This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
File:                     UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json)
Hash identifier:          T+PAkh8N9SDWSCNkYcwFCWu/e00lhkGIhesccdXjwD4=
Subject key identifier:   6E:77:B5:83:BB:6F:15:B5:84:4C:98:12:9D:59:5C:21:CA:40:5C:08
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       019C0FD9C2A67A24D1FE60A5272921E8E7E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
Manifest number:          0971
Signing time:             Fri 30 Jan 2026 17:00:55 +0000
Manifest this update:     Fri 30 Jan 2026 17:00:55 +0000
Manifest next update:     Sat 31 Jan 2026 17:00:55 +0000
Files and hashes:         1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=)
                          2: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=)
                          3: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=)
                          4: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=)
                          5: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=)
                          6: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=)
                          7: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: N/IKAU761hIwLGGLVdBt7SDT6y5agP9LYUx12DswZaA=)
                          8: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=)
                          9: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=)
                          10: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=)
                          11: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:d9:c2:a6:7a:24:d1:fe:60:a5:27:29:21:e8:e7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: Jan 30 17:00:55 2026 GMT
            Not After : Jan 31 17:00:55 2026 GMT
        Subject: CN=6e77b583bb6f15b5844c98129d595c21ca405c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:01:45:73:80:fd:99:23:60:b0:ab:ef:9f:
                    33:a4:59:47:df:3b:ef:b2:42:89:c3:13:28:74:8b:
                    00:4a:81:16:e4:2f:13:8b:14:fe:77:7e:ea:6c:66:
                    2f:eb:3d:22:52:43:96:e7:71:07:df:fe:c4:8b:e0:
                    cb:ed:59:92:45:7d:bd:d2:b7:8a:76:02:96:a3:01:
                    cc:fd:99:0e:b0:a2:1d:d7:eb:e7:5d:b9:04:34:f1:
                    91:19:3f:a3:84:56:e0:ec:e6:78:02:95:5f:2d:fe:
                    7b:30:b9:5a:90:74:99:50:60:92:cc:df:e8:7d:01:
                    cb:af:3b:fb:6f:88:f5:c4:05:a9:55:a9:3b:78:fb:
                    ca:6c:76:54:bc:9a:74:e0:15:dc:a8:88:fe:ae:8f:
                    af:41:07:1c:2f:9a:4f:2d:3d:7f:32:0d:78:29:d3:
                    06:41:eb:03:a1:35:ae:f7:c1:e5:26:aa:12:d0:fc:
                    60:bf:5e:2d:87:59:3e:8f:c4:2f:dc:0c:b1:05:a7:
                    3f:ef:16:c8:4f:a9:86:20:27:81:47:d4:18:5a:2f:
                    6a:99:29:71:67:c4:c3:27:a9:04:2a:40:05:7d:96:
                    1a:fc:85:e6:4d:69:7b:4e:74:fa:29:0a:91:c8:73:
                    2d:f1:c7:1c:c3:5f:b0:36:32:2a:e7:46:8e:8d:91:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:77:B5:83:BB:6F:15:B5:84:4C:98:12:9D:59:5C:21:CA:40:5C:08
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:74:d0:58:14:d3:5a:61:8a:e1:6d:31:29:1b:d7:e9:d5:
         81:19:fc:f3:26:91:e3:28:ec:bc:d5:2f:e8:6c:f4:c1:e1:7c:
         29:0c:fc:9b:06:77:ed:41:18:42:b1:59:94:c6:9d:74:40:73:
         dc:a7:58:01:bb:5b:b1:c2:a5:6d:67:4c:dd:2d:aa:06:a5:ad:
         b8:5b:26:95:26:9b:b0:24:d8:7f:f8:93:8e:68:4e:bd:e0:c3:
         38:62:09:f4:7c:a7:d5:09:09:cd:1a:f6:9a:25:00:e1:36:a4:
         00:3e:26:88:9a:4d:b8:f1:b0:e2:0c:bf:24:c4:9b:37:87:3f:
         da:03:1b:73:b3:f0:f2:74:64:f7:fd:e0:c1:ca:cf:eb:4a:e0:
         01:f1:53:13:be:93:f0:da:61:cc:cd:52:43:93:88:ef:36:bf:
         b7:19:13:bf:40:53:18:99:51:d4:a7:b7:ec:d8:ec:22:7b:0b:
         43:12:9f:5f:94:a0:8a:1f:41:0e:3e:b6:8d:28:14:ad:70:e0:
         2f:96:78:69:47:b3:eb:78:2e:9c:57:0a:9d:b7:1b:e4:be:5c:
         6f:f7:1e:55:9f:42:0e:e9:30:7a:dd:36:1a:e5:ac:80:00:cf:
         e2:3f:f9:8f:de:0c:f8:4e:12:6d:9c:59:2f:be:f2:9f:0f:56:
         04:91:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 20:28:46 2026 by rpki-client