95:25:ac:e5:63:36:ba:20:16:91:25:73:85:71:
                    fa:fa:44:c1:7e:cb:90:8d:2d:cc:20:40:17:00:dc:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F8:90:EB:96:2E:FE:9F:94:EB:BB:5E:D2:88:C4:93:92:89:56:97
            X509v3 Authority Key Identifier:
                keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:fb:75:95:8b:52:ad:23:eb:1a:06:a5:2e:e1:45:65:d7:
         60:a6:e1:4b:00:f2:e1:6e:97:d0:7c:55:57:c3:89:24:1d:b9:
         c6:de:aa:7a:29:92:a4:22:36:1f:f4:7d:92:3c:e9:ca:7f:7f:
         88:77:90:ba:23:46:66:58:03:4c:0f:44:88:37:67:82:94:37:
         1d:dd:c8:17:c9:da:72:c8:84:92:59:ea:0b:fa:25:e8:71:69:
         27:e3:4f:bd:1a:0c:c8:bc:95:3e:d9:fb:7a:87:b1:6b:1a:e2:
         2a:eb:0f:7d:36:ba:c0:89:01:02:d1:f8:a7:5d:03:d2:80:f9:
         d4:b7:90:e0:d2:63:80:6c:ce:b7:3a:bc:7f:90:40:90:05:ac:
         26:a6:fa:53:84:89:6d:24:54:44:7d:60:fd:96:e6:a5:13:e5:
         cd:e4:97:03:39:33:d2:18:41:fd:d5:76:42:99:7e:56:d4:e9:
         02:47:6f:af:e5:75:00:83:f9:1f:c7:9b:22:3e:06:72:fe:b1:
         64:cb:e0:bc:40:17:17:1a:72:99:18:77:40:9e:7b:1e:8e:34:
         af:7f:2b:26:c3:99:cc:69:d5:78:e5:30:0b:25:1e:14:b2:31:
         d5:98:72:74:70:10:db:d1:fb:a7:07:fc:7a:fc:30:c3:32:fb:
         04:8e:2c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:42:58 2026 by rpki-client