This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          6kU/yD8yged1ZPNEcrvZOxWU0izv+q08O+Wws//euXA=
Subject key identifier:   D4:1A:92:3F:53:A1:C1:F3:90:AA:E8:51:67:5E:0B:B3:51:55:D6:AC
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019BFB093DE8AFADD119AF2351204CF84109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          1486
Signing time:             Mon 26 Jan 2026 16:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 16:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 16:00:45 +0000
Files and hashes:         1: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          2: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          3: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: Td8c5fqian1xBdfx7n5AncabaT5y7RP9HC7ZCScGLKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:09:3d:e8:af:ad:d1:19:af:23:51:20:4c:f8:41:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Jan 26 16:00:45 2026 GMT
            Not After : Jan 27 16:00:45 2026 GMT
        Subject: CN=d41a923f53a1c1f390aae851675e0bb35155d6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:23:7b:13:51:e6:dc:11:4b:17:60:78:b7:
                    17:88:7b:d2:4f:9c:da:f1:bc:6d:44:8b:5c:14:c5:
                    10:02:70:f6:a1:b6:d0:63:05:58:94:66:e1:ca:04:
                    68:93:9f:03:24:5b:4d:f5:c5:bf:4f:6c:14:c7:e3:
                    28:a0:cb:19:25:2f:13:b7:40:cd:1b:a6:c3:8c:85:
                    33:ae:80:09:5d:50:9e:69:67:b2:39:3c:8a:be:26:
                    60:9e:c8:2e:80:dd:7a:dc:ba:cd:c9:07:64:19:ba:
                    36:ea:f2:f5:f5:24:08:0c:2a:f0:db:be:9c:c2:59:
                    2d:c1:74:df:94:dd:de:14:7f:f5:e4:ec:1d:36:48:
                    76:83:85:c2:5f:0d:1e:c8:f5:d6:14:7e:51:a6:90:
                    be:16:37:59:2c:fc:f1:96:e0:53:c2:12:e6:cf:3a:
                    f0:fe:9f:d1:da:54:7f:36:ee:d0:3a:60:ca:54:fb:
                    dd:29:03:72:b9:fc:21:1d:6d:ef:4d:10:cb:f3:56:
                    05:3d:50:8d:8d:86:d7:04:0f:ed:b9:35:26:c6:ee:
                    4f:5e:2c:fe:c4:d2:30:9c:04:f0:04:5e:af:b2:b6:
                    20:b8:0b:1d:89:54:dc:47:94:01:4b:ed:cc:70:7b:
                    79:a4:e2:74:b7:e1:75:f5:e6:ba:13:a9:97:e2:6b:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:92:3F:53:A1:C1:F3:90:AA:E8:51:67:5E:0B:B3:51:55:D6:AC
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:5a:91:65:0d:55:80:e6:9c:c0:b1:56:d3:af:30:5f:61:
         ec:5b:54:26:d3:80:d3:d9:9e:2b:d1:8c:b1:90:05:73:fa:1a:
         5e:a2:53:08:88:82:b2:87:cd:4e:be:6c:ac:c7:2f:65:fc:2c:
         c2:04:84:48:f5:81:56:1c:e3:70:3f:db:a8:ef:81:d4:0a:f2:
         d8:21:70:af:cf:42:85:37:25:43:10:68:8a:4a:34:d5:18:64:
         eb:f6:91:4e:85:70:65:4b:ce:b8:30:3b:08:19:9a:c6:26:26:
         55:91:dd:c4:6e:bc:ef:75:06:15:19:b9:e7:22:b6:04:ec:35:
         c4:4a:28:8a:55:63:44:ce:20:f9:9b:dc:f1:26:31:55:ea:83:
         2b:33:7a:e1:52:b5:46:98:cd:3a:02:12:4a:36:eb:13:9b:a6:
         d0:ef:ab:1d:2f:48:08:98:cb:be:3f:9b:5a:ad:7c:6b:0b:42:
         1c:5c:1e:69:a8:c4:94:f8:ce:c1:b2:19:5f:7b:ee:ae:7c:f5:
         ff:b6:8b:f2:02:98:21:aa:63:fa:20:18:b8:c5:79:f3:8a:cd:
         d2:4b:b4:95:29:e2:3b:c4:b4:d5:fe:9f:4b:70:b2:df:ba:10:
         6a:ab:36:95:c8:a2:92:cc:09:63:3d:2e:8b:c4:6d:cf:61:78:
         a0:9b:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:39:53 2026 by rpki-client