This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          vMvREnm5jzcagG/q85IROsGxisifUfrBnSH/ULQxRTA=
Subject key identifier:   52:B4:79:5D:53:DB:D6:13:C9:D1:0D:26:2A:B3:EB:7A:71:A3:02:DB
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       019BF83EFE7B38FD93747F9AFDF64974D35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          110C
Signing time:             Mon 26 Jan 2026 03:00:36 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:36 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:36 +0000
Files and hashes:         1: 7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa (hash: ELHzePk+eTFwUV0lzyfOvVlVrH0Oe68AnbgtcOo/mUI=)
                          2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
                          3: eSb5SaQiTFGxJv1r1Rg9Zwy6k48.roa (hash: 3gfCITmerObL4KZJwGEUq8/MM5Wu7GSAZmrfKVP18TY=)
                          4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: UV2PgMgvdQSKtUAVScnw63rya6TzPXa25BBVyQf2jw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3e:fe:7b:38:fd:93:74:7f:9a:fd:f6:49:74:d3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Jan 26 03:00:36 2026 GMT
            Not After : Jan 27 03:00:36 2026 GMT
        Subject: CN=52b4795d53dbd613c9d10d262ab3eb7a71a302db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:a1:02:6e:07:2d:47:f6:9e:ff:23:6f:6e:
                    05:ad:39:8f:8f:52:39:88:5c:ab:28:2b:a6:11:b9:
                    83:2c:bc:22:e8:9e:21:57:b5:c7:f7:bf:97:8a:ee:
                    a8:17:d5:32:30:d5:55:30:cb:9e:6d:f5:7d:7c:20:
                    b5:96:58:80:39:63:0f:4f:1e:44:8c:1e:f4:e6:1e:
                    31:62:32:84:75:30:b1:bf:b8:f4:d9:d8:f1:8d:15:
                    99:50:e8:3c:f6:69:13:b8:8b:bf:32:94:b0:c1:7c:
                    19:8f:8e:d0:ac:c5:b4:c6:6a:61:cc:3a:72:dd:66:
                    6d:0d:e0:8d:9e:00:db:37:fe:51:6a:1d:54:6e:7a:
                    a2:9c:8c:9d:0d:fa:00:99:74:8c:be:51:f3:b5:09:
                    11:72:c1:a3:de:50:32:03:3e:77:d3:d6:21:e2:28:
                    bd:df:fc:5d:58:9b:9f:94:bd:98:05:3e:15:72:b9:
                    d0:6b:4d:cc:7e:9d:a0:b6:c9:56:fe:05:12:6d:40:
                    30:3e:cc:71:5b:62:f9:1c:27:e2:bf:e7:81:13:c5:
                    7f:e9:17:31:44:7b:55:21:ba:83:1a:29:17:ca:36:
                    49:c9:30:19:3b:93:ed:77:85:b8:fc:df:71:da:dd:
                    ca:87:5b:59:a1:02:16:86:ea:9f:8d:8d:6b:2f:f6:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:79:5D:53:DB:D6:13:C9:D1:0D:26:2A:B3:EB:7A:71:A3:02:DB
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:2a:88:2b:a7:40:7c:8e:4f:b5:8f:ad:7e:c9:31:4d:09:
         7c:76:94:d1:8f:d2:00:14:24:8f:5b:20:c6:2c:63:09:7e:d7:
         42:fb:a4:5b:d0:18:31:a1:09:9a:06:9b:7d:34:a9:7e:2c:87:
         16:60:19:90:4d:cf:85:ae:57:6e:c4:26:86:62:1c:1e:69:06:
         24:c1:bc:b5:ba:3b:ca:1a:a3:73:8d:c8:cb:35:6f:99:1c:76:
         a9:80:f7:0b:dc:05:18:85:61:fa:08:97:cb:29:79:2c:70:4f:
         1e:05:23:ad:0e:0e:02:9b:52:3f:11:74:7c:79:7a:1d:76:ab:
         f6:72:3b:c8:60:cd:f5:cd:2a:7b:71:5d:ac:47:a2:3f:e6:88:
         5c:a5:d5:40:d6:ec:1e:a0:d9:de:35:4f:af:42:41:06:d8:25:
         25:3f:a6:66:1a:3d:e1:ca:63:3e:95:cf:11:a1:a0:d0:d8:0b:
         86:a8:73:0c:80:e8:20:6c:2a:b5:da:df:0d:ec:ff:9c:87:d9:
         d3:04:b6:9e:f3:b4:f1:dd:e4:93:7d:c4:38:6c:2d:7c:6f:d4:
         61:90:dc:e1:35:43:6f:28:9f:4d:55:dd:f3:4f:b5:4c:c4:1e:
         36:4d:3e:4c:74:c4:65:20:2d:c8:4e:84:df:61:5d:3c:fe:71:
         c8:62:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:54 2026 by rpki-client