This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          vTilwP7U5/ewBo588tir49x5I0oP/OHcjxCEz61sPzo=
Subject key identifier:   1F:37:A0:1A:F1:8D:33:50:29:FB:EE:FE:23:49:16:FB:A3:E1:8A:EE
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019BFB40A4309063CDF9155AB4BAB8A39A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          0549
Signing time:             Mon 26 Jan 2026 17:01:16 +0000
Manifest this update:     Mon 26 Jan 2026 17:01:16 +0000
Manifest next update:     Tue 27 Jan 2026 17:01:16 +0000
Files and hashes:         1: 1N-RfUNK7TJOADuEd5LwU0pc9dA.roa (hash: giwWtGGz0qJdTRyYsC2mxOvkudQ3rDLs13BtvMl+IcU=)
                          2: F28Fou-cp6zKompMDBRHB9PzBO8.roa (hash: c+aWa88g+fAFN00H3xZY62Nx+3z9Djpk4RWhZ/ftbEM=)
                          3: GRurkR15IRibny01c2SgIJfB2ug.roa (hash: HYnLeHjwl0NzFIGJaGbDg+VGhR0vZ/WRcnjZj+Q9dqw=)
                          4: L_LOxEdO9VcaXw3f0Ccn1nVpvkk.roa (hash: 3LvkTc0aTEjvUGW6funLi090Sm2oGkh0fmG+oGpdEuE=)
                          5: MnYY-Ftfzolwr8e6LxWc7bisHtU.roa (hash: zl2cWXTK7oGfiqUfR6zbQjVBrUy/mOT4mFf5K0bogqY=)
                          6: PrsnZ-IEBEB2ESdFkpvSZlXdbj4.roa (hash: 00EaG3/DL87W1Q9d8sgB5UffnCBSpq+IkvKtAw1IPxA=)
                          7: RD-lUB4Ei36QxtI-FiOM6NM_U2Y.roa (hash: A93vzTs8DQd1xXreJpQ+GUKXK5PpHkGlwVbRSd1LD8Y=)
                          8: RNooxoPY3lLAM-uAghLz8fxjGqA.roa (hash: UpZ11CFlKFt4PXECoPaj1SbS3l0bpqo9jOt7fVabYlM=)
                          9: TTolVZDGDqJ96cw1ao2YfurArxw.roa (hash: cosgXImXqaLN2GDpw6pQx/7KB01l2Y7hSMANdeb88IU=)
                          10: VurK4Op9VVyDM898guR0PGmZun0.roa (hash: etVWe2qpJw25LoM9LGLg0h2tpADseIfR7Y6SaHgsFBk=)
                          11: XDt3HSAITAjIP_pvByWqWOCrWbY.roa (hash: rMgBTA98/ykH6kP0xZV6EmOpzcS5GZNFfect/boaoxA=)
                          12: XUASNYXbi-huANrVaIURORtUIpA.roa (hash: +AF+AoWlKgYDtvtJSR2fVM4jb67bbJihIgbo4mO4YrU=)
                          13: XXCfSA5i6cR4GsHNYWAJo9hST8U.roa (hash: WC1z/2WX2c5pLdJ9psJam8Dm0HPb89b8Rv4EcBWL6sg=)
                          14: Y5JlWrPT3zTUlpZ-rj9Kxvt4-wk.roa (hash: 2a68m4BNFp5jydkDZJ1/wjh7V6M7PNsvIuSb/K1IRxQ=)
                          15: YJd-1raR94ty3e3I_U-O_Msqbcw.roa (hash: 5OEecA95crTZEV2zOr87dEQBIjiCM6GYAQ548/GNEBA=)
                          16: ahxR1iTqeBFOP143gRwFt5yO29g.roa (hash: wPdQP2L3pRSTzcMk3v/3ELfzo7fD95eUibqdJGL8WL0=)
                          17: bLv7pvLK6_7fvMuKuQZL0mXT-w4.roa (hash: 8uNB/ILMFrq3sToFR+5ug40e8NIIul6S+LEO82VmTuM=)
                          18: eiBp3riEsH_TyOBVbVUiHplY4Jk.roa (hash: PI2KpI5NcyEngDeDOYyNH/V6GDpxw4GW3kFlPalkcBU=)
                          19: hvSBwCaj_tJ_7ZE6Ma831F6v3xQ.roa (hash: JWw3/L4UCUSDwP9XiLbzJj8Sl5rwZU+IUTS89T822ZM=)
                          20: juoDqBJ7n299gPxuH0Kb4uGBHEw.roa (hash: QknnOGTrcO8rMkdB2tP33xE6C8CQ2VIITStYWv7rx7Q=)
                          21: nKphHTLZ9wAiEaZHJ3GE-SBj4B4.roa (hash: vS4SbJavvGCy6afeQpD8NQ8z7X7Q99Ou3a4Euk5tYic=)
                          22: p0AgDh6yKQcVidh5G8BlsJJI9Dc.roa (hash: o4urzIe4Ny6+8AzMH8GzYP0G9nt64kHg01PYzA5GDfs=)
