This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File:                     uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier:          2xYnexyxothblzUOq+GVScKgKArd253CNE02noxYCFQ=
Subject key identifier:   3F:0A:EE:08:31:94:56:FD:A9:76:98:44:2B:AA:01:2E:3F:37:18:70
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer:       /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial:       019BFB77ACAFC5BE6AD99B63738075FDBF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 18:01:22 +0000
Manifest this update:     Mon 26 Jan 2026 18:01:22 +0000
Manifest next update:     Tue 27 Jan 2026 18:01:22 +0000
Files and hashes:         1: 4i8l1Q-FIgnv4ElEMlL-rxdJK5Q.roa (hash: FSXcacLcS9NFl9QL5QX0dsKZrr4j/cA0RvIb9VXgClE=)
                          2: 5z2ugNN4RBvN-s8lDFfAdlsr0vM.roa (hash: +MFvjCgMQZKr4AK37XrGX62GkhpOrU8EW9hs8ZLbdbE=)
                          3: 91jzPpyhLA-PAXeNm7LV01McVYk.roa (hash: zVfFgQK9yW19axQR7Z9c3CenPU09qBELr2O2n+U7UAs=)
                          4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: Itglk4zEzltInC+LP7sa6PL9BQcqlAbcyUjdRLsWJi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:ac:af:c5:be:6a:d9:9b:63:73:80:75:fd:bf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
        Validity
            Not Before: Jan 26 18:01:22 2026 GMT
            Not After : Jan 27 18:01:22 2026 GMT
        Subject: CN=3f0aee08319456fda97698442baa012e3f371870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:d8:9e:a8:ee:95:4b:fe:12:ef:d3:1e:4b:
                    4e:af:d7:0d:8c:67:57:d5:fc:f0:99:ba:ff:b9:5d:
                    50:7e:37:4c:17:ac:d0:0d:fa:4e:fb:31:87:54:34:
                    db:a5:37:b5:46:78:a1:54:d8:5f:13:ef:b9:95:2a:
                    96:cf:c7:8e:4f:27:46:90:f1:29:82:c5:6d:c9:1c:
                    01:98:95:58:7e:66:12:b9:bc:15:1e:98:c0:3d:3a:
                    22:68:c3:ca:ba:13:a1:09:e1:5c:72:e4:ff:97:12:
                    b3:e7:8d:ce:b6:e9:1e:3e:22:c3:2b:07:d4:ce:e1:
                    eb:f5:74:09:b7:16:6a:3b:da:5d:c7:d7:c3:8f:78:
                    5c:bf:8f:06:d4:c2:ac:9f:de:ca:7c:ed:f2:36:99:
                    b6:52:63:36:14:5f:5d:3f:ab:7a:e3:50:f3:05:43:
                    f0:9d:9b:9e:20:a5:e3:06:d3:5f:55:73:e8:c0:11:
                    7c:31:65:7c:2a:1c:27:eb:a8:14:d9:18:22:89:4b:
                    3e:aa:7c:90:d3:94:f1:97:1f:4d:f4:6f:70:ad:c7:
                    e0:1a:ee:31:b9:e6:b9:34:ff:86:96:c2:b9:f6:a0:
                    d6:29:a6:3f:7f:8a:84:6b:9d:ce:cb:ca:f0:8b:6c:
                    97:c0:02:fa:45:66:09:24:5f:57:38:ac:d8:c2:6b:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0A:EE:08:31:94:56:FD:A9:76:98:44:2B:AA:01:2E:3F:37:18:70
            X509v3 Authority Key Identifier:
                keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:da:d4:88:64:ce:1b:5d:02:9c:4f:00:2f:d4:5d:ed:1a:a6:
         d7:a8:71:a1:7e:ea:9f:ec:df:f7:6b:d8:cd:c5:2e:45:3a:16:
         ca:37:f6:94:e9:d6:b3:6c:e4:69:05:91:f8:0c:0d:55:5c:38:
         3e:4f:7a:d9:fa:90:6e:e1:bd:37:91:63:c7:9b:96:6e:4b:97:
         5a:83:94:b1:96:e4:61:08:5f:93:c3:af:1e:73:02:2c:61:79:
         34:78:6e:01:1e:f9:5d:c2:05:06:7c:94:75:55:1a:2b:42:da:
         3b:e3:3f:a2:a0:e9:0f:c0:dd:dc:11:b3:02:18:2e:20:bb:2f:
         9a:eb:30:6b:4b:61:53:a5:fc:de:9a:8c:1d:fb:4c:d5:34:aa:
         a4:2c:43:cd:48:c0:99:bf:fd:7a:49:ef:47:4b:67:a1:c8:a8:
         04:1f:71:5e:df:29:b6:e8:63:91:8e:ac:20:f1:c4:47:ac:12:
         1a:1c:e4:3f:ba:08:2a:15:67:60:d7:71:48:b8:6f:aa:80:16:
         fd:00:63:26:9a:7c:26:ff:38:91:0b:e5:bb:52:54:6f:c0:8e:
         2a:c6:e4:bc:c9:d7:0b:e9:91:41:3a:cb:c8:a2:04:78:a4:d6:
         15:8f:f4:41:de:a9:5f:2f:26:f4:d2:7c:08:b9:33:37:3f:18:
         3c:4b:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:24:12 2026 by rpki-client