This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File:                     UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier:          wcNwhtQER/NBNk+AkQMab271g4gKfvkW2X6b8H7huC0=
Subject key identifier:   F2:AE:AC:9A:09:04:93:D5:9A:E6:67:C0:A7:91:83:1A:D3:F8:EE:88
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer:       /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial:       019BB1020C67167460CD674EF99F17EA5F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number:          0E54
Signing time:             Mon 12 Jan 2026 07:00:59 +0000
Manifest this update:     Mon 12 Jan 2026 07:00:59 +0000
Manifest next update:     Tue 13 Jan 2026 07:00:59 +0000
Files and hashes:         1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
                          2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
                          3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: jog2GUohEA2sFU4IGK7+LNSwEbUubTbNpyVYH9qL7xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b1:02:0c:67:16:74:60:cd:67:4e:f9:9f:17:ea:5f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
        Validity
            Not Before: Jan 12 07:00:59 2026 GMT
            Not After : Jan 13 07:00:59 2026 GMT
        Subject: CN=f2aeac9a090493d59ae667c0a791831ad3f8ee88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:21:e7:bb:09:ff:5d:b0:ac:b1:4c:de:ac:
                    4b:3f:2f:86:2e:b7:2e:ae:f8:c7:20:f0:86:0b:58:
                    71:15:b3:a2:c3:86:56:46:fb:ee:77:ed:74:4d:2c:
                    0b:a9:4e:e2:da:7c:91:4f:13:2e:58:61:4a:3e:05:
                    d9:57:fb:61:bb:65:ce:c9:6d:c6:83:43:80:c4:5c:
                    d5:96:34:03:c5:56:8c:1e:24:93:86:1e:a7:cf:93:
                    4b:26:ae:8c:2c:be:a7:23:f8:48:14:79:5c:0a:8b:
                    15:fa:6f:af:68:c8:28:68:0b:3c:50:e2:71:bc:86:
                    da:7b:3e:d7:2f:3c:a3:fe:af:1a:96:c7:e2:37:ae:
                    45:da:b6:ab:92:3c:ff:20:b7:79:28:b7:ef:06:94:
                    34:a5:e8:12:22:b5:b8:c2:d4:b0:65:4c:6a:30:c5:
                    0c:fe:30:57:e8:da:5c:ac:9f:d4:59:3c:bd:0f:ed:
                    35:21:66:ec:49:9d:e8:dc:55:9e:40:7e:27:03:2f:
                    0b:bf:2b:c5:5e:0c:c8:c7:a8:7f:7a:ed:0c:e2:b7:
                    4e:38:b0:89:1b:a2:35:79:a7:29:c1:f4:29:e6:7c:
                    c1:7b:e4:1d:4b:b8:59:6d:03:0f:36:f4:30:88:0f:
                    97:b3:db:b3:2c:ed:fc:ed:2f:dd:d9:3f:f7:89:71:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AE:AC:9A:09:04:93:D5:9A:E6:67:C0:A7:91:83:1A:D3:F8:EE:88
            X509v3 Authority Key Identifier:
                keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:68:71:d6:45:00:ed:34:0d:6b:41:97:ff:fb:28:ea:15:e8:
         c7:a5:fa:79:2b:66:c0:a2:0a:20:72:a3:51:51:db:7c:15:68:
         1a:df:78:2f:aa:4f:9d:c0:3d:40:5e:34:3c:ab:9d:47:92:ae:
         e1:8f:ea:b8:33:7c:cd:81:22:4c:1b:a0:ee:32:f4:2d:82:b0:
         35:55:3a:ca:5c:a8:bb:e4:a9:e1:70:23:c8:19:ad:a1:70:4e:
         26:49:7c:16:3e:30:4e:21:fb:00:fe:44:cb:8d:ab:3d:9b:69:
         e2:0c:c2:22:e3:d6:dd:9e:40:b5:a7:ba:18:b1:44:96:8f:b8:
         11:a1:04:8d:7d:80:16:61:38:38:66:ef:2d:52:27:f6:e9:89:
         73:5e:be:53:80:4f:3e:cb:3f:37:0e:1d:85:5b:78:a7:d9:1a:
         70:cf:ee:e3:65:67:c0:ee:78:6b:cc:5d:52:8a:08:45:b0:c1:
         df:8a:1d:e7:8d:df:1f:65:da:1a:83:1e:98:3c:16:d2:1d:32:
         d5:a3:c1:02:f5:2e:6b:94:8b:b6:5a:76:ff:9a:9e:f7:95:d5:
         f6:4c:f2:a0:79:e4:3f:85:b6:6b:a1:2c:d1:ab:8a:1d:fd:a1:
         d9:66:64:b9:45:3b:97:1b:e5:06:29:57:6a:c1:aa:f9:37:8b:
         57:1b:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:09:59 2026 by rpki-client