This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          przD5ajZzTAv+YaYmqzyLNY8QLgmEX6e395aUn/LBXg=
Subject key identifier:   4C:1B:19:6D:97:21:72:DC:83:73:F1:CE:CA:91:E4:71:33:2F:EB:18
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       019BADCA6A931A34F6DD47C62AEA95B344BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          145E
Signing time:             Sun 11 Jan 2026 16:01:22 +0000
Manifest this update:     Sun 11 Jan 2026 16:01:22 +0000
Manifest next update:     Mon 12 Jan 2026 16:01:22 +0000
Files and hashes:         1: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          2: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          3: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          4: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: eYgyjYLfJwuY//cehPlfceURRtWi0yE+SBgAdw60Ulg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ad:ca:6a:93:1a:34:f6:dd:47:c6:2a:ea:95:b3:44:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Jan 11 16:01:22 2026 GMT
            Not After : Jan 12 16:01:22 2026 GMT
        Subject: CN=4c1b196d972172dc8373f1ceca91e471332feb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:60:f9:88:b2:74:75:0d:53:c7:85:d2:96:0b:
                    2a:70:b9:64:47:47:2e:53:af:34:55:12:6b:d1:bd:
                    bb:91:14:0b:15:9a:7b:ed:74:95:87:94:2b:3c:f0:
                    6a:31:d9:76:c7:ef:30:9d:bd:6e:71:eb:f2:f5:f4:
                    d5:65:90:ae:c3:c3:fe:a2:91:f6:5b:6a:95:2b:0e:
                    22:50:00:46:62:12:31:d3:0d:2f:78:10:18:b4:7e:
                    52:37:56:0e:9a:96:80:26:66:16:86:c3:6a:f8:0e:
                    3d:ae:35:aa:55:38:23:84:76:ed:6f:49:23:76:19:
                    9c:be:d8:eb:d8:0a:41:e9:e8:4d:7b:e8:dc:ef:ec:
                    55:e1:56:f9:60:ea:88:da:a3:13:48:23:6d:51:d7:
                    62:9d:7d:84:5e:e4:03:23:6b:28:3d:e0:d6:a1:a8:
                    82:2a:ae:e5:da:e6:7d:57:b2:b1:05:ee:b4:81:05:
                    83:a3:05:af:b9:b4:50:17:d8:c9:82:f7:b4:e2:3b:
                    9e:99:e8:6f:f4:61:4e:93:99:0b:36:02:f0:bd:ab:
                    e7:44:0f:05:2d:c9:a3:27:8c:c2:5f:7b:a0:7b:98:
                    2d:c8:a3:1f:6e:88:80:cb:29:45:4b:23:22:d8:ee:
                    61:2e:cc:05:cf:90:b1:00:7d:b7:03:bd:00:00:49:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1B:19:6D:97:21:72:DC:83:73:F1:CE:CA:91:E4:71:33:2F:EB:18
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:6e:1b:8b:a8:db:14:b1:49:75:16:f5:8a:92:68:b5:e1:
         3b:e3:b0:c2:9b:7d:70:4d:95:a8:a3:e1:04:00:90:86:96:d2:
         e5:fc:cb:99:0d:2b:30:ba:ff:fb:69:f0:d3:1c:9c:a3:be:26:
         91:f0:6e:71:fc:a3:3e:9c:5b:59:f3:54:cf:04:e5:9a:2a:b2:
         83:fc:88:97:8a:57:f2:cf:ec:d2:3a:99:19:77:05:6e:e5:ba:
         7f:a1:27:51:42:77:53:54:86:c2:e7:62:ba:9d:e5:4f:73:6e:
         65:d6:d2:c7:91:4c:f0:ec:87:87:7e:d3:8d:e4:11:52:26:57:
         42:ca:f3:fd:05:52:54:6f:9f:d6:b1:43:c6:0c:98:eb:a9:4b:
         ae:15:9e:13:0b:22:80:7c:a0:6d:62:45:7c:85:eb:f0:e9:59:
         de:03:aa:a6:a6:d7:79:12:36:2c:bb:a1:82:c2:54:32:d4:ba:
         46:eb:60:1e:91:82:95:c5:11:cc:b6:ea:44:09:29:07:25:3d:
         3c:74:36:be:d7:20:5b:0d:40:12:a2:f0:64:8c:ee:18:97:33:
         48:09:a3:43:66:44:ce:37:c1:1f:e8:64:2e:0c:ab:95:62:25:
         6c:70:07:a0:eb:5e:97:b7:5f:a5:e4:9c:cf:1a:b4:e2:84:17:
         95:73:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:53:45 2026 by rpki-client