                          23: qU_heo92V_7ktbIEU7O5a9lknfE.roa (hash: CB0hHmuh07mb6c1bZ7apzs3X1NptXEZeA9FKVZCoXgg=)
                          24: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: dyVwavbHO6VzaBuyrau2cKC6qXkZw+vk4UpNMR/O1HY=)
                          25: yK_rq1qKxY3NT-5pPsVf-TgWnNE.roa (hash: qAGiyOp7/gR0aIiRv19K1is+KEj839TVxinvG6Vn5jg=)
                          26: zajVd5Ts_bTh8-XMc1sBRZbd3Xg.roa (hash: QnbiOgy/Y+Wr7LieVKnfsD3uCN5eC35E6EWP56OL3+Q=)
                          27: zj5taZjjhdwiLqYv5pODda2Zbac.roa (hash: KiZrGb0dbN2vh+XlNRMzZClIBxdDlFw7IVjwNS6448E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:a4:30:90:63:cd:f9:15:5a:b4:ba:b8:a3:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jan 26 17:01:16 2026 GMT
            Not After : Jan 27 17:01:16 2026 GMT
        Subject: CN=1f37a01af18d335029fbeefe234916fba3e18aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:8b:6f:b4:45:e7:de:fd:19:f9:06:62:84:
                    65:45:49:3a:40:5f:07:f5:55:a9:65:2e:68:45:c1:
                    f7:4c:b6:03:c4:64:40:4b:f9:ad:0e:9b:05:c2:68:
                    64:a1:3f:0a:d0:05:22:f6:cb:17:7b:07:74:c6:64:
                    47:3e:45:11:0d:89:dc:28:6b:8a:5f:26:c8:14:e3:
                    45:b8:14:70:3b:93:34:b8:4a:80:e0:52:78:6d:dd:
                    fd:13:99:38:36:a2:2f:23:d0:e4:22:57:fd:b8:6a:
                    60:4a:4d:9d:76:fb:f9:81:36:bb:f8:f2:e1:61:56:
                    ab:d7:95:3c:13:c3:39:d4:67:21:10:f3:12:45:74:
                    15:e0:43:cc:12:2b:26:a0:f2:39:72:75:3f:c4:3e:
                    f6:08:24:5e:dd:63:0c:28:12:d5:cf:5c:a9:60:db:
                    81:f6:36:d3:ec:9f:25:85:89:c0:02:c5:ed:58:29:
                    be:3c:f9:55:bf:44:00:d7:a2:75:87:8c:63:59:16:
                    db:ec:b9:b2:72:f3:d5:e3:56:ed:39:80:20:bc:f2:
                    23:f4:cb:f4:9b:6f:b2:6c:b4:2c:3f:13:57:30:60:
                    d6:26:ca:88:cd:92:7f:0b:8b:31:f5:64:fe:a2:9a:
                    10:d5:ef:87:89:08:52:f5:a8:5c:1d:fe:c5:ea:b0:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:37:A0:1A:F1:8D:33:50:29:FB:EE:FE:23:49:16:FB:A3:E1:8A:EE
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:97:20:f4:bc:c0:1b:e6:4f:ad:0e:b5:c6:ea:66:88:d0:
         08:68:77:e2:f9:e6:6d:ad:56:e0:7a:a0:fa:e4:81:5f:a3:e1:
         42:23:23:83:0e:ac:ce:e5:6f:e4:1d:0f:ba:e1:b5:33:b9:78:
         31:b8:b5:3f:42:16:f8:2a:3a:52:ca:62:eb:92:c1:f7:5c:72:
         46:8f:77:d4:08:e7:5c:c2:14:c4:eb:42:21:2d:c7:21:cd:e5:
         63:a4:1c:e1:52:00:c6:fd:85:8c:9d:58:49:e4:6a:19:ee:2b:
         0c:0e:01:50:02:a3:66:8e:91:47:ff:bd:cc:3c:6c:9b:63:40:
         1c:e1:e8:bb:31:9d:83:e3:81:27:1d:18:b6:e7:79:10:41:99:
         96:e0:7d:c6:e5:43:3a:72:fa:c6:02:08:ca:b8:43:00:9d:54:
         6b:6e:49:3a:6e:c3:d5:61:4f:79:d2:cf:3d:b8:f3:d5:a5:53:
         37:38:97:f5:c5:d5:60:62:ea:c6:07:b6:f2:ac:51:97:76:16:
         34:21:1c:ab:28:4d:a8:d5:2e:6f:b2:1c:b9:93:96:84:c7:2f:
         4c:b3:ba:e0:f7:cf:70:4b:03:9a:96:62:2b:91:fa:f7:02:a8:
         54:c4:65:3a:62:b6:fd:0c:42:f6:dc:ea:5a:43:f5:0b:cb:ce:
         fd:00:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:10:43 2026 by rpki-client