This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File:                     uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier:          XadKQwIrcQz+cjGd6QIunqtfSXHHW5zbS8xHE51OAcs=
Subject key identifier:   5A:70:1B:E8:68:4A:9A:4B:DA:3D:29:E5:28:9E:39:50:B4:10:13:90
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       019BFC1C29C105ACA54338D841BD7812AC12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 21:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 21:01:02 +0000
Manifest next update:     Tue 27 Jan 2026 21:01:02 +0000
Files and hashes:         1: 1S7wmC7UNi7YklqSCZbK-q4l2aw.roa (hash: grflm2PbIIqM2mq6/myyrNwOE3qgPal6r2qF/DPaHSs=)
                          2: c8CsVa9fXYgke6S-ngSoGNntydo.roa (hash: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4=)
                          3: kaJAlUNXuvgIldw8HKxblZiQ1xY.roa (hash: sktya3OX64f09BO6r6lg+c9q03KXeV5TYfpw1RTIwcY=)
                          4: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: RqSjwVAt2Rrh04iZdeegplFPuk3N3OnzplJuveL52Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:29:c1:05:ac:a5:43:38:d8:41:bd:78:12:ac:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Jan 26 21:01:02 2026 GMT
            Not After : Jan 27 21:01:02 2026 GMT
        Subject: CN=5a701be8684a9a4bda3d29e5289e3950b4101390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:77:fd:b0:79:e0:0c:e4:ee:d1:f2:82:04:51:
                    ab:eb:e2:cb:b2:56:8b:b6:a4:b9:14:89:cb:6d:77:
                    ab:e9:d6:b7:4d:84:fb:7d:94:b6:b0:6c:9d:5a:eb:
                    58:3e:1c:b1:8b:e0:88:60:fa:1d:86:96:cd:d3:ce:
                    4e:37:93:b8:95:1f:ee:c6:d5:42:32:33:81:2e:6b:
                    d1:e0:68:ce:5f:43:91:0c:04:fb:36:88:9f:16:10:
                    c4:a5:52:cf:0c:2c:c6:9d:f1:45:93:92:41:e8:94:
                    96:fa:e0:ea:82:c3:c1:86:c8:0a:63:37:51:8f:0a:
                    6f:e6:ba:58:d6:4f:7e:74:a2:2f:95:90:b4:8c:de:
                    96:48:ec:79:fd:13:4e:04:f8:3d:48:c7:5b:7b:a2:
                    f9:f6:eb:1c:b6:a9:4c:23:6d:d2:64:2d:10:c3:7b:
                    fc:69:ac:3b:e5:97:22:d8:88:1e:b0:52:79:66:9a:
                    6d:5e:16:87:fb:b2:d9:2e:cc:93:6f:f4:1b:32:9f:
                    04:20:61:fe:55:15:19:4d:51:51:c1:1c:34:57:ef:
                    7e:95:10:16:59:ba:6e:c3:22:5a:1c:55:e5:c1:3f:
                    cd:46:06:62:33:67:2c:7c:3c:c0:e3:21:1f:1f:0e:
                    72:3c:53:ac:6b:99:c1:8b:ac:db:df:eb:81:34:9a:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:70:1B:E8:68:4A:9A:4B:DA:3D:29:E5:28:9E:39:50:B4:10:13:90
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:5d:84:1f:3f:a6:6f:5b:75:94:d1:aa:d9:d4:9e:74:82:
         75:21:25:4a:c5:b4:76:e5:ca:79:59:f5:ed:ec:cb:f2:54:fc:
         02:63:d5:82:ad:d2:26:ad:e2:67:7c:f6:7d:33:f4:da:51:52:
         fe:b1:73:74:59:87:0d:f4:a3:a2:f2:9f:6b:c2:db:8a:a7:c9:
         2d:8d:b1:34:d5:1d:90:31:0a:c1:fd:72:9c:8e:5c:3b:a7:19:
         0b:3c:c3:e9:32:ca:89:de:3a:da:65:12:b6:ad:c6:84:7e:aa:
         0d:bd:2b:76:47:10:03:6c:e0:95:c6:97:8d:33:c1:32:49:9c:
         49:50:e8:4b:f7:fd:d9:5e:b8:16:6a:ba:e9:cb:ea:9f:f5:39:
         83:0b:1a:00:5f:45:e5:ff:71:c5:47:5d:16:8e:df:b3:72:6d:
         3f:4e:01:cd:18:84:6d:33:b5:e3:63:a2:4b:42:f5:e4:3e:2e:
         7b:53:6c:5d:98:52:da:f6:64:94:b7:29:7d:7b:23:df:e7:e2:
         ea:fd:ea:bc:5a:40:e9:4f:0b:03:a2:4b:64:3e:3a:dc:de:b6:
         19:bb:e4:aa:27:df:57:da:e5:67:e6:59:c2:d5:a8:e7:17:a6:
         ec:98:ee:ed:8e:1e:6a:bb:ca:f3:ea:58:d1:6a:94:43:11:df:
         fd:83:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:33:15 2026 by rpki-client