This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
File:                     Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft (raw, json)
Hash identifier:          jmtt6E/+ggHC3c0jLg4IOKXbCgg4B4Zmf9GuKo5U4vA=
Subject key identifier:   84:8F:8B:F6:BA:2D:05:BD:33:E6:D7:01:E0:9E:BB:61:D3:0A:E4:11
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Certificate issuer:       /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial:       019BFCC104FDEB5A80767DCC97A605483251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
Manifest number:          0807
Signing time:             Tue 27 Jan 2026 00:01:06 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:06 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:06 +0000
Files and hashes:         1: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl (hash: BbnO12xyTE1Xr++F3dS3jKKZcQsG2iddshLR3x0yPTQ=)
                          2: cYBrnaocLjA_DaHgp5BukHetZEw.roa (hash: WSYQBuYEacORy4ZqYo8p12iSgdVpFErki2QNc5JX+Q8=)
                          3: nfAlOJt-tJuBQ6TVdWgraK4LPcs.roa (hash: u0sCdtCOmFGO0vVCgVhH5vis+INdwLq690ISXBM58Ak=)
                          4: re1kMr4ZO4EcntSxzQLItfZHji4.roa (hash: pb/ZpVFwMQItfSjJxD0Eukfy73dUuFN63jAongafzPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:04:fd:eb:5a:80:76:7d:cc:97:a6:05:48:32:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
        Validity
            Not Before: Jan 27 00:01:06 2026 GMT
            Not After : Jan 28 00:01:06 2026 GMT
        Subject: CN=848f8bf6ba2d05bd33e6d701e09ebb61d30ae411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:d6:cc:bd:3d:f9:c1:ca:ad:97:cc:e1:eb:
                    09:7d:9d:df:a8:bb:1c:cf:f0:f6:75:33:48:60:b2:
                    6d:c4:a1:dd:e7:30:00:4c:a8:37:28:9a:44:18:e4:
                    90:9d:88:ff:81:d1:71:8a:b6:35:c2:7e:cc:2e:51:
                    e5:5f:35:0e:0d:da:98:da:33:37:ef:4c:24:7f:db:
                    d7:b7:c0:e9:d7:ac:40:50:c4:60:3d:88:42:6e:80:
                    ff:1b:36:e1:c2:db:d8:05:29:e4:52:df:06:7b:bf:
                    5d:8b:1e:89:a7:0a:42:a3:53:56:38:de:42:72:cb:
                    91:ab:b5:71:36:4c:8e:07:ec:07:40:5a:58:28:1d:
                    14:b2:48:24:f5:c9:98:b1:08:00:08:40:e7:ad:42:
                    e6:3c:97:cb:19:56:62:9f:fc:2a:3d:b2:c0:63:b8:
                    7e:15:47:2a:b3:45:31:c5:65:9b:67:cd:34:24:78:
                    0a:42:84:86:06:09:0b:c4:d4:c3:82:7e:7b:36:17:
                    82:5b:f4:1d:58:e7:1f:d8:a7:16:93:54:24:33:a2:
                    39:25:e2:f8:fa:93:b9:cb:ba:3d:2e:e5:96:aa:57:
                    4c:86:6c:2b:88:75:64:d2:d2:c5:82:a8:e1:b7:94:
                    6a:cf:2c:29:03:96:ba:e5:56:c8:84:32:19:76:d4:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8F:8B:F6:BA:2D:05:BD:33:E6:D7:01:E0:9E:BB:61:D3:0A:E4:11
            X509v3 Authority Key Identifier:
                keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:e4:3c:ae:76:a1:90:55:ac:ed:c8:9b:42:3e:ea:e7:11:
         a5:2e:70:e4:b5:b7:c6:00:99:b1:70:67:83:8b:73:14:ff:a5:
         a7:4b:e7:c9:52:04:5b:90:20:96:a6:ff:7b:ee:6f:4e:76:98:
         05:5d:a9:17:0b:0e:f1:81:9c:54:39:6d:2e:2f:66:c5:7c:fa:
         6d:c9:ea:0b:b8:d4:e5:e0:0f:cb:03:ce:c3:63:f9:63:84:84:
         17:d1:b9:3e:b9:49:97:f7:a8:fe:aa:d6:12:75:d5:f8:ac:3e:
         63:99:c4:22:34:34:72:ce:86:a9:93:56:6e:a9:5b:e1:b7:68:
         49:55:b4:b7:c9:75:27:9f:a3:12:13:5b:61:70:fc:bb:c7:a5:
         b9:3e:94:10:44:88:57:84:db:d5:22:a4:83:5c:c8:d3:ca:b6:
         49:64:d4:2f:ca:e7:cf:13:75:b6:94:12:05:ef:6f:82:fb:a9:
         73:05:59:be:74:b3:40:4d:fc:6e:8b:86:1d:53:42:90:51:86:
         76:bc:fa:58:23:6a:cd:3d:e8:b1:a6:dc:0e:86:78:f3:27:cf:
         6e:f5:39:9d:44:a0:22:31:58:89:08:86:6d:8f:9c:57:fb:21:
         3b:d2:9c:2f:3d:db:e1:05:bf:9f:2d:c8:15:40:80:f4:e5:02:
         19:00:45:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8wQT961qAdn3Ml6YFSDJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj
OTgzOTcwHhcNMjYwMTI3MDAwMTA2WhcNMjYwMTI4MDAwMTA2WjAzMTEwLwYDVQQD
Eyg4NDhmOGJmNmJhMmQwNWJkMzNlNmQ3MDFlMDllYmI2MWQzMGFlNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyXWzL09+cHKrZfM4esJfZ3fqLsc
z/D2dTNIYLJtxKHd5zAATKg3KJpEGOSQnYj/gdFxirY1wn7MLlHlXzUODdqY2jM3
70wkf9vXt8Dp16xAUMRgPYhCboD/GzbhwtvYBSnkUt8Ge79dix6JpwpCo1NWON5C
csuRq7VxNkyOB+wHQFpYKB0Uskgk9cmYsQgACEDnrULmPJfLGVZin/wqPbLAY7h+
FUcqs0UxxWWbZ800JHgKQoSGBgkLxNTDgn57NheCW/QdWOcf2KcWk1QkM6I5JeL4
+pO5y7o9LuWWqldMhmwriHVk0tLFgqjht5RqzywpA5a65VbIhDIZdtThxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISPi/a6LQW9M+bXAeCeu2HTCuQRMB8GA1UdIwQY
MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt
YzFlOTc0YmVkMTJlLzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl
LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPv7kPK52
oZBVrO3Im0I+6ucRpS5w5LW3xgCZsXBng4tzFP+lp0vnyVIEW5Aglqb/e+5vTnaY
BV2pFwsO8YGcVDltLi9mxXz6bcnqC7jU5eAPywPOw2P5Y4SEF9G5PrlJl/eo/qrW
EnXV+Kw+Y5nEIjQ0cs6GqZNWbqlb4bdoSVW0t8l1J5+jEhNbYXD8u8eluT6UEESI
V4Tb1SKkg1zI08q2SWTUL8rnzxN1tpQSBe9vgvupcwVZvnSzQE38bouGHVNCkFGG
drz6WCNqzT3osabcDoZ48yfPbvU5nUSgIjFYiQiGbY+cV/shO9KcLz3b4QW/ny3I
FUCA9OUCGQBFXQ==
-----END CERTIFICATE-----
Generated at Tue Jan 27 04:26:22 2026 by rpki-client