This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File:                     u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier:          hldOznk49Ubl6K5N5ASXnOye1sZprGhKt5SsKtkEncg=
Subject key identifier:   9D:55:10:78:D0:E6:A5:63:B1:9C:D8:F8:B8:0B:74:16:46:64:43:22
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       019B80F1CCAADC7D1A3601E5DB57E0576654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number:          15FF
Signing time:             Fri 02 Jan 2026 23:01:28 +0000
Manifest this update:     Fri 02 Jan 2026 23:01:28 +0000
Manifest next update:     Sat 03 Jan 2026 23:01:28 +0000
Files and hashes:         1: VfhG622X05ueKbyBW99s2Fx6Fvo.roa (hash: Otn+DYA7TkvkGAtuxIAHKcouTj233mRIPs1zHqZ4ddQ=)
                          2: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: HU4FCp8S59BD9eIMrObRyeQ7Lu5wqbiDqTN4oYusZ6k=)
                          3: xmuJajCxW6CAKzBKO0HZKxX3wCE.roa (hash: ISJ5kbE0xjYL9zMLc4XnOd0MhdPOaMjlbz5SKGrN7dE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 23:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:80:f1:cc:aa:dc:7d:1a:36:01:e5:db:57:e0:57:66:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Jan  2 23:01:28 2026 GMT
            Not After : Jan  3 23:01:28 2026 GMT
        Subject: CN=9d551078d0e6a563b19cd8f8b80b741646644322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:af:00:12:a8:95:b8:18:29:98:af:84:97:
                    8b:f1:2e:1d:b7:3c:e1:f1:49:1a:fd:55:27:d2:1e:
                    c9:a4:a0:5c:ae:4e:d6:a1:a6:ec:74:43:bc:2b:df:
                    3e:b9:40:a1:2f:4c:35:fd:be:20:c7:86:75:65:0c:
                    27:a3:cc:09:e9:20:69:3d:7f:46:df:7a:18:6b:68:
                    f6:bc:66:d3:6f:83:bd:c0:c1:f3:60:b8:7f:95:e2:
                    fb:f3:02:40:da:88:32:87:3f:fa:8f:40:3d:29:fc:
                    3f:d0:8c:4e:d2:79:d1:0a:dd:05:e4:71:50:e3:22:
                    88:86:f7:04:29:51:92:d0:37:70:07:2f:04:33:ac:
                    1e:b3:ef:ce:ee:1a:0c:87:40:60:e6:4f:51:2c:02:
                    95:9f:59:d0:73:d4:c6:d4:76:8c:69:99:f5:b6:1f:
                    12:5b:3a:9c:58:b1:0b:8c:31:7c:22:ca:0c:7e:06:
                    ed:15:4a:e8:db:ee:e9:5b:73:52:4b:e1:af:f7:17:
                    b6:7f:ed:d7:db:85:00:fd:e8:7e:d6:d7:b4:79:d8:
                    ab:54:88:3e:63:ed:60:0b:24:50:8c:5a:d0:22:a9:
                    1e:62:0f:85:56:82:d6:02:65:28:41:18:1b:30:22:
                    bd:0b:68:99:7b:32:6b:73:2b:c2:57:01:17:75:6a:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:55:10:78:D0:E6:A5:63:B1:9C:D8:F8:B8:0B:74:16:46:64:43:22
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:76:b3:99:98:b1:e4:15:3d:32:36:65:f1:64:9b:97:bd:
         24:7e:4b:e4:57:97:07:a2:37:28:70:c6:db:98:4f:9a:29:24:
         03:ca:0f:6c:0d:92:4a:f8:ed:64:1e:ad:8c:4a:91:2b:24:77:
         d2:3e:bd:bb:c0:38:f6:d1:8f:fc:09:42:db:d6:81:08:4a:00:
         52:8c:86:e3:b5:e9:c3:e3:2a:18:ef:e0:93:ad:51:87:35:55:
         36:0c:a3:95:fe:a6:e1:d6:3d:0a:df:62:22:2f:79:42:84:d5:
         d9:30:14:cb:c7:eb:84:fb:15:62:8e:d0:2a:78:d9:19:f7:99:
         2f:40:6e:b0:88:e4:c7:b4:38:8d:af:d8:df:5a:10:bc:53:3d:
         09:13:bc:eb:b4:54:8c:b2:49:7b:72:8e:be:28:76:6d:b4:e4:
         7d:7f:a0:57:b6:c9:a3:89:99:80:c0:57:3e:b4:90:ef:db:c4:
         37:e2:9e:fb:13:9a:3e:e4:a7:9e:b5:eb:53:28:4c:dc:00:55:
         8b:e6:dd:05:89:0e:26:0a:c4:cc:b7:db:06:8e:32:16:f8:23:
         99:62:0f:fa:40:08:e1:60:7b:21:ac:93:20:f2:63:91:d2:72:
         7a:e9:06:a0:52:21:a5:b0:ec:6b:f9:23:44:ea:13:74:f4:b3:
         71:e7:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 08:21:16 2026 by rpki-client