This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File:                     uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier:          zYuaZa9zHo5pW5MkFgVAZ47VdYwN9MhuNppJwUTyV8I=
Subject key identifier:   96:77:BC:B5:73:5C:10:9A:64:E6:BC:AB:C3:E2:71:1C:EA:F3:3F:ED
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       019BF72CC671F40033FB636CEB1E9F2E5752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number:          0322
Signing time:             Sun 25 Jan 2026 22:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:05 +0000
Files and hashes:         1: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
                          2: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=)
                          3: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
                          4: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=)
                          5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
                          6: QFgVTa_d7QcMY8-5_IuqXoD8tZI.roa (hash: jeGiUlHqHgGFamo7VLOuJ0n17v7Q86jD8/H1xHylsKA=)
                          7: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
                          8: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=)
                          9: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=)
                          10: ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa (hash: UPsyzhi87SZnZ58kTtKE+18tmkXvGwl7y+zmR4Y6hbw=)
                          11: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=)
                          12: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=)
                          13: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: KB268LssdtEhmM6mMJSofwuhUB60qs87K4Q6r6zJ9Aw=)
                          14: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:c6:71:f4:00:33:fb:63:6c:eb:1e:9f:2e:57:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Jan 25 22:01:05 2026 GMT
            Not After : Jan 26 22:01:05 2026 GMT
        Subject: CN=9677bcb5735c109a64e6bcabc3e2711ceaf33fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:f8:2f:4c:9c:78:14:d5:e0:4a:14:5e:65:
                    ab:5a:74:8b:ac:9c:ee:bf:dc:15:39:8d:a9:51:18:
                    c8:c2:42:29:dd:22:6f:c1:1d:bc:d6:52:52:a0:eb:
                    81:8d:a3:4a:cd:0a:22:07:ad:86:08:12:21:fb:7b:
                    5d:d3:80:02:b8:fd:90:60:d5:77:69:5b:7a:ac:50:
                    38:51:99:4a:e3:eb:77:6b:7e:e2:ba:e1:ba:f8:7d:
                    ac:fd:2f:2d:cc:0f:ad:66:33:60:4a:58:a1:cf:d5:
                    11:20:8f:cf:31:a4:1b:c1:cf:d4:1d:3e:45:be:25:
                    ab:ce:62:d9:39:1c:18:4f:7a:67:94:84:0b:17:b9:
                    f2:d7:ef:80:13:2a:7e:99:4c:dc:3e:68:b8:97:2c:
                    a1:9b:55:bf:39:da:b2:ea:3e:e3:6a:a7:0e:a8:73:
                    65:a1:1b:40:3f:37:63:4d:d2:cd:b7:da:f5:67:e4:
                    23:2c:88:a5:0e:a6:a8:00:b1:8c:1f:f4:01:c5:02:
                    ce:10:69:08:73:80:8f:f3:f1:f1:2b:dc:49:56:11:
                    c5:00:62:75:38:64:8c:a5:10:44:cd:5b:86:b5:f4:
                    a8:0f:34:d7:02:dc:fa:92:d8:b9:11:33:27:5c:f1:
                    89:40:35:09:e0:09:3b:40:2c:d1:92:b0:a1:24:00:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:77:BC:B5:73:5C:10:9A:64:E6:BC:AB:C3:E2:71:1C:EA:F3:3F:ED
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:6f:62:69:95:31:bc:9b:11:d5:1e:61:a0:bc:f9:89:5f:
         de:ba:03:1b:c1:ff:57:02:27:c9:07:72:84:28:d1:b9:dd:b2:
         b1:9f:87:79:7d:7b:16:d0:af:f5:e0:07:c3:1d:e2:c7:6c:48:
         e7:ba:40:ce:09:82:bd:82:55:b3:42:a4:74:7d:72:c6:00:e4:
         d6:0b:18:ce:e4:e8:5b:cb:93:ac:9d:1e:a3:75:21:93:0c:43:
         66:f9:b0:e0:3e:23:ca:50:c7:90:e9:68:96:04:a2:29:75:a4:
         79:e3:26:f5:bf:01:96:76:a5:45:42:28:dd:5d:32:2a:5d:c3:
         ee:03:44:fe:a1:2a:6f:b5:94:6a:39:ef:93:10:90:44:6c:51:
         dd:8e:a5:fb:ac:1e:83:1b:35:b9:e0:1b:c3:f2:a1:cf:57:fc:
         16:09:e0:30:3d:6d:96:74:4a:92:0e:2d:98:b7:0f:9a:06:13:
         4a:ca:3e:f6:a2:72:fe:2a:25:db:98:63:79:24:58:0e:24:a4:
         35:ad:cc:83:d8:de:b5:e7:15:36:86:d2:b0:02:59:39:87:c0:
         0c:9c:54:0c:90:00:a8:39:aa:74:9a:2e:25:93:ec:e1:07:f1:
         82:a9:9b:88:85:60:64:55:86:77:45:ca:13:72:b8:76:7b:21:
         2f:d6:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:46:56 2026 by rpki-client