This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File:                     uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier:          xjIIA40wDhZSjRk80Xl0mbK0/mxBvt0I4tPinY/FbU4=
Subject key identifier:   36:7C:7C:57:9F:6F:2D:74:FF:26:77:A7:20:6B:36:E0:7C:3B:C1:78
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer:       /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial:       019BFB3FF3FEBB1A0727679BD1B51255477B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 17:00:30 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:30 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:30 +0000
Files and hashes:         1: XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa (hash: wuOiczzJqVh1W7P+ln61FSsyWFsn4n4esHJ/HU/I0Aw=)
                          2: s2iiETsUpUtweaUwFZTgM9aDg7A.roa (hash: /RumfnN7PhI2jQIZLF3QzcmABh/oQLcD7DbhwGLNMV0=)
                          3: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: 7XeOuaZbSa30Pg9PzuBvn3f4UJCVkS6nWXRsZcrXBQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:3f:f3:fe:bb:1a:07:27:67:9b:d1:b5:12:55:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
        Validity
            Not Before: Jan 26 17:00:30 2026 GMT
            Not After : Jan 27 17:00:30 2026 GMT
        Subject: CN=367c7c579f6f2d74ff2677a7206b36e07c3bc178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:78:5f:61:4c:b8:d4:46:09:8d:92:de:0a:
                    b0:5b:0a:3c:3a:6e:43:a5:ec:14:f9:22:64:d4:aa:
                    c7:fc:61:d3:54:95:eb:2d:38:51:24:3e:eb:90:66:
                    34:90:82:02:dd:e4:c6:b0:a3:84:fb:50:4e:b0:e6:
                    b4:95:ba:50:8d:e4:62:e8:9e:3e:94:79:83:95:5c:
                    c1:a5:bb:3c:98:b9:5c:aa:c5:5f:19:a4:ed:eb:0e:
                    26:c6:4b:40:e8:97:f6:c1:32:1e:40:7e:b5:4a:50:
                    78:cd:14:11:04:a4:5b:9f:49:0f:87:29:b0:b2:f6:
                    23:b8:47:7a:74:c6:fe:b1:53:8a:15:a0:a4:b3:f6:
                    41:05:46:dc:27:8a:6b:6c:6a:aa:ae:59:ee:8a:c7:
                    d5:b8:b7:65:96:21:61:d3:f0:36:82:b4:40:ca:48:
                    fe:85:41:72:67:6e:f9:14:5c:10:91:e8:0e:84:09:
                    2e:6f:4d:18:ea:78:a3:67:a1:be:2f:c1:88:5b:5b:
                    36:25:d6:36:9d:8e:e5:4d:3a:d7:18:28:c6:49:a1:
                    f0:24:f4:7e:73:99:ce:f0:e1:d9:b3:f4:36:ff:7c:
                    63:28:38:2d:b0:3d:ca:40:3e:41:b9:34:d6:f1:75:
                    bb:5a:cb:f9:56:6c:7e:95:cb:fc:5a:c6:63:cd:27:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7C:7C:57:9F:6F:2D:74:FF:26:77:A7:20:6B:36:E0:7C:3B:C1:78
            X509v3 Authority Key Identifier:
                keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:08:96:7a:76:f0:64:38:69:ba:d6:76:c9:7e:5a:ae:17:97:
         cd:5c:ff:e6:f2:f4:1f:fa:eb:5b:14:be:7a:98:90:59:de:16:
         3d:27:56:dd:29:9c:be:6a:f4:bc:4e:58:fa:1c:8c:60:f9:80:
         ef:a7:01:95:6b:c3:67:0b:31:c9:07:3c:74:61:d1:2c:14:d2:
         7b:b3:9a:8b:f1:3e:42:3b:ed:79:19:60:af:47:a3:9b:5a:91:
         24:54:e4:8a:23:a1:f0:ef:6e:68:5b:4b:d6:18:f4:0c:2a:c5:
         08:55:f8:d4:38:a8:60:9f:ec:f6:c2:d9:f4:0d:07:65:67:4c:
         63:76:cd:91:62:65:3a:e2:8e:99:d7:e1:8e:0f:27:80:cb:d6:
         86:4a:8f:c7:86:38:b6:3b:1a:ea:7e:58:0f:e9:b9:ea:5c:0a:
         54:f2:31:97:7a:c6:de:01:3b:b4:23:9e:39:25:e1:0f:30:27:
         0c:20:fc:a4:8a:4d:0c:63:80:15:b4:2f:d2:f9:2f:dc:c3:40:
         6b:d9:06:cf:37:92:af:9e:e9:18:e0:89:7c:af:83:69:f4:a4:
         c7:1d:7d:13:77:66:cd:9c:25:51:e5:8a:84:b1:8a:60:8c:17:
         0c:c5:6a:86:8a:b0:e6:67:a3:04:dc:c0:39:f4:88:09:d9:df:
         21:e8:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:36:11 2026 by rpki-client