This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File:                     YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier:          76WCWgSkmeTFZsaSm26eAW/yOtl3R94hZlJif0NJwwc=
Subject key identifier:   1E:27:7C:B7:B0:43:AB:B1:96:8E:D9:B4:E1:C8:40:6F:71:58:91:71
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer:       /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial:       019BF5753952151CA44527064E24434910B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number:          13B3
Signing time:             Sun 25 Jan 2026 14:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:58 +0000
Files and hashes:         1: BGkcJfFENHuGNqi5KdKaJIpLpGs.roa (hash: 14oAN4dkpEIBe9l+/o/n9bZWb4SWffTykhypz7bbQig=)
                          2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: 5gCYRs+xlIftU7/jyiJf3FWGRPeEDvqNt9jPew9keoQ=)
                          3: i8xS2SNRoq_4w2VKsWzO9ZVkL-Y.roa (hash: J61ECAA02vndrCEVyDU5JqxkNGwrJIPqNyxo3rSAtJg=)
                          4: vmeyUsb0B6nt7RQL8zVkNFOh_tA.roa (hash: QL+UGoxzg+c0nwUj+09aM3m1fGQQjVUbgtOrR4jVg/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:39:52:15:1c:a4:45:27:06:4e:24:43:49:10:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
        Validity
            Not Before: Jan 25 14:00:58 2026 GMT
            Not After : Jan 26 14:00:58 2026 GMT
        Subject: CN=1e277cb7b043abb1968ed9b4e1c8406f71589171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:00:54:82:fc:48:f9:11:54:97:5a:93:cf:
                    c4:61:77:f9:90:aa:dc:ce:1f:6a:24:cc:ca:b5:95:
                    f0:34:a6:6b:74:6d:c5:d9:96:6a:01:2b:f3:12:9f:
                    1f:1a:06:9b:83:44:4c:19:29:de:9b:a2:56:cc:50:
                    71:bb:e2:53:2f:3d:a6:fe:01:24:81:f9:14:07:ee:
                    55:cf:63:db:41:74:c6:38:8a:75:40:3f:84:19:91:
                    72:95:3d:63:24:97:10:9f:8e:07:17:2d:6c:fe:1d:
                    fd:cc:3f:35:66:b3:91:b6:5c:d5:6e:be:a0:b7:00:
                    a2:6d:77:dd:cc:79:ab:7a:67:28:f5:b0:0e:b1:0b:
                    5f:53:b6:b0:3a:2c:e6:68:4e:e4:38:76:e7:bf:9b:
                    a2:07:a7:f4:96:f5:4b:b9:64:0a:ea:a0:9e:34:56:
                    b0:04:53:47:03:0e:a9:33:16:6d:b6:f2:89:d8:de:
                    44:4f:cb:32:bc:fd:f2:be:f0:bc:f4:76:cc:30:e5:
                    fa:60:74:c7:92:02:d1:84:1c:33:16:e7:d8:a5:0f:
                    0e:97:48:16:86:1d:53:63:29:60:60:fe:0d:78:f3:
                    43:c6:6b:7d:59:a8:0b:8d:64:49:2c:bf:fc:42:7d:
                    cd:d2:3b:d1:e4:f6:ce:32:d0:72:45:6a:a9:3a:82:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:27:7C:B7:B0:43:AB:B1:96:8E:D9:B4:E1:C8:40:6F:71:58:91:71
            X509v3 Authority Key Identifier:
                keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:35:ac:d0:0b:21:b5:8b:b2:fd:0a:99:05:31:0d:80:ad:
         0f:47:34:1e:ac:8e:a2:1e:6b:9a:1a:b4:18:7f