This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File:                     UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier:          J7ICvc3SDBVcXPrlvKrC9noxPFMayh4l9p1MYFqhUzQ=
Subject key identifier:   C7:0D:81:56:43:B8:5F:98:43:BC:33:16:C2:73:CE:8D:14:97:C3:26
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer:       /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial:       019BAD5D2944102B2D2B33C14D8130B130D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number:          17C6
Signing time:             Sun 11 Jan 2026 14:02:02 +0000
Manifest this update:     Sun 11 Jan 2026 14:02:02 +0000
Manifest next update:     Mon 12 Jan 2026 14:02:02 +0000
Files and hashes:         1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: ksbStY4IWrW2clcxyDhY78lQpoGWwWb56qnh0IzTwg8=)
                          2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
                          3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 14:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ad:5d:29:44:10:2b:2d:2b:33:c1:4d:81:30:b1:30:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
        Validity
            Not Before: Jan 11 14:02:02 2026 GMT
            Not After : Jan 12 14:02:02 2026 GMT
        Subject: CN=c70d815643b85f9843bc3316c273ce8d1497c326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:b8:6a:f4:a5:07:62:b5:90:2c:12:af:42:
                    ba:68:8e:40:2f:f6:55:bb:1c:f5:e3:5f:27:07:c4:
                    f1:b9:05:d2:3c:da:0c:03:35:00:51:39:0c:56:13:
                    b6:72:9d:31:06:4a:24:14:47:94:87:73:eb:93:c2:
                    e9:cc:12:e1:a2:de:45:93:d8:07:11:8e:d4:c7:1c:
                    59:27:de:ff:3f:e1:74:1a:13:a4:2d:c5:62:57:2b:
                    0b:cf:39:4c:49:f2:63:60:b4:a2:e8:2e:62:a1:e5:
                    44:f0:aa:8f:c1:18:7f:22:c6:b7:6d:86:47:12:94:
                    db:68:ac:8b:be:41:d3:a5:2c:cf:f6:4f:20:6b:f2:
                    81:f2:6a:9a:fb:dd:8f:90:c4:50:10:c9:ae:ef:34:
                    75:34:17:ed:a7:35:ab:42:0b:dc:f1:d2:9e:24:3f:
                    08:2a:ef:8b:0c:db:f8:e1:20:4a:4b:00:dc:fb:a7:
                    87:95:a8:2f:a0:95:00:b9:db:05:29:d1:d4:af:7d:
                    58:a3:35:d0:7e:56:9c:92:fc:43:3d:01:90:0d:3b:
                    ce:a8:84:59:71:f1:58:ff:c5:7a:c9:29:69:70:2a:
                    58:55:23:53:b9:2b:6e:88:3e:24:92:e6:88:47:cd:
                    1a:c1:73:44:b1:da:7f:84:46:33:5c:70:ca:a0:f5:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0D:81:56:43:B8:5F:98:43:BC:33:16:C2:73:CE:8D:14:97:C3:26
            X509v3 Authority Key Identifier:
                keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:eb:27:90:a5:57:38:ab:c3:af:f7:85:20:87:a4:e4:4a:
         5d:c8:a9:f7:56:97:60:12:20:6c:73:04:fe:ed:ea:98:bd:e6:
         07:56:6b:c0:2c:37:42:cd:89:c4:84:68:ef:f7:62:3f:a7:f4:
         97:aa:a0:b9:4c:44:91:19:90:b1:ee:c9:58:4a:a6:57:ea:92:
         61:66:67:51:49:97:45:88:91:1e:f6:e7:0a:26:6a:78:40:dd:
         97:4d:1b:d9:ea:1d:49:47:1c:6a:c4:5a:9c:ca:5c:f4:2f:98:
         4d:0f:83:bc:2b:55:e9:3f:f8:4d:63:2a:73:5d:41:b1:01:98:
         7f:54:4b:bd:a1:f8:8c:6b:98:d2:bc:41:f1:d0:a0:f1:ce:7e:
         64:3f:05:11:b7:28:72:bc:fa:fc:88:35:70:44:8c:16:14:f9:
         06:91:9b:06:87:ae:b2:f2:d0:b9:19:9e:11:a1:46:b8:15:52:
         38:da:fe:dc:d9:e0:38:ca:d5:5f:8e:73:81:63:d0:1f:09:8a:
         d3:ab:78:e7:ef:0a:13:a9:b4:67:35:30:8c:c8:fe:44:b1:ed:
         78:aa:fa:44:ad:2b:3a:53:14:08:31:3b:79:15:85:23:f5:11:
         31:1f:07:6d:26:89:6a:f0:3a:d9:f1:bd:8d:9c:4f:e4:4e:4e:
         6d:5e:60:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZutXSlEECstKzPBTYEwsTDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1
NDYzOWUwHhcNMjYwMTExMTQwMjAyWhcNMjYwMTEyMTQwMjAyWjAzMTEwLwYDVQQD
EyhjNzBkODE1NjQzYjg1Zjk4NDNiYzMzMTZjMjczY2U4ZDE0OTdjMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLe4avSlB2K1kCwSr0K6aI5AL/ZV
uxz1418nB8TxuQXSPNoMAzUAUTkMVhO2cp0xBkokFEeUh3Prk8LpzBLhot5Fk9gH
EY7UxxxZJ97/P+F0GhOkLcViVysLzzlMSfJjYLSi6C5ioeVE8KqPwRh/Isa3bYZH
EpTbaKyLvkHTpSzP9k8ga/KB8mqa+92PkMRQEMmu7zR1NBftpzWrQgvc8dKeJD8I
Ku+LDNv44SBKSwDc+6eHlagvoJUAudsFKdHUr31YozXQflackvxDPQGQDTvOqIRZ
cfFY/8V6ySlpcCpYVSNTuStuiD4kkuaIR80awXNEsdp/hEYzXHDKoPVeWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcNgVZDuF+YQ7wzFsJzzo0Ul8MmMB8GA1UdIwQY
MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt
MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx
LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy7rJ5Cl
Vzirw6/3hSCHpORKXcip91aXYBIgbHME/u3qmL3mB1ZrwCw3Qs2JxIRo7/diP6f0
l6qguUxEkRmQse7JWEqmV+qSYWZnUUmXRYiRHvbnCiZqeEDdl00b2eodSUccasRa
nMpc9C+YTQ+DvCtV6T/4TWMqc11BsQGYf1RLvaH4jGuY0rxB8dCg8c5+ZD8FEbco
crz6/Ig1cESMFhT5BpGbBoeusvLQuRmeEaFGuBVSONr+3NngOMrVX45zgWPQHwmK
06t45+8KE6m0ZzUwjMj+RLHteKr6RK0rOlMUCDE7eRWFI/URMR8HbSaJavA62fG9
jZxP5E5ObV5gCA==
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:40:03 2026 by rpki-client