This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
File:                     uEboVBh_kzKVTGDgjDNRr83xCFs.mft (raw, json)
Hash identifier:          OvwW+1d5E581fAXsauADEDmG8+/Cyhp7910tZPLbnUs=
Subject key identifier:   A9:2A:42:53:4D:80:B0:D2:14:9C:5C:61:26:D8:0A:EB:D7:E3:54:18
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Certificate issuer:       /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial:       019BF8769982F4D31312EEC7C425A3E3062A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
Manifest number:          081A
Signing time:             Mon 26 Jan 2026 04:01:20 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:20 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:20 +0000
Files and hashes:         1: LoU6bInR-t2CDpwfpMzLYbLy3pA.roa (hash: 7e0dmQJEvRFv5WAuIm9ehE3YMHYXzzfWjHPD+c3OUhs=)
                          2: uEboVBh_kzKVTGDgjDNRr83xCFs.crl (hash: TT+8L1Q/E4r/q7Ai4ad3CNThfsv2FxX6nxSG2hFUi34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:99:82:f4:d3:13:12:ee:c7:c4:25:a3:e3:06:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
        Validity
            Not Before: Jan 26 04:01:20 2026 GMT
            Not After : Jan 27 04:01:20 2026 GMT
        Subject: CN=a92a42534d80b0d2149c5c6126d80aebd7e35418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:f9:e9:fc:28:c8:92:d0:63:75:02:08:91:
                    c6:dc:ca:34:f3:15:16:f9:f9:bd:5f:7b:e1:9b:7e:
                    79:62:0a:99:b5:37:60:2e:c7:3a:09:6e:b2:54:4d:
                    d5:52:a7:fd:99:32:8a:4e:cd:01:bd:62:04:a4:3f:
                    ba:89:52:dc:2a:41:17:07:f9:54:5d:6b:ff:99:f2:
                    ee:25:90:1c:d7:dd:0c:d9:35:09:76:71:50:cc:27:
                    c2:bf:e4:c3:82:28:d1:30:20:88:b0:64:77:6f:49:
                    12:2a:f2:ab:f1:aa:e3:e1:6e:32:ab:d8:2d:c8:3b:
                    e6:8f:ae:06:a3:66:b1:17:73:de:b5:21:47:93:39:
                    46:de:5a:02:fb:b7:2f:49:96:3a:46:21:d5:d6:74:
                    b2:ae:bb:cd:8e:5b:78:f8:f6:9a:b5:18:6b:0d:c7:
                    15:9c:32:51:46:78:82:7f:e3:e1:af:c3:92:22:93:
                    23:22:ab:32:65:45:d9:05:ae:09:cc:6d:6d:7a:12:
                    5a:98:9a:65:b1:7a:97:25:d4:2d:c4:37:84:21:dd:
                    2e:7f:60:d7:8e:97:e0:e8:ee:8a:b0:0b:f1:66:e8:
                    73:17:da:0e:5b:1c:e9:38:69:e9:9f:02:6b:cb:07:
                    dc:60:41:a9:85:a5:6f:65:0d:d2:de:67:1e:c2:af:
                    85:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2A:42:53:4D:80:B0:D2:14:9C:5C:61:26:D8:0A:EB:D7:E3:54:18
            X509v3 Authority Key Identifier:
                keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:2b:f6:fb:52:52:1f:0a:05:c5:d4:ce:5d:d4:6b:13:a3:
         1b:cc:c7:51:92:d1:3e:31:fb:6b:c6:fa:df:ff:d1:fe:ec:89:
         b3:18:5b:50:a2:a0:a8:74:9e:9b:31:1b:54:d8:11:ad:d6:93:
         df:8d:ef:66:0e:5a:bb:31:99:2b:9c:9a:cc:16:01:9c:71:96:
         9a:19:55:60:28:b7:6d:ba:dc:71:86:b3:11:ae:c2:6c:ec:37:
         a0:d3:14:85:65:3f:be:c5:70:53:fb:c3:f4:03:10:6c:7f:59:
         b9:0c:41:34:83:0d:5b:35:56:31:60:2a:af:7f:dd:ca:c1:3c:
         6c:8e:3f:ba:57:56:d6:46:0a:9c:85:ef:29:11:4c:cc:20:21:
         0c:03:f2:82:34:80:e3:f1:e9:8f:46:89:91:f6:c1:ac:9c:d5:
         0a:3f:88:f8:b4:2c:58:6f:b8:65:c6:51:7a:b3:11:f5:83:2b:
         20:4e:bf:e3:03:1a:1d:b8:e7:43:52:02:36:e7:df:9b:38:7d:
         b3:fd:8b:d2:08:a6:81:35:dd:1d:0b:5a:18:b4:18:a2:60:4b:
         1f:b2:be:4d:73:87:fb:92:ae:99:23:29:c8:08:7e:39:6c:5b:
         6f:5b:8b:18:d1:36:df:6e:e7:ac:30:4d:91:0f:f9:91:fa:7e:
         f3:48:2d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:47:08 2026 by rpki-client