This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File:                     u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier:          IplmHoZtjof78Pyq6lCP22reVzjCo2imaF5j3slx+gE=
Subject key identifier:   64:40:74:DD:FA:8B:26:6B:39:74:7F:63:A5:4E:3C:AC:0F:B1:6E:07
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer:       /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial:       019BDE7F7E44FE338254C64EE739CC9D05A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number:          0F6B
Signing time:             Wed 21 Jan 2026 03:00:55 +0000
Manifest this update:     Wed 21 Jan 2026 03:00:55 +0000
Manifest next update:     Thu 22 Jan 2026 03:00:55 +0000
Files and hashes:         1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
                          2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
                          3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: ymcUDpEuV5xjKZqFgKCBPH0xWoJ/DQmMH408gZMkd98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:7f:7e:44:fe:33:82:54:c6:4e:e7:39:cc:9d:05:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
        Validity
            Not Before: Jan 21 03:00:55 2026 GMT
            Not After : Jan 22 03:00:55 2026 GMT
        Subject: CN=644074ddfa8b266b39747f63a54e3cac0fb16e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b2:9e:56:ea:a2:d7:2c:e5:83:5f:61:5b:b4:
                    24:08:2a:fb:5d:e3:f1:aa:4e:d7:52:c5:83:eb:1c:
                    54:77:2e:ac:3a:56:5a:1f:a0:63:e6:8f:15:b0:57:
                    bd:7c:75:91:1f:e0:a8:53:f4:70:26:5c:0f:7d:7e:
                    17:14:f8:ec:74:9f:b1:9d:55:97:b1:51:de:78:6e:
                    00:e4:6d:64:fb:f4:fb:09:2d:f5:7a:d4:8a:c1:04:
                    45:b5:5b:b3:fe:aa:76:dc:b4:e5:6f:34:75:31:9c:
                    6b:cb:c2:17:d0:41:4c:a9:2c:8b:c9:0b:55:17:91:
                    cc:40:02:db:99:3c:c7:95:84:69:67:0f:5a:e5:5e:
                    ee:08:e8:42:29:88:bc:64:83:ec:5b:00:19:04:14:
                    34:8a:a1:5c:88:de:d0:05:c2:f9:78:f6:12:b7:57:
                    ac:10:b1:64:51:7c:93:49:dc:18:10:c6:03:b1:23:
                    6e:1b:34:7f:05:31:2c:b0:f6:f6:c1:14:59:04:8a:
                    37:c2:50:ca:d5:94:20:59:70:fc:0c:7f:c3:8b:9d:
                    0e:76:e1:b0:2c:a4:0a:ca:4d:de:d8:4e:96:9d:b8:
                    9a:7a:1e:01:ab:84:80:ef:84:10:81:fe:bf:fd:f3:
                    53:ab:fc:24:83:95:0a:e3:a7:d8:f8:d2:cc:01:7c:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:40:74:DD:FA:8B:26:6B:39:74:7F:63:A5:4E:3C:AC:0F:B1:6E:07
            X509v3 Authority Key Identifier:
                keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:03:e4:e3:1e:cb:b5:c2:43:c7:9b:eb:6c:fa:2f:9d:65:
         ac:3f:35:52:3c:3d:07:06:89:c2:f4:14:c4:a9:16:e9:05:55:
         5f:0f:64:29:2b:0f:6a:53:6c:ba:e4:6f:a5:cc:e2:a6:5d:64:
         74:26:ca:c4:a0:29:3a:97:9a:2d:1e:fc:f1:91:f1:4d:37:c3:
         8c:92:6e:f7:d9:5e:b4:b6:5f:e3:fe:d3:05:09:67:53:d9:13:
         45:e1:82:33:65:43:2c:37:87:73:ee:da:6c:10:ea:0e:b3:59:
         c5:79:20:7a:1e:c2:94:f7:28:9a:02:55:7c:c2:3c:be:32:ba:
         ef:f6:35:ae:16:7f:5d:f1:62:c3:bc:05:4b:5a:dc:36:fc:22:
         72:00:cd:4a:59:f1:b5:3d:c8:57:d6:38:c6:c0:e4:48:24:8e:
         23:8c:e5:99:2b:1a:81:d9:a1:59:55:17:c2:16:e8:5f:7b:db:
         0a:93:ca:0a:40:45:ec:22:58:8e:75:2d:01:d9:08:fd:a3:e8:
         fa:69:c6:e6:3f:7e:54:fa:ec:93:d4:4b:41:6b:b8:77:6b:34:
         08:af:d6:82:f7:74:98:33:3b:f9:3d:7e:87:54:26:4a:f3:9a:
         14:39:38:5b:26:ea:c5:cd:20:9b:2b:9d:5d:77:f4:d4:f4:da:
         a8:92:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:58:01 2026 by rpki-client