This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
File:                     cuv4F-GpLzzX9J32oxwmX_5HgAg.mft (raw, json)
Hash identifier:          +CYqlUOUSNDh9tJkupyG+YVIjpkN23uXyjtcqqPYu2k=
Subject key identifier:   BC:C0:C7:0F:9D:98:E5:5D:3D:2E:C4:8F:30:37:A8:4A:E9:63:6E:41
Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08
Certificate issuer:       /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
Certificate serial:       019B9FD7B6C2059373F3B6C6E2ED703A294A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
Manifest number:          9C
Signing time:             Thu 08 Jan 2026 23:01:12 +0000
Manifest this update:     Thu 08 Jan 2026 23:01:12 +0000
Manifest next update:     Fri 09 Jan 2026 23:01:12 +0000
Files and hashes:         1: 1y5lvBRirf64QUUNUs-wPlahoEo.roa (hash: LhMcKD7g9vzXQej5bGx62E/rTFGZbxyNoCRC/nLvA8U=)
                          2: QV7nlixfPKhI7EyPWNfAD7Hr-34.roa (hash: RcoZUOLY0DZ86B3NQRroG5VCtYfjUx1K45ubhmkvdMY=)
                          3: cuv4F-GpLzzX9J32oxwmX_5HgAg.crl (hash: AB+A5xG0s4IdbB0glghy38JpwR73z1+USUDXTAMnv/I=)
                          4: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (hash: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:d7:b6:c2:05:93:73:f3:b6:c6:e2:ed:70:3a:29:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008
        Validity
            Not Before: Jan  8 23:01:12 2026 GMT
            Not After : Jan  9 23:01:12 2026 GMT
        Subject: CN=bcc0c70f9d98e55d3d2ec48f3037a84ae9636e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:79:68:73:fe:2a:ee:da:ba:1e:ac:b5:c9:
                    ff:9b:30:21:14:f8:c6:0e:35:ed:5e:74:24:f9:47:
                    02:2b:65:e8:61:7c:d5:10:57:74:05:66:c3:fb:59:
                    5f:99:29:d6:22:13:ce:28:cc:72:78:52:9d:4e:1a:
                    7d:11:32:f0:47:99:a3:a0:8f:ad:e5:01:f6:26:10:
                    98:aa:fa:c8:ea:31:80:44:68:fd:17:92:a8:44:5c:
                    da:16:2f:72:18:ec:7c:9f:97:f5:22:67:e0:2b:5d:
                    d8:b3:89:4c:30:4d:e7:7d:5d:c7:ec:d0:ed:fb:51:
                    d3:7a:7b:2d:a9:7f:ac:a7:f8:6f:f0:57:d8:fa:6e:
                    9e:a7:68:15:a3:f3:21:94:13:5c:1e:cb:fd:8f:06:
                    98:56:82:25:b8:d2:7d:17:98:91:b3:c9:cf:0b:41:
                    46:ae:cb:dd:8b:3c:60:80:7f:34:d4:1e:52:43:8f:
                    f2:1f:44:59:de:e4:34:fd:4b:35:30:46:60:38:5e:
                    3f:c5:10:e3:be:20:e0:5c:5a:bc:1c:50:78:b4:d2:
                    2b:cb:4d:99:00:e9:b5:3e:37:54:01:fc:c7:12:34:
                    9c:4e:41:b5:8a:a3:b9:2e:32:17:77:f5:db:2c:c7:
