This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File:                     u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier:          qve2UwPs69h1sDoEptqHcIK0Auvht6xfC+au/YCEDWs=
Subject key identifier:   82:16:4E:AB:33:D9:77:26:49:C3:D1:8A:D0:6D:0B:CE:BE:B4:74:13
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer:       /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial:       019BFD2E577A8BCC7854D66BAEBE8F433699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number:          17ED
Signing time:             Tue 27 Jan 2026 02:00:31 +0000
Manifest this update:     Tue 27 Jan 2026 02:00:31 +0000
Manifest next update:     Wed 28 Jan 2026 02:00:31 +0000
Files and hashes:         1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
                          2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: fVjALO4pKDplE2GyCqaUfd/W4EL4IHAOGz47iWYGm5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:2e:57:7a:8b:cc:78:54:d6:6b:ae:be:8f:43:36:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
        Validity
            Not Before: Jan 27 02:00:31 2026 GMT
            Not After : Jan 28 02:00:31 2026 GMT
        Subject: CN=82164eab33d9772649c3d18ad06d0bcebeb47413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:2c:15:6b:d3:c2:59:68:4f:cd:58:57:0b:
                    ab:c1:66:ed:0b:f8:f9:43:2e:e8:86:40:e4:d2:da:
                    95:95:82:b8:f9:bf:16:f5:ef:1a:ca:28:5f:ce:d8:
                    ab:76:94:8b:4a:6a:f5:91:1c:24:42:58:c5:d5:ba:
                    78:3b:48:61:41:e9:cf:c7:4c:cb:2b:dd:3f:05:0e:
                    04:c1:67:c4:5f:0d:72:27:8b:a3:77:8d:64:44:f3:
                    fc:87:10:ee:17:57:3a:40:74:21:ed:4b:f9:f7:42:
                    a8:f1:c3:38:c0:6c:ca:6f:06:d4:71:c3:b4:24:25:
                    f3:11:a3:fa:f1:bd:ba:52:17:66:21:ee:b7:b2:9e:
                    57:fb:11:ab:44:96:86:2c:ec:e8:65:85:7e:d8:57:
                    89:dc:f7:96:48:db:c4:d0:11:6a:7f:01:fc:84:00:
                    6f:3f:78:94:93:69:8e:6c:2d:50:7a:64:f4:a7:6f:
                    97:57:ee:16:0a:0d:ff:f4:6e:a0:03:03:ef:cb:94:
                    b3:5e:6f:74:53:4e:a3:d9:22:bd:09:dd:93:a5:1f:
                    c6:8d:59:d7:15:d7:18:e5:4a:b2:a0:51:08:c8:fb:
                    03:2e:1a:2f:01:e3:c9:2d:ee:28:7f:b1:6c:ab:bc:
                    84:1c:a6:0f:c5:f9:fa:4f:e4:04:8e:0f:da:fc:2f:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:4E:AB:33:D9:77:26:49:C3:D1:8A:D0:6D:0B:CE:BE:B4:74:13
            X509v3 Authority Key Identifier:
                keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ae:97:8b:7b:e4:ea:7f:f1:71:89:48:ae:bc:21:ce:80:58:
         9b:d8:2d:e2:a6:68:08:be:94:73:95:d0:ee:20:94:59:3e:85:
         0b:bd:cd:fa:96:18:68:a8:fd:3a:20:61:e7:cd:33:ad:8f:69:
         f6:e6:52:f7:9d:28:4d:9f:cb:f1:fa:93:3b:44:71:8c:61:59:
         83:56:4e:f6:ae:77:99:ef:63:ce:8c:82:56:46:65:c9:73:b9:
         0f:7f:da:3b:f8:c1:17:ea:bc:e9:4a:2d:90:e2:2b:8d:4f:64:
         86:93:ec:9d:fd:6b:b8:83:f8:f6:ab:56:e3:bd:d2:df:5d:a7:
         82:56:6f:8b:47:82:43:67:60:26:f3:59:da:c5:b5:e0:ca:c0:
         61:8d:fd:8f:85:3a:a0:f9:97:3b:7a:8e:8f:c0:e3:25:99:0b:
         25:31:72:07:5c:b8:0c:37:6e:f4:85:0c:3c:e6:b6:10:b1:86:
         84:2b:ae:3f:f7:f9:ab:87:8d:fa:f2:69:cb:11:73:9c:a5:70:
         c2:de:dd:45:5c:1d:03:6e:77:1e:ce:ee:43:94:59:d6:29:cc:
         af:7f:35:29:68:83:e4:2d:e6:8d:0a:06:f0:f3:50:b7:d6:d1:
         85:18:9c:5f:d6:e6:07:60:9b:3f:dd:63:50:7c:bb:6f:7c:ad:
         54:72:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:16:29 2026 by rpki-client