This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          NqTVHrY8GmcFQoQ3Vn++53KblAyP9SZJrs87MutjXd0=
Subject key identifier:   70:B8:67:23:B2:39:D2:7E:EF:2A:A2:21:90:B0:F8:CE:B8:DD:5E:A5
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       019BF4D0DEFC6EED4C47F837EF45961EAE41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          0765
Signing time:             Sun 25 Jan 2026 11:01:27 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:27 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:27 +0000
Files and hashes:         1: 1Z9CK4rPbzAMA97TMp2bKUfntRw.roa (hash: LpR7I8xQuFg1r5Rgn2WWeCosLxa5m8Ntho2zm0Of2+c=)
                          2: BLM9s6E3uNgLbo5hUAJYzpxbAgk.roa (hash: 5Ht0651estCzoETFmaG2dTMoJGv16B5IZmwbZaHDuac=)
                          3: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: Uc+rNAj8s3ZKFyrfU3Klzr0YiPZE7YlBjAKGoV/Dkcg=)
                          4: gGdMWhv2-eyLZOF6_Y3Kn2Ptw4E.roa (hash: ir9QpJ+cZprHCM1364jhyll9k4egUSonINRA6eynL5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:de:fc:6e:ed:4c:47:f8:37:ef:45:96:1e:ae:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Jan 25 11:01:27 2026 GMT
            Not After : Jan 26 11:01:27 2026 GMT
        Subject: CN=70b86723b239d27eef2aa22190b0f8ceb8dd5ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:26:c7:c1:f1:b0:15:74:f7:c1:a4:e7:1a:
                    f0:b7:f2:8f:f3:62:49:5e:c2:6e:49:19:dd:6b:c2:
                    67:51:02:c4:8a:b5:71:c9:7c:93:34:80:b2:7d:6c:
                    fe:4a:98:95:b2:09:7b:3b:32:c2:3b:f7:f7:c0:80:
                    7a:d9:12:25:23:22:ab:ce:0d:f7:3f:5c:47:5c:de:
                    db:c9:f5:14:a9:b0:7b:03:60:2c:51:26:c6:5a:6e:
                    fe:c5:9b:7f:cb:58:8c:72:0f:12:43:1f:1c:a3:30:
                    80:e8:2d:e5:62:9c:f2:71:01:12:16:82:d8:65:50:
                    cd:8a:ee:de:62:9d:b8:c0:d6:4f:47:05:cb:c8:88:
                    92:ae:a5:6e:a5:c8:00:66:59:a4:32:bb:80:e8:21:
                    e8:eb:ee:4a:82:61:c8:b5:2b:da:60:30:65:2a:23:
                    86:a3:d6:76:28:be:d8:5e:ce:98:41:bc:4c:d5:e2:
                    bd:83:70:92:cd:06:60:86:80:c7:06:eb:d4:5a:3c:
                    f1:b5:c9:e6:91:94:40:37:96:84:28:b6:a1:c0:a2:
                    91:a3:c9:80:13:dc:2b:29:d5:f6:bb:53:10:05:70:
                    45:20:6f:21:e7:50:66:c1:6d:ec:6e:0f:8e:80:c5:
                    85:29:c6:f6:27:4e:84:31:ee:76:24:b9:58:34:22:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:67:23:B2:39:D2:7E:EF:2A:A2:21:90:B0:F8:CE:B8:DD:5E:A5
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8b:ff:ce:32:83:e9:9f:2c:0f:8c:92:46:c8:16:e8:5c:b7:
         8a:43:0d:be:a5:22:07:94:83:50:2c:1d:a2:6b:45:cd:3e:ca:
         25:c9:7f:a7:64:2d:1a:77:d7:7a:5d:99:cb:50:be:01:b6:27:
         70:3c:b3:06:88:19:09:62:b0:2d:08:43:8c:f4:dd:21:c2:ec:
         53:14:87:0a:8d:9d:ee:6d:7c:d6:23:1b:29:56:ea:57:08:ce:
         17:a7:ab:38:36:0e:b8:51:a1:4c:c3:29:d0:b1:dd:fb:39:e4:
         ba:88:67:ab:c2:85:13:02:61:22:ec:74:f0:ed:be:0d:1c:82:
         31:40:3c:8b:f2:c4:f7:1c:b3:5a:3d:20:54:c7:02:f9:a8:6e:
         1e:ff:6b:0b:3a:69:e6:40:2b:e5:5e:df:5a:37:e0:ce:ec:2d:
         e0:5e:20:3e:fa:f7:6c:fc:c5:23:ae:72:8d:57:b9:0c:a0:cd:
         92:77:09:64:8b:2a:c0:cd:7d:84:38:a4:21:96:1e:49:20:bb:
         5d:66:99:1d:4a:ae:bc:96:31:a4:ff:55:97:f2:29:e5:8a:93:
         2e:c9:3c:29:b3:fc:a1:8b:39:3d:a9:46:5c:fd:26:80:89:29:
         48:28:7e:54:b5:1e:17:31:d7:2f:54:16:d9:3c:fc:d3:4c:d7:
         b8:1b:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:34 2026 by rpki-client