This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File:                     uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier:          3Sb1j4yH3LIsvGuEMjpaf4x/pId0ycVYDxmJm2taVz8=
Subject key identifier:   EC:D4:67:96:3D:85:A9:A2:F8:59:76:8F:70:51:AF:E5:CF:C8:DA:F2
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer:       /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial:       019BF72C960BE7323BADBFA1B40E01AA556D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number:          0B1D
Signing time:             Sun 25 Jan 2026 22:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:52 +0000
Files and hashes:         1: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (hash: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU=)
                          2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: QZu9OjJ1SXoKD2/Jzt346lxL3ar8w5fwEolpCgBqf+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:96:0b:e7:32:3b:ad:bf:a1:b4:0e:01:aa:55:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
        Validity
            Not Before: Jan 25 22:00:52 2026 GMT
            Not After : Jan 26 22:00:52 2026 GMT
        Subject: CN=ecd467963d85a9a2f859768f7051afe5cfc8daf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:f6:0f:d0:cc:79:aa:3f:65:a5:db:23:9b:
                    75:c4:03:96:db:f9:9f:9e:54:f7:39:b3:b9:02:ea:
                    45:ed:96:d8:d3:ca:f5:a5:b7:2b:03:f9:6f:4e:57:
                    78:e8:be:4d:83:03:85:e0:17:eb:59:bd:68:d6:c8:
                    92:4a:37:43:62:50:61:ce:15:92:63:1b:e4:2d:ea:
                    18:7b:94:9c:66:f4:a2:88:0d:99:91:18:c2:c7:52:
                    78:f9:e6:dd:e9:09:45:df:c6:c9:d1:1a:42:86:6a:
                    e4:5b:09:9c:01:6d:e1:b7:e0:16:21:89:21:c9:fa:
                    3d:44:d7:5e:de:83:6b:9b:7a:7c:51:83:69:c7:da:
                    ee:63:f3:da:06:07:4c:3d:13:af:8e:81:cd:d9:30:
                    b5:23:ca:b8:59:07:54:a8:27:a0:24:3b:f4:dc:f0:
                    b8:74:32:45:ec:e0:da:47:77:f3:ef:38:b4:3a:37:
                    0b:0c:b1:7f:58:ef:b2:e2:e0:f6:64:fb:ed:a5:27:
                    59:45:cb:1f:ea:3d:01:7d:09:9f:bd:f2:8b:05:40:
                    6d:fc:02:d5:dd:bd:38:fe:34:26:ad:05:c9:82:d0:
                    46:b2:cd:1d:8d:55:48:98:45:41:ce:e0:b9:ed:85:
                    92:ea:81:de:48:d4:1c:02:88:f4:4a:b5:b7:67:e2:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D4:67:96:3D:85:A9:A2:F8:59:76:8F:70:51:AF:E5:CF:C8:DA:F2
            X509v3 Authority Key Identifier:
                keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:54:7c:88:7d:ce:d0:46:1e:93:7b:f1:61:6e:5a:80:6a:
         b9:50:72:9c:37:7b:6d:85:a7:b0:43:20:fe:37:d1:fd:ac:d1:
         c4:87:b2:54:e9:aa:17:63:a3:f3:15:0b:30:67:b3:c0:72:40:
         2d:92:25:35:8e:bd:72:33:ad:64:87:4f:f2:08:9d:71:28:53:
         ed:af:e8:4a:08:3e:54:37:3e:2d:ab:a2:6e:d0:47:09:f4:f1:
         8a:0e:00:24:3a:e9:62:62:ef:a2:e5:93:7a:fc:0f:ba:55:40:
         34:48:4f:aa:b9:88:18:72:a0:9c:48:fc:85:cd:d4:58:33:d9:
         05:a9:86:55:a9:52:ba:c8:23:9c:84:26:75:06:db:39:9e:27:
         88:42:dc:bf:2f:ba:aa:48:10:39:6b:8a:5a:17:56:f0:68:b9:
         ff:50:ad:a9:82:13:55:dd:25:a8:90:ad:ad:ac:f4:11:86:bf:
         7a:64:a0:13:29:47:33:76:3d:d5:12:5e:8a:32:65:c0:dc:c6:
         f0:aa:cb:d2:9d:9c:ae:4d:a9:d0:bb:8b:a5:e5:bc:cd:9d:ac:
         fb:29:46:cf:6b:0d:9b:a2:b4:85:d8:6e:6b:3f:c9:35:86:6d:
         87:65:15:f4:1e:6b:d1:42:9b:69:ef:2f:b7:3a:a0:b5:f1:f1:
         67:ea:a0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:09:02 2026 by rpki-client