                    0b:fa:76:af:87:6d:b5:94:1d:0f:e7:ad:0b:03:5b:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:C7:0F:9D:98:E5:5D:3D:2E:C4:8F:30:37:A8:4A:E9:63:6E:41
            X509v3 Authority Key Identifier:
                keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:6b:5e:6e:f5:00:d6:d6:4c:0d:36:27:06:03:82:b3:5e:
         6f:a6:56:fe:f6:a8:38:df:aa:6b:fd:83:00:e2:a3:92:66:f4:
         76:c1:87:7f:90:e4:f9:d8:d9:28:b6:ab:e4:2a:40:54:22:60:
         ea:4d:7c:37:c3:7c:31:7c:3a:69:73:30:f1:b5:6a:c8:2c:70:
         c8:6d:93:a4:d6:63:34:33:b9:59:31:e7:75:3c:5a:12:5f:7b:
         9b:8c:80:05:b4:c1:1e:f1:fa:c0:a8:bb:ce:30:6f:a8:aa:fa:
         f3:01:cc:fa:31:ff:83:9d:77:d6:00:fe:38:82:09:19:8b:a0:
         a7:3a:58:68:ea:4f:c7:79:5d:f2:a1:1a:56:0d:25:d8:41:fc:
         31:72:c7:ad:55:93:24:e0:ee:5a:15:9e:02:57:2b:b1:22:37:
         e1:d1:e8:3f:ab:c6:e9:fb:f2:af:f6:cc:07:ec:9b:08:e1:f4:
         27:1b:eb:66:dc:52:e8:05:16:86:5f:e3:fa:8a:04:01:8e:09:
         d3:b3:e2:42:0a:bf:93:eb:6b:f0:39:bf:c1:2d:6f:4e:de:27:
         13:2d:2b:46:01:05:d8:60:0f:f2:ed:37:65:d9:a0:33:37:12:
         c4:e0:fa:67:78:ee:b2:3e:bc:a2:ea:b5:2b:23:51:e0:e8:0a:
         d5:48:27:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuf17bCBZNz87bG4u1wOilKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0
NzgwMDgwHhcNMjYwMTA4MjMwMTEyWhcNMjYwMTA5MjMwMTEyWjAzMTEwLwYDVQQD
EyhiY2MwYzcwZjlkOThlNTVkM2QyZWM0OGYzMDM3YTg0YWU5NjM2ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ15aHP+Ku7auh6stcn/mzAhFPjG
DjXtXnQk+UcCK2XoYXzVEFd0BWbD+1lfmSnWIhPOKMxyeFKdThp9ETLwR5mjoI+t
5QH2JhCYqvrI6jGARGj9F5KoRFzaFi9yGOx8n5f1ImfgK13Ys4lMME3nfV3H7NDt
+1HTenstqX+sp/hv8FfY+m6ep2gVo/MhlBNcHsv9jwaYVoIluNJ9F5iRs8nPC0FG
rsvdizxggH801B5SQ4/yH0RZ3uQ0/Us1MEZgOF4/xRDjviDgXFq8HFB4tNIry02Z
AOm1PjdUAfzHEjScTkG1iqO5LjIXd/XbLMcL+navh221lB0P560LA1tYrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzAxw+dmOVdPS7EjzA3qErpY25BMB8GA1UdIwQY
MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt
YzlmN2MwZTdhY2M2LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2
LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf5rXm71
ANbWTA02JwYDgrNeb6ZW/vaoON+qa/2DAOKjkmb0dsGHf5Dk+djZKLar5CpAVCJg
6k18N8N8MXw6aXMw8bVqyCxwyG2TpNZjNDO5WTHndTxaEl97m4yABbTBHvH6wKi7
zjBvqKr68wHM+jH/g5131gD+OIIJGYugpzpYaOpPx3ld8qEaVg0l2EH8MXLHrVWT
JODuWhWeAlcrsSI34dHoP6vG6fvyr/bMB+ybCOH0JxvrZtxS6AUWhl/j+ooEAY4J
07PiQgq/k+tr8Dm/wS1vTt4nEy0rRgEF2GAP8u03ZdmgMzcSxOD6Z3jusj68ouq1
KyNR4OgK1Ugn+w==
-----END CERTIFICATE-----
Generated at Fri Jan 9 01:14:34 2026 by rpki-client