This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          ujI1KjDMn6rASpb24QsvTHmw2afhs0zMyZ3mW3pn4Zc=
Subject key identifier:   CC:00:39:45:97:87:D0:08:15:D8:54:FF:46:16:EE:30:FC:62:34:AF
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       019C2518675B3482D1B1EFCFB4A5AAD51221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          0E9C
Signing time:             Tue 03 Feb 2026 20:01:22 +0000
Manifest this update:     Tue 03 Feb 2026 20:01:22 +0000
Manifest next update:     Wed 04 Feb 2026 20:01:22 +0000
Files and hashes:         1: 8cnYIAFov8XyQ7mz1E9Sdbppeps.roa (hash: djldwC6E58AUQMRWAx9zysCU5AJ6c7wvZ0F1503TLkk=)
                          2: KwmyiRC_z9hBeAnC7i3MkCttPhg.roa (hash: RYQ+8HBwCcHX5dXE4t1Fu0qIu5oQb2OLAyRR/Oum9+k=)
                          3: OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa (hash: qtj2hH8I97IITpCpJRG/cr14e5foNr9LkXNGjgwaZLo=)
                          4: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: iWEGN6X5wBTlAlpu2FYR4dRlRZJwHxbhKWRUHOZg4Dw=)
                          5: YZJglGEU2Eglwipdf3BrI1nPGU8.roa (hash: HvYFoJaRx3YivsI4P51tYw6KXpvSJjjP5d3EcujKEhY=)
                          6: pgXOO-X2YoQD1xUfgpwy2AJKCd4.roa (hash: A+gEG2oAGHzvq6lumOztmhDUDyh36zMLQy0QLJwvsGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:25:18:67:5b:34:82:d1:b1:ef:cf:b4:a5:aa:d5:12:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Feb  3 20:01:22 2026 GMT
            Not After : Feb  4 20:01:22 2026 GMT
        Subject: CN=cc0039459787d00815d854ff4616ee30fc6234af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:26:21:dc:8d:76:f4:ad:25:fd:12:ad:71:
                    46:96:02:0b:a8:21:37:ef:2d:98:3f:40:79:17:a2:
                    91:86:8c:b1:4a:bb:04:f6:fa:c8:ba:c0:8f:f4:ef:
                    7f:a7:7c:ad:a4:a9:66:b8:ad:15:4d:35:8a:c2:3c:
                    86:3c:4a:f5:e7:c3:41:43:36:ac:c4:be:c2:4d:6e:
                    7c:91:50:2f:7d:2f:86:d3:fc:50:eb:b8:c2:08:fb:
                    ad:78:74:65:8c:23:1b:db:5d:4f:53:ef:69:f8:03:
                    be:78:15:61:1b:6d:b7:47:ef:2c:3c:35:66:fc:41:
                    4a:1b:20:a0:0f:8c:db:da:fe:e4:6e:81:9c:5b:0e:
                    c9:7e:29:7b:9f:d8:bc:b8:02:df:35:cb:07:7c:f2:
                    8a:21:61:77:e2:9e:aa:cd:72:79:f9:38:2c:2e:e2:
                    5c:8d:14:ef:07:f5:9c:28:ca:43:80:80:2b:b9:da:
                    8d:51:7a:09:fb:63:bf:3a:86:94:54:82:71:e4:83:
                    55:ac:f9:f0:75:ac:1b:34:55:81:89:f9:2b:d5:10:
                    0c:9d:3b:2e:36:d4:70:d7:ea:1d:50:9a:23:e3:5f:
                    b0:a4:5b:1d:96:23:8f:f0:0c:18:fa:79:01:80:f5:
                    bc:c7:c9:d7:a2:2a:c3:79:40:e3:c4:af:45:46:23:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:39:45:97:87:D0:08:15:D8:54:FF:46:16:EE:30:FC:62:34:AF
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:59:8a:58:f1:13:48:30:d5:15:b4:91:18:0c:03:bf:eb:
         68:f5:92:6b:aa:8a:90:32:f5:59:36:87:a4:21:bf:ec:fe:c2:
         53:2b:7b:51:63:b2:1a:1a:85:d1:a8:ba:9d:41:56:05:94:22:
         a5:63:f6:03:69:51:91:9b:4f:7e:96:54:21:23:cf:13:f1:b1:
         cc:35:35:7e:65:7a:bb:59:13:86:28:23:d5:d4:d6:8e:48:88:
         68:9f:a2:a7:41:8b:20:57:25:98:d4:24:db:a1:66:24:a2:46:
         c6:fe:f5:c6:31:b7:99:6c:c8:80:2b:93:28:2a:ec:85:f1:7d:
         43:89:c6:3a:62:07:bb:87:65:f7:b6:85:2a:b0:8f:be:e2:fd:
         73:b9:4e:c2:55:60:fc:2e:5b:2e:c4:a2:54:60:7a:02:4b:39:
         37:03:bf:cc:0d:47:1e:02:4c:90:e3:b4:32:75:ba:96:0f:93:
         07:4d:e5:57:74:7a:21:3a:88:5f:b8:0a:00:e6:86:62:04:b2:
         9a:e2:3d:56:74:89:2d:2b:db:78:f0:34:29:00:89:70:06:00:
         3c:00:98:fb:71:e9:dd:aa:dc:be:1d:55:aa:38:25:ca:04:1d:
         f6:02:bd:64:6e:fa:89:e0:3f:a0:ab:c8:c4:c6:5b:30:57:7f:
         0f:f2:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:19:39 2026 by rpki-client