This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          QhR1jVBr/ZDoxV8X7f0xiTy3rzRwYsGkQASWKv1/l/k=
Subject key identifier:   6E:38:FA:4B:87:69:82:E8:63:79:DF:C1:90:C4:89:6E:8F:2B:52:7B
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       019C1BDDD6000E8417C267C3A90A97660C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          0C5C
Signing time:             Mon 02 Feb 2026 01:00:48 +0000
Manifest this update:     Mon 02 Feb 2026 01:00:48 +0000
Manifest next update:     Tue 03 Feb 2026 01:00:48 +0000
Files and hashes:         1: 7La-XtrD4ICECjNRbJUhIiiRnLs.asa (hash: wZ15akcqN9GVHDKumXc8j8JGV1U6ZmvopBISyG0HrcI=)
                          2: RTU6VofFZkwFIunmV0I-5I8oeHk.roa (hash: qhsuUJ7AU4eP2XOXpcbSiz+ICmJsl3rcfd5Kjo6p8AI=)
                          3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: f2vvPZfkJmZdi6fSEAKefFw0XhujzXK+wdwJO1eoIMY=)
                          4: nr6yHLuwHJ6lw5JAwW5qDlsOfpA.roa (hash: iorIqxAuAmSRl6sCok02BcX/HwiRBqyHoRRMc0hDdTA=)
                          5: txFn_1w2AEjDCv0xGCqMhMdB6Ik.roa (hash: QZ5s1i5lWCJAEXaeHEkM7u2xMiicds/V8SZeoAg+i98=)
                          6: yrqi6IRlcDIv3grXoPIY4FbOeoA.roa (hash: ALG9r0dMs7ceV0uJepoVr46+adHsA89Wj6LXqqE3rOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:dd:d6:00:0e:84:17:c2:67:c3:a9:0a:97:66:0c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Feb  2 01:00:48 2026 GMT
            Not After : Feb  3 01:00:48 2026 GMT
        Subject: CN=6e38fa4b876982e86379dfc190c4896e8f2b527b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:d9:27:eb:cf:0e:42:a2:8d:43:23:ba:e2:
                    7b:47:d1:df:58:7c:bf:1f:e4:88:7b:db:3c:4e:43:
                    74:04:50:41:08:d5:a6:b5:e4:ac:6f:6c:ad:b8:3c:
                    d5:94:c4:c8:b1:50:35:4c:cf:b4:81:3d:72:43:e3:
                    b2:29:1b:94:08:43:0b:67:99:9f:8b:30:c1:d1:2b:
                    d4:ee:7d:91:db:c7:52:a1:ea:72:a0:21:7c:92:7e:
                    09:bc:a3:c5:56:a4:6f:22:90:2c:77:93:54:53:5a:
                    c8:d7:8a:9b:df:99:4c:60:d5:94:f7:9e:ec:86:9d:
                    07:91:7c:93:77:b4:92:ad:0d:52:6d:19:60:b3:72:
                    c3:ef:d8:80:e0:29:99:61:b8:f5:42:5e:5b:c1:26:
                    83:65:33:61:e2:1c:76:03:a9:c5:07:83:e7:a7:9e:
                    f3:31:cf:4a:1e:90:56:a2:24:4d:05:71:1f:64:06:
                    91:26:bd:1c:08:ae:93:c6:37:48:bf:13:1a:8f:49:
                    bc:97:06:dc:ec:03:0e:7b:b7:cb:d6:59:ec:80:c6:
                    d8:e3:b6:40:76:39:55:a5:89:77:a8:32:b3:75:d6:
                    2e:20:2d:f9:1c:67:1d:0c:65:ab:aa:e5:21:56:5d:
                    90:09:9e:ec:1e:e2:31:aa:92:7c:23:1c:36:cf:25:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:38:FA:4B:87:69:82:E8:63:79:DF:C1:90:C4:89:6E:8F:2B:52:7B
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:58:32:f1:64:92:2e:21:6d:dd:2d:e0:93:a7:a5:59:b5:
         d0:69:eb:a9:75:37:1a:16:89:5d:5c:ce:85:42:95:e2:6e:da:
         e7:98:a5:ec:c1:5f:9d:90:51:22:37:cb:d8:42:2a:85:f6:94:
         be:ec:e6:ee:54:dd:20:34:c9:ee:c5:61:48:ff:2d:9f:c0:62:
         e2:4f:76:43:f0:a7:44:21:cf:ab:e4:fe:9e:70:3d:f3:7e:b8:
         b5:70:a0:c3:37:72:94:73:8a:fd:da:3f:1c:6b:0c:0a:e3:59:
         06:75:96:ff:7f:92:7b:c2:a7:cf:51:71:a1:aa:e3:70:68:35:
         ec:d3:e6:9a:05:79:1f:d6:49:b6:d7:1a:ac:eb:5d:02:d0:48:
         ca:69:d8:a4:e4:da:77:68:a1:dc:d2:a3:ff:0d:4b:7f:ec:ea:
         3e:86:bb:4a:63:ca:06:ef:ad:9b:a6:67:09:b7:2b:c0:66:0d:
         79:89:3d:9a:13:0e:c9:fa:b6:75:ce:a3:3f:a6:cf:7f:76:38:
         6a:77:3e:81:f6:6d:73:4f:41:18:05:a9:26:8a:bd:6e:93:a1:
         76:22:29:c1:70:1d:b2:26:1c:ed:95:1b:28:aa:12:a3:40:fe:
         5a:00:7c:18:20:55:27:ae:86:86:49:86:ce:3a:db:cf:c4:4d:
         93:40:d1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:13 2026 by rpki-client