This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File:                     U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier:          zM4kibVcvdXayN2OJEOFziLNo5OC9/HLhQRQCYrWbW4=
Subject key identifier:   8F:8E:76:FA:A4:C7:58:70:01:EF:A1:23:1B:07:3A:FD:51:43:38:0F
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer:       /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial:       019BF8AD6ADFD2C28DC0D8B010F24D7EEBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 05:01:13 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:13 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:13 +0000
Files and hashes:         1: IhNm1XAjTUBP_UYjIGIEELcWiWc.roa (hash: TcGN7ZBSR/KDo/mk7XwRToavEZ6usSTJYaYD26UCIPE=)
                          2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: loeZADHLMRP0hJMnCgZj9wiFDXoZL5G7FhDNEHzoNXM=)
                          3: mjm_jL6FnCZyLJAmMfTaUZL_DF4.roa (hash: 7TBTThhJXxwuqJMKV3smo+3dSUEAzVVTW36ntOu96Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:6a:df:d2:c2:8d:c0:d8:b0:10:f2:4d:7e:eb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
        Validity
            Not Before: Jan 26 05:01:13 2026 GMT
            Not After : Jan 27 05:01:13 2026 GMT
        Subject: CN=8f8e76faa4c7587001efa1231b073afd5143380f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:d5:30:60:a4:12:49:cb:ff:e4:5b:85:fc:
                    8c:0f:0c:c9:86:c6:7e:93:f9:5b:a0:90:41:20:ff:
                    1a:c1:ed:50:e6:f9:40:63:fd:4e:ca:2e:c5:6d:33:
                    20:af:a5:cf:36:63:bc:45:b1:e1:48:e0:dd:6b:b4:
                    29:b8:43:3a:54:2b:ad:f9:d3:0b:56:90:88:82:b5:
                    b0:f8:2c:2b:ab:27:fc:27:af:14:86:c3:43:72:ae:
                    95:01:b0:43:ec:aa:06:3f:7c:83:64:77:70:7f:29:
                    40:3b:03:9c:56:d1:a9:54:b4:9d:52:41:a1:3d:c0:
                    c1:02:7f:af:8c:8f:b3:5c:76:d7:e9:ef:2e:90:c7:
                    08:0f:96:51:38:8b:06:be:fa:d3:89:fa:5d:11:a4:
                    6f:57:6b:bd:dd:84:05:86:f7:5d:3c:42:6a:74:b1:
                    1a:f8:c2:5a:be:a9:64:85:52:16:e6:ba:2c:c9:3a:
                    ac:3f:a8:13:e8:ff:39:a0:f8:8e:e9:c6:6b:74:a4:
                    75:a3:70:2f:a0:65:9a:e7:b6:8a:3b:19:4b:a2:57:
                    69:09:c3:68:b3:4e:70:28:51:a5:17:74:91:2a:52:
                    9c:4a:38:30:91:50:b6:be:ca:f1:bd:fb:6f:92:79:
                    5d:f7:d6:25:a2:84:b5:b0:1e:ba:04:cd:12:39:6c:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8E:76:FA:A4:C7:58:70:01:EF:A1:23:1B:07:3A:FD:51:43:38:0F
            X509v3 Authority Key Identifier:
                keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:08:ca:ce:3b:a5:73:e2:27:17:12:c4:74:ec:b8:c2:10:c0:
         95:aa:3a:73:82:d0:0c:49:7c:c2:1c:b6:e9:51:bb:25:06:a9:
         ff:f8:78:8f:08:70:b7:33:17:13:b7:6b:05:0b:12:5f:a1:ca:
         3b:b2:3f:1e:37:fe:6a:50:2f:a9:02:8b:35:b6:eb:2f:e5:2f:
         22:82:28:e7:7e:4f:00:c9:86:ba:72:0b:b8:57:15:3c:c7:2f:
         73:51:38:b8:ec:0d:fe:a6:a5:82:df:33:c9:6b:f1:e9:5b:cc:
         12:10:51:85:71:9e:d9:74:80:b4:8e:18:6e:cb:2e:ef:c5:31:
         a2:ba:f0:5d:7c:05:45:62:c7:c5:b5:60:aa:12:d2:d7:a0:7c:
         3d:f8:76:fb:2a:96:7f:56:81:99:e5:a8:ec:09:3b:38:61:eb:
         0c:c2:11:59:2b:92:d4:a1:2e:76:5d:ab:84:90:a7:c8:2b:20:
         fe:a5:ca:53:83:f7:00:5f:8f:32:47:37:55:7c:dd:17:da:ab:
         d7:13:d7:99:55:9d:f9:e9:e5:53:b8:cf:da:52:a3:63:d1:96:
         00:7f:3e:52:09:39:a6:df:e6:74:8b:71:7d:98:37:40:bf:1f:
         f0:03:15:9a:45:98:5e:57:f9:c7:6a:f4:ff:e6:81:59:f4:72:
         8d:4b:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:01:56 2026 by rpki-client