This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File:                     UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier:          jRyGNIB69QFNCgpFdBbJUFG4Rg4PzqRlTrb7sZC2GSU=
Subject key identifier:   9D:D6:06:05:6B:1D:AC:7C:B0:31:37:F8:79:D6:51:19:70:ED:BB:67
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer:       /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial:       019BF274D5DD3E5DEF763692169BFE95557D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number:          1697
Signing time:             Sun 25 Jan 2026 00:01:41 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:41 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:41 +0000
Files and hashes:         1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: 5xO4iQZvyLlVrgNcCZJG1rC84wuvxIjyecV58mVD/7Y=)
                          2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
                          3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:d5:dd:3e:5d:ef:76:36:92:16:9b:fe:95:55:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
        Validity
            Not Before: Jan 25 00:01:41 2026 GMT
            Not After : Jan 26 00:01:41 2026 GMT
        Subject: CN=9dd606056b1dac7cb03137f879d6511970edbb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:eb:01:86:ec:14:5e:6a:b2:74:f4:9a:32:
                    22:4a:22:05:9d:0d:ec:26:0d:b4:40:63:56:e6:bb:
                    37:88:5b:49:ed:19:a7:42:76:59:cb:62:c7:fb:64:
                    a6:a5:43:fd:f4:0d:1f:d8:7c:f8:dd:00:c8:22:cf:
                    97:80:f1:fb:3c:46:5b:a3:12:4f:e8:2b:50:1f:3f:
                    fe:21:37:6a:b8:a6:0d:d7:3c:e7:19:82:62:a7:f5:
                    92:60:ad:8a:fd:52:94:60:0c:65:8b:2f:95:e5:ef:
                    2b:f0:e7:f5:70:21:42:24:44:e3:e4:b9:90:5b:0c:
                    3f:ee:a7:11:22:52:66:c1:1d:6a:0d:0d:07:cb:3b:
                    9c:79:7b:a7:fd:a4:c7:c4:60:d5:9f:3f:b6:88:90:
                    96:5a:50:8c:58:f4:32:e3:08:61:c3:dd:64:9c:5c:
                    05:52:5e:31:c7:30:40:e4:e6:0e:6b:2e:86:2c:03:
                    d8:26:b5:e5:4d:69:8a:ca:f6:b6:d2:71:ae:82:b0:
                    5a:f0:09:d5:b9:0a:59:23:de:09:e3:24:7b:f7:b0:
                    33:2b:04:be:b1:d0:44:6b:ec:0f:f1:9b:2a:cc:11:
                    36:a8:ea:3d:42:27:c3:f8:dc:09:c3:ea:f5:3c:4a:
                    fc:43:e9:85:ea:5c:e5:42:7c:fa:22:19:f0:56:9a:
                    01:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:06:05:6B:1D:AC:7C:B0:31:37:F8:79:D6:51:19:70:ED:BB:67
            X509v3 Authority Key Identifier:
                keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:7d:dd:16:e0:f0:39:26:d5:88:b5:30:3f:f8:57:ca:20:
         53:6e:e6:d1:95:d5:bc:4b:89:92:79:d7:2e:84:06:f6:6b:59:
         75:53:73:1f:ec:a1:28:4d:8e:d4:5d:bc:51:98:a8:82:11:da:
         28:6f:6f:60:f3:cf:0a:37:bf:4d:7c:14:f6:f6:09:72:88:c0:
         2a:65:4e:e1:94:ee:55:47:97:f5:4f:bd:b8:8e:44:33:0b:2b:
         97:b4:48:6a:72:f8:3e:14:10:29:44:dd:cd:be:83:59:80:7a:
         d9:9a:7f:ba:7c:64:0a:3d:89:30:de:41:81:50:1d:97:00:8e:
         46:57:28:ee:e0:83:81:1a:f5:de:34:a6:da:93:1b:0d:2c:8f:
         a8:b0:b1:b2:1f:da:5c:51:f4:90:52:ed:c3:ef:7e:b3:7d:2b:
         8c:be:78:c5:e8:ce:80:ab:69:bb:74:65:65:97:38:f7:4e:e1:
         8c:82:0e:49:25:3c:73:3d:b3:0d:cc:df:5e:8a:e0:44:de:f3:
         9f:40:58:ba:56:16:a7:55:cb:2f:42:bf:f4:c5:53:e4:cd:cb:
         91:61:59:20:2b:5a:de:1d:c9:ac:31:b8:45:8c:e6:26:bd:b5:
         39:90:9f:4c:fd:96:06:c8:f3:35:29:ee:31:8a:16:33:88:f1:
         0c:14:41:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvydNXdPl3vdjaSFpv+lVV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy
MGI0YzQwHhcNMjYwMTI1MDAwMTQxWhcNMjYwMTI2MDAwMTQxWjAzMTEwLwYDVQQD
Eyg5ZGQ2MDYwNTZiMWRhYzdjYjAzMTM3Zjg3OWQ2NTExOTcwZWRiYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHrAYbsFF5qsnT0mjIiSiIFnQ3s
Jg20QGNW5rs3iFtJ7RmnQnZZy2LH+2SmpUP99A0f2Hz43QDIIs+XgPH7PEZboxJP
6CtQHz/+ITdquKYN1zznGYJip/WSYK2K/VKUYAxliy+V5e8r8Of1cCFCJETj5LmQ
Www/7qcRIlJmwR1qDQ0HyzuceXun/aTHxGDVnz+2iJCWWlCMWPQy4whhw91knFwF
Ul4xxzBA5OYOay6GLAPYJrXlTWmKyva20nGugrBa8AnVuQpZI94J4yR797AzKwS+
sdBEa+wP8ZsqzBE2qOo9QifD+NwJw+r1PEr8Q+mF6lzlQnz6IhnwVpoB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3WBgVrHax8sDE3+HnWURlw7btnMB8GA1UdIwQY
MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt
ZTNlNWZhMzZiYjJmLzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm
LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPF93Rbg
8Dkm1Yi1MD/4V8ogU27m0ZXVvEuJknnXLoQG9mtZdVNzH+yhKE2O1F28UZioghHa
KG9vYPPPCje/TXwU9vYJcojAKmVO4ZTuVUeX9U+9uI5EMwsrl7RIanL4PhQQKUTd
zb6DWYB62Zp/unxkCj2JMN5BgVAdlwCORlco7uCDgRr13jSm2pMbDSyPqLCxsh/a
XFH0kFLtw+9+s30rjL54xejOgKtpu3RlZZc4907hjIIOSSU8cz2zDczfXorgRN7z
n0BYulYWp1XLL0K/9MVT5M3LkWFZICta3h3JrDG4RYzmJr21OZCfTP2WBsjzNSnu
MYoWM4jxDBRB6Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:44:12 2026 by rpki-client