This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          1ennDN2tnl7ao4/lHqc4Ub3i3U6/fIP4DQv0TRpK56U=
Subject key identifier:   6A:48:73:96:80:5E:5B:B9:A7:BC:22:43:26:B0:F7:74:3C:9A:CF:FD
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       019BFD9D2B3339F488975BEB03A274E702F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          17F3
Signing time:             Tue 27 Jan 2026 04:01:34 +0000
Manifest this update:     Tue 27 Jan 2026 04:01:34 +0000
Manifest next update:     Wed 28 Jan 2026 04:01:34 +0000
Files and hashes:         1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
                          2: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
                          3: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: VBMDIi/iwZ0YIHq4Je144jSsrGhnClYkFYcbHXtBlgM=)
                          4: ot9zGZ8lqbZQsxEaVPvTfXs9gBQ.roa (hash: Kks4PvcwFRu/9gLcNOW/VSN4jNFuv/TAckUM8Z6fniM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:9d:2b:33:39:f4:88:97:5b:eb:03:a2:74:e7:02:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: Jan 27 04:01:34 2026 GMT
            Not After : Jan 28 04:01:34 2026 GMT
        Subject: CN=6a487396805e5bb9a7bc224326b0f7743c9acffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:18:3e:69:6f:f2:31:a0:be:67:90:ac:a2:
                    89:97:31:ae:76:64:83:b4:fc:9c:d7:de:20:4c:33:
                    73:46:1d:a3:25:60:db:07:fa:95:d5:22:fe:ee:e1:
                    bf:70:f5:2b:14:32:9f:f7:e5:5c:f1:84:6b:c3:d5:
                    b7:07:b2:73:af:f5:8a:22:c5:cc:1f:ef:e6:e1:5a:
                    a4:3e:9a:c2:77:5e:0d:29:cc:77:4f:e9:7c:cc:41:
                    49:76:00:01:e1:40:18:b1:c6:1d:d3:dc:54:62:02:
                    35:3a:9f:7d:d2:d5:86:57:39:e0:47:9d:65:b7:29:
                    d2:6e:ed:8f:02:60:c4:46:b9:37:7d:37:80:c2:60:
                    11:05:cb:9b:97:63:e4:9d:78:89:9f:86:44:eb:1c:
                    6b:e4:68:1a:c7:71:10:77:e3:5c:9e:48:81:74:e5:
                    47:5c:f3:7c:3e:b6:fa:1b:23:2a:2c:e1:27:9a:86:
                    87:53:a0:62:c0:34:aa:3c:d5:12:96:82:30:67:4d:
                    ca:37:2f:cf:f4:90:36:c8:a6:0e:16:f6:9d:c5:ae:
                    a3:25:f4:72:e9:59:d3:bc:76:6b:da:7c:a1:a0:8c:
                    b9:f3:4f:d9:13:2f:a5:ad:3a:19:95:22:80:d6:1a:
                    f7:c5:ab:03:49:28:5c:0e:5c:b8:9c:a7:39:59:17:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:48:73:96:80:5E:5B:B9:A7:BC:22:43:26:B0:F7:74:3C:9A:CF:FD
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3f:16:c0:ed:8e:45:c6:61:62:7b:bc:a6:97:a3:51:5a:5a:
         1e:c4:55:a4:3d:a9:09:7a:6a:32:14:bf:28:57:af:6f:59:05:
         72:a4:c3:ed:db:f3:02:88:7e:23:62:fd:24:97:98:f6:8d:e3:
         0d:80:7e:a6:04:ed:26:b1:56:38:cd:14:50:c2:93:04:b3:4d:
         86:81:93:94:b6:e0:21:28:9a:95:f6:f1:75:65:08:7e:f8:d5:
         e9:51:f7:41:ca:d9:df:3a:bf:93:ba:ac:ae:94:ea:5d:13:76:
         21:b9:e5:cc:73:82:fd:5c:a3:32:28:68:fb:ad:53:f6:24:de:
         04:e7:71:e8:86:b5:c2:c4:59:2d:0a:72:94:c3:96:a6:37:1e:
         49:94:19:93:33:f1:55:5c:5c:fe:9b:ec:b0:97:96:ff:3e:12:
         04:7c:57:7f:69:4a:e3:39:27:3c:df:d3:26:45:37:28:f4:95:
         f1:3b:7b:66:72:d4:c5:0a:66:ab:9f:2c:78:bb:2d:ca:6e:04:
         be:6f:28:c4:19:fa:58:75:3d:09:1f:14:38:5a:57:7d:f8:3e:
         e8:b5:23:e0:3c:73:55:62:77:1e:71:52:c1:0d:c4:fd:ba:8c:
         13:07:53:19:5f:7a:fd:57:90:2f:77:79:7f:9e:0c:86:a2:bb:
         bd:66:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:46:49 2026 by rpki-client