This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File:                     xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier:          dQ9myvYdcwJBbhVJtlFApOmKARuhL2fxNwrQn2aYqEw=
Subject key identifier:   B4:57:8C:09:5B:2D:96:45:2D:1D:05:E6:3E:34:69:8C:4D:FA:6F:DA
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer:       /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial:       019C20CD9603C3082BE5C66462902161A0FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number:          1803
Signing time:             Tue 03 Feb 2026 00:01:09 +0000
Manifest this update:     Tue 03 Feb 2026 00:01:09 +0000
Manifest next update:     Wed 04 Feb 2026 00:01:09 +0000
Files and hashes:         1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
                          2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
                          3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: fPeXf+/FVnGG7ooKjFjfRrjyWuFKQsDrD0WJoLhcIFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:cd:96:03:c3:08:2b:e5:c6:64:62:90:21:61:a0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
        Validity
            Not Before: Feb  3 00:01:09 2026 GMT
            Not After : Feb  4 00:01:09 2026 GMT
        Subject: CN=b4578c095b2d96452d1d05e63e34698c4dfa6fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:48:01:40:67:ca:17:07:65:54:9e:2e:87:
                    c9:ee:3c:d0:de:d3:3d:36:d4:3e:c6:f2:3c:ce:a1:
                    73:c4:03:63:60:13:64:ef:0f:9e:6e:a6:1c:e4:5d:
                    69:1f:b2:3b:ef:0c:2b:f7:1e:a5:d5:66:0b:49:b6:
                    19:0e:f2:e6:8a:29:5d:38:11:50:ed:89:74:63:0f:
                    8d:b5:24:9b:aa:71:3c:49:13:32:20:42:43:20:be:
                    f3:14:cf:eb:03:1d:9b:07:58:17:60:e2:59:ff:82:
                    ad:fa:88:93:02:17:f7:a3:61:8f:b0:89:c1:96:2c:
                    5d:37:f4:7a:0f:08:89:8c:0f:b4:78:f1:19:b8:f0:
                    ff:e5:05:29:12:f0:ca:ae:75:91:40:fd:b0:d2:23:
                    43:16:70:f2:c6:04:fd:f3:39:8c:28:ec:8d:a3:f0:
                    8b:08:9b:c2:5a:2d:26:2a:9c:46:49:93:99:6d:92:
                    90:7a:43:37:7a:d2:2c:dc:af:cd:6d:58:f4:23:50:
                    96:49:01:42:a7:a1:19:92:32:fd:d8:f9:b5:a3:df:
                    04:cf:b6:2c:13:7b:a9:2b:e4:e5:0b:21:6a:f6:59:
                    cf:eb:39:7c:20:31:13:26:7e:47:e6:b1:99:e6:3e:
                    78:60:e5:f3:c2:5d:c6:17:22:f4:3a:71:59:58:78:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:57:8C:09:5B:2D:96:45:2D:1D:05:E6:3E:34:69:8C:4D:FA:6F:DA
            X509v3 Authority Key Identifier:
                keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:54:15:c0:f7:cf:01:00:67:ee:7e:0c:1f:3c:7d:82:ed:
         ff:69:9b:1e:ed:8b:49:71:07:31:3d:ee:a5:11:22:40:06:ec:
         10:6c:7d:87:68:c2:d2:cd:fc:40:20:9e:fb:56:47:cb:f3:c0:
         b9:b6:38:83:b2:28:b3:16:d4:3a:ca:91:cf:a2:12:83:6a:58:
         e3:50:1e:49:47:14:ad:c0:9d:00:bb:92:2b:c7:03:6f:03:d6:
         b2:4d:24:ca:4e:15:62:8a:8e:2e:1b:25:62:10:ae:0f:25:ef:
         fb:e8:46:d3:43:07:14:b6:9c:a4:51:8a:0b:5e:1c:6b:0e:ef:
         82:e4:0b:29:d6:d6:42:04:ec:24:ff:91:48:11:50:33:e6:ea:
         a7:f8:8e:91:48:85:23:bf:c1:82:70:20:f6:fd:eb:32:07:54:
         ba:20:f8:10:aa:ef:08:25:b8:66:61:1c:6b:c4:31:57:b7:f6:
         fb:23:f2:a1:3b:37:e2:14:d6:d6:a6:b3:23:b0:23:8b:2e:cb:
         38:39:60:92:2c:a2:b8:c3:3e:f1:a6:21:72:10:02:c5:cf:35:
         66:62:19:06:d9:57:51:ba:e9:c1:af:0f:8c:78:d0:5e:c8:ff:
         68:34:06:f1:33:67:64:41:40:70:c2:d2:75:4d:78:29:c4:8a:
         85:c2:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 04:56:07 2026 by rpki-client