This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File:                     uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier:          xY1umfNmIMobZEj1VTtTEdBq1N0VP6KPzDRXgfRl1Hc=
Subject key identifier:   5A:08:A0:A1:DC:EE:8F:03:CD:79:C1:6E:7D:3C:F6:DA:CB:35:B4:B6
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer:       /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial:       019BF5073EFC0937C2C776633B3681F48863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number:          0F1E
Signing time:             Sun 25 Jan 2026 12:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:51 +0000
Files and hashes:         1: 1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa (hash: NsL25xCV1UtSE0/W9VwZvUIiaucE1NUxNcTSiDnaYao=)
                          2: ditshtsYxKYvOT3dCWLRDUMEGJ0.roa (hash: o6hcseRZVR0gI7jc0jlgzutuSsEvFXNX+MVW1GVHnBQ=)
                          3: eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa (hash: oTJIYUc5ybeC7DTGSDxwOuEroX+3xhqZe6zX/QEBvRI=)
                          4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: 1OAonpl2Q6AQs5PEUXTBfy5OzNlkhzx8m9wvus6+pSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:3e:fc:09:37:c2:c7:76:63:3b:36:81:f4:88:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
        Validity
            Not Before: Jan 25 12:00:51 2026 GMT
            Not After : Jan 26 12:00:51 2026 GMT
        Subject: CN=5a08a0a1dcee8f03cd79c16e7d3cf6dacb35b4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:a7:ef:1f:e3:76:3d:99:ba:53:8b:03:30:
                    d1:e7:c4:3e:80:fa:1c:af:83:63:ab:52:98:8f:18:
                    97:cd:3d:ab:6b:4a:78:28:38:0c:4c:82:dc:b0:d6:
                    2c:9d:92:86:06:b9:13:3e:a4:18:4c:cf:60:4f:f5:
                    a7:ca:7e:6f:09:01:65:1c:d2:8a:4d:02:10:d6:df:
                    08:3c:53:b4:85:ee:29:ad:9a:f9:76:82:2e:fc:8d:
                    44:83:58:a8:84:71:b1:3d:c2:4f:41:77:96:ab:ba:
                    ec:63:ae:31:7e:d9:2f:1c:86:49:fd:d9:1e:ef:96:
                    b9:b9:58:60:25:fe:c1:0b:a0:5b:f2:90:48:2e:ef:
                    e9:d6:91:c6:84:7c:e1:43:a8:da:9a:8d:08:d6:91:
                    b1:c9:14:36:b5:5a:fb:94:e1:3e:94:bb:4e:2c:11:
                    56:11:1c:ac:c4:7d:92:4e:bc:82:da:2e:86:f2:5f:
                    91:2c:9a:09:98:e9:17:49:50:4b:39:fc:6d:e1:31:
                    aa:e8:5d:ac:8d:f6:2d:60:93:42:26:86:72:0e:6f:
                    c1:2e:48:e3:a4:6e:aa:8b:95:ec:86:f4:09:d7:00:
                    3b:73:7c:25:54:89:25:7c:9d:01:4c:f7:bd:57:64:
                    e9:41:9c:fb:a3:7e:38:77:03:c2:ae:3d:e3:72:ef:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:A0:A1:DC:EE:8F:03:CD:79:C1:6E:7D:3C:F6:DA:CB:35:B4:B6
            X509v3 Authority Key Identifier:
                keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:66:ed:25:43:21:a6:86:ab:d2:38:53:eb:03:a9:b1:bd:72:
         07:34:29:58:ba:e1:cf:a7:19:a4:d2:33:17:8c:c1:fe:75:9e:
         41:e9:67:c0:05:6f:12:5f:b9:21:18:51:8c:77:89:81:40:1f:
         d8:6e:2b:c8:e5:14:82:f6:ad:64:dc:5c:0c:9d:94:d6:5a:b7:
         1d:43:ef:23:47:5d:56:ab:59:a6:fd:fe:cf:29:bd:20:1f:72:
         24:8c:5f:e7:d3:db:1d:de:c5:2d:fb:c5:c5:ff:2c:2d:14:91:
         cf:fe:1d:81:4e:94:2c:fc:72:4a:15:14:21:64:9d:51:40:24:
         c2:54:39:a4:76:1a:ef:00:21:0a:a3:a4:0d:30:db:04:38:de:
         d3:73:d7:16:67:a4:bf:42:79:ca:24:d3:52:06:bf:57:d0:ac:
         10:97:57:6e:e0:46:f3:56:72:3b:5a:0f:de:cf:4e:d5:19:20:
         02:ed:5b:d0:86:a5:02:ce:6a:c0:36:08:41:ed:9f:a4:f1:48:
         a9:c6:77:e0:ca:a1:57:43:4d:3c:60:73:ee:65:1c:c1:e5:48:
         e5:91:89:32:77:17:33:6f:29:99:8f:c1:3b:00:eb:f6:cb:13:
         de:6a:ab:9c:7b:8d:93:69:9c:28:76:ba:b7:d0:d5:70:7c:6f:
         74:7e:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:03 2026 by rpki-client