This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File:                     u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier:          A/72p5poBDl0puUJPUflocg+Ax37Tnr0wci5FefbWyk=
Subject key identifier:   5E:F2:CF:4C:69:9E:46:58:E7:AE:64:49:AD:CB:DE:BB:D6:39:D3:FD
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer:       /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial:       019BFA2D6EE60B52C9AE336089C81583BC32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number:          16C7
Signing time:             Mon 26 Jan 2026 12:00:40 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:40 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:40 +0000
Files and hashes:         1: HpKYJTH0AKCOXkV-1Il50PmP0QY.roa (hash: 9PVXUkwReOwf8wA4lfiLTA69I7UGpu+3253jwBo7ruE=)
                          2: dDTXblpfw4e_IT4c8kZaMfC06Cw.roa (hash: b+jA1Jjy/tg0AVffR8Bs1rGJPFwYS6JP2eeG+taKslA=)
                          3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: MF665/K+gHYKPn39wjGRnLYfI74W6RDjw/GPVYvqpRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:6e:e6:0b:52:c9:ae:33:60:89:c8:15:83:bc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
        Validity
            Not Before: Jan 26 12:00:40 2026 GMT
            Not After : Jan 27 12:00:40 2026 GMT
        Subject: CN=5ef2cf4c699e4658e7ae6449adcbdebbd639d3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:94:1e:93:cd:06:5e:89:79:e4:ec:eb:c5:
                    40:65:2d:c2:20:43:31:12:b2:37:14:db:c8:1f:27:
                    04:47:f1:2e:3c:a0:cf:99:81:8a:84:a7:b9:04:84:
                    4b:30:22:d2:31:ac:ed:95:8d:5a:20:1e:8c:c2:a3:
                    26:f4:26:f3:9f:e6:82:fc:71:b4:07:43:c9:8d:73:
                    6b:37:e1:a8:42:15:36:b7:03:5e:38:38:c4:49:84:
                    07:fa:d6:25:77:1a:1d:3e:e9:72:4e:81:f5:a8:78:
                    b2:3f:39:97:39:ed:8d:23:ee:1e:84:61:1a:af:f4:
                    90:ec:d4:31:f5:f9:ac:0f:1b:14:e6:8d:be:a4:33:
                    5e:37:0e:0d:9e:af:6a:ab:e9:63:2f:37:8c:57:d3:
                    53:03:76:73:d0:0f:69:50:89:ef:15:f3:a4:e1:e5:
                    a7:4e:8d:df:32:a4:d3:3a:82:ba:d0:0b:e4:3e:46:
                    48:bc:dc:24:d0:97:eb:3e:7e:ec:2a:53:15:b6:62:
                    fa:f2:1d:83:21:cb:d2:dd:78:f4:09:cd:58:03:92:
                    13:50:94:7c:9e:e4:36:e8:1f:59:35:e3:07:c5:a7:
                    54:cd:02:2c:0d:1d:b0:56:6e:8e:ab:e0:be:23:45:
                    ad:5c:4b:22:90:2b:1e:61:9a:ed:88:a2:39:e5:02:
                    ae:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F2:CF:4C:69:9E:46:58:E7:AE:64:49:AD:CB:DE:BB:D6:39:D3:FD
            X509v3 Authority Key Identifier:
                keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:89:35:53:02:58:89:8d:34:8c:16:15:1a:18:dc:a8:c4:
         fa:a3:26:04:5f:90:4e:f3:87:73:56:e4:13:a2:5f:87:ba:44:
         e3:8c:9f:73:c2:d9:97:81:6d:27:e0:2e:63:c4:97:9b:d7:aa:
         34:c6:34:e0:11:20:5c:bc:dc:9c:4e:95:c7:24:19:10:35:e6:
         44:fc:9a:97:ae:45:96:2d:26:18:55:eb:ff:4e:41:14:0b:b3:
         aa:f5:d0:b5:2e:80:ad:90:58:95:19:04:9a:6f:d7:0f:c1:84:
         7f:ea:d8:56:43:21:2c:a1:53:99:29:47:4d:d3:d2:f4:4c:1a:
         0a:23:4c:d9:9f:a5:ad:a6:05:09:67:82:8f:d3:b2:4d:91:11:
         40:ff:64:51:e9:d3:4c:cc:2e:86:bf:f0:25:bd:17:d7:52:27:
         3a:09:fa:16:61:22:1f:78:25:86:7d:4c:64:41:87:04:e7:d2:
         ca:2a:9e:1d:0d:42:72:4c:78:d6:7f:14:fd:6c:6c:4c:de:22:
         44:7c:dc:23:24:1f:72:7f:3b:65:00:76:a2:6d:74:00:78:13:
         c1:16:e4:97:55:60:a4:33:58:42:ea:77:f9:54:38:52:f7:c7:
         6f:34:a2:93:5b:98:5c:bd:5f:45:8c:ec:ce:6a:24:ab:27:a0:
         bc:4d:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:10:38 2026 by rpki-client