This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File:                     UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier:          OzbTMMoUjm06nTZc5K+XbW7jGJtAax1MyPzor0Vd0yw=
Subject key identifier:   84:EB:9D:DD:1F:BA:0C:12:7E:EA:27:97:44:87:90:E7:6A:B7:AE:1A
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer:       /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial:       019BF79A2FAD1B0F64FDBAB87482325F4CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number:          038C
Signing time:             Mon 26 Jan 2026 00:00:35 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:35 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:35 +0000
Files and hashes:         1: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: SZEsQPRH40WqeF84MPcPt2Xdu5gMBjQVQc0DeIWYolA=)
                          2: _ui81FBBiuw7bXFjjAu-AlY8ago.roa (hash: +W47PKSUEyOgp5p8G/Toro+Z87dMONYhdZgP4gDGUPI=)
                          3: ra_bl9yXslRJGJzxTDV_d-BlUpQ.roa (hash: wtAAXjDyWZtJfFcEXNFbtV3UJ/ZOa4GX5loIbK1mn74=)
                          4: wFmuZt6OG-oR7DBeq01Ww8HvPa4.roa (hash: a0H1kPyDShFzTVMDinn/3X1ONbp+NjLhweJzA1FQdjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:2f:ad:1b:0f:64:fd:ba:b8:74:82:32:5f:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
        Validity
            Not Before: Jan 26 00:00:35 2026 GMT
            Not After : Jan 27 00:00:35 2026 GMT
        Subject: CN=84eb9ddd1fba0c127eea2797448790e76ab7ae1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:47:60:63:dc:15:ca:d8:32:79:f5:07:16:
                    a5:94:86:35:19:f6:ae:7c:74:4a:aa:b3:b7:23:b8:
                    87:4a:46:5b:23:2d:ff:de:24:c8:5a:49:4f:1a:fe:
                    94:31:76:64:53:91:5e:3e:a8:eb:7e:db:b9:46:15:
                    c7:83:21:6c:7b:34:81:78:b6:8c:98:a5:92:ba:fd:
                    bf:d2:17:1b:b9:90:7e:fc:24:97:26:43:e6:f5:9f:
                    76:73:28:c6:34:cf:15:6d:ab:fc:a3:f2:7a:6a:bf:
                    8e:53:67:90:0e:42:a4:52:c2:04:83:b9:c3:89:90:
                    23:53:a4:85:d1:fc:51:6e:2c:be:c0:ae:a1:a9:b0:
                    92:f6:87:70:fb:5f:f1:ba:96:09:19:61:14:4b:36:
                    84:7f:ba:56:b6:bb:52:1b:f0:cf:a3:02:ac:a9:7f:
                    05:b8:e6:6e:bc:92:2b:fb:4b:81:c9:3f:ac:4f:af:
                    e4:89:6e:6e:3e:7f:d7:66:13:d7:92:da:e9:3a:ee:
                    54:42:33:e2:f6:20:87:41:ed:0a:86:3b:33:32:36:
                    74:66:dc:42:f5:01:6e:94:a6:c3:7d:12:a2:fa:7b:
                    da:94:32:1b:76:31:e2:85:cc:71:69:cc:d6:a4:83:
                    7c:ae:e4:66:96:a7:5f:38:af:b9:cd:5a:5a:2c:2e:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:9D:DD:1F:BA:0C:12:7E:EA:27:97:44:87:90:E7:6A:B7:AE:1A
            X509v3 Authority Key Identifier:
                keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:16:e8:1e:ad:de:7f:51:d3:58:a2:a7:71:79:a4:23:10:f5:
         6c:b4:f5:23:2d:c4:d0:5b:49:01:4c:1d:31:5f:c8:8a:16:fe:
         8f:65:2a:83:26:85:06:74:ac:34:85:96:44:da:57:f0:9a:75:
         36:1c:50:51:39:b8:f4:e0:59:be:6f:f7:5c:88:1f:02:b2:94:
         5f:17:dd:31:b2:78:02:fb:dc:ce:dc:b6:f7:6c:4c:71:ca:9f:
         c3:76:13:a9:f3:b7:17:d1:6a:37:e6:3b:8b:fb:e0:4a:f6:d6:
         15:99:0d:48:41:0b:e8:1c:b7:83:9e:82:c9:f6:4f:1b:1e:82:
         93:92:87:fd:09:de:e3:3a:bd:a1:be:d5:05:72:41:74:2a:a7:
         c6:30:38:0c:1c:0a:be:71:e1:4e:d1:53:65:93:9e:11:93:c0:
         05:b9:61:df:5e:03:f9:ab:eb:f9:40:f6:22:9c:60:cb:2f:be:
         56:f0:1c:61:2d:8f:59:f6:cf:ba:e3:29:ed:a5:7b:c2:61:fd:
         03:16:15:80:ba:b6:49:ab:f9:49:17:54:0b:7a:4f:e9:14:2c:
         0c:03:2f:f0:07:70:8b:79:ff:3c:de:af:25:70:eb:0e:1b:4a:
         b1:49:f6:94:c5:0a:25:26:a8:9f:20:4b:3d:79:b3:35:32:9f:
         4e:bc:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:01:57 2026 by rpki-client