This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File:                     uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier:          X2XELksESM3EwJoRKfRT0BT0zgXLLb9ZncieXNoyZRU=
Subject key identifier:   1F:BD:68:40:C7:D9:1F:03:6C:7E:14:A1:E5:FD:FB:2D:87:F0:87:14
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer:       /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial:       019BFFC1EBDF05A48E161C23E2835CC3267B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number:          1744
Signing time:             Tue 27 Jan 2026 14:00:57 +0000
Manifest this update:     Tue 27 Jan 2026 14:00:57 +0000
Manifest next update:     Wed 28 Jan 2026 14:00:57 +0000
Files and hashes:         1: 8y3Tj4TsEaNV9uqE3_Wm8d75SXY.roa (hash: yZH4sqNiTJoNNbuM1J9mJYZWJbe1HILioSLqth5sEdY=)
                          2: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (hash: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=)
                          3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: ARhXueZStEMQKlKaYPud4K5TIUD72RjSycyEIaKGDqs=)
                          4: xM92tYiQehjeO5ojOE8TGZZGuZY.asa (hash: TkbYnjzZBto9eV3vsUOm7zMAFLGivtWeG8LvnTbvI3E=)
                          5: xmUAUtjjKo_df9Wg6bpHQhUKjGA.roa (hash: xGARvg6pEgnNWLquSjw9VUYfG5YGdSpILp+G0uSRXfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:c1:eb:df:05:a4:8e:16:1c:23:e2:83:5c:c3:26:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
        Validity
            Not Before: Jan 27 14:00:57 2026 GMT
            Not After : Jan 28 14:00:57 2026 GMT
        Subject: CN=1fbd6840c7d91f036c7e14a1e5fdfb2d87f08714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:ad:70:47:5f:eb:18:77:47:bd:18:af:0c:
                    18:66:6e:0c:fc:41:43:b0:d2:b1:d8:c0:e2:a2:3a:
                    41:2a:89:ff:79:ed:42:b4:d2:e6:d0:b7:b0:d2:ea:
                    41:0d:be:48:6d:e6:7a:7e:4f:d6:46:1a:71:d2:6c:
                    fb:c1:66:87:70:2a:c0:76:8a:ee:fb:33:05:e0:34:
                    38:6e:a8:c2:ad:3a:f1:8a:41:14:bc:a3:ea:a1:6f:
                    01:f7:82:2b:c1:4e:0c:d0:c6:03:f2:f9:6e:62:39:
                    c7:d9:27:71:6f:ac:a7:e9:df:13:ec:f9:39:ac:b3:
                    20:b0:8f:bb:17:8f:7d:3a:c8:98:9b:60:dd:81:39:
                    90:ba:91:23:b1:55:13:55:9f:80:0d:4f:46:82:e1:
                    16:2d:80:71:3b:91:bc:c3:3a:78:53:1f:af:09:ad:
                    6e:6b:51:08:45:34:25:a3:33:e3:65:fb:63:bf:b7:
                    52:da:1f:a6:3d:97:d9:35:96:da:94:30:a4:c6:7b:
                    71:21:71:3c:33:a8:04:3b:87:ef:7e:b6:e9:89:aa:
                    38:20:1f:12:9f:ba:ce:67:ea:a7:33:7d:a1:fd:b9:
                    32:0c:db:2c:ca:6b:77:33:90:54:75:7a:2f:9e:41:
                    80:44:e1:e0:59:0c:b8:30:10:fb:51:1d:0f:e4:7b:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BD:68:40:C7:D9:1F:03:6C:7E:14:A1:E5:FD:FB:2D:87:F0:87:14
            X509v3 Authority Key Identifier:
                keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:76:e6:3a:d5:c4:46:86:9a:ee:30:03:02:04:38:2a:21:
         c1:fd:f5:d3:65:47:54:5f:76:8c:39:d3:1a:b5:41:a6:9f:17:
         16:3e:55:be:6b:e2:d1:db:82:ff:46:61:19:d7:a8:79:a3:84:
         13:a0:20:91:6d:e7:c4:8a:79:80:fa:a4:cb:a4:ff:3a:45:72:
         5d:c4:40:0a:5a:55:af:47:63:74:e2:9c:2a:da:52:56:4e:5a:
         b1:bc:61:f4:6e:c8:87:e5:ce:a1:7f:e4:ae:20:29:0c:e2:44:
         d6:de:77:df:6a:80:b4:46:87:a8:8d:69:77:71:c6:3d:7b:71:
         9c:6d:ce:14:70:2b:d9:e3:62:8f:f2:e8:08:34:1d:c4:60:d8:
         de:a5:02:5d:4c:bf:47:af:b4:92:c6:ec:d9:32:90:7d:07:fb:
         b1:29:98:71:e9:72:6b:9c:01:36:2a:bf:f7:f9:46:59:28:7b:
         0b:a2:db:8d:88:f1:6b:7f:9b:7b:28:40:76:56:f3:f7:2b:13:
         1d:50:cf:62:2d:69:58:6e:f2:0b:d2:95:94:60:2d:de:df:f3:
         63:07:6a:ee:5b:44:33:c7:07:0e:0a:28:29:cb:c9:a8:2b:88:
         07:2e:0c:37:60:41:d4:83:f9:bc:a4:23:8b:c0:e3:dd:54:68:
         e5:c2:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:37:57 2026 by rpki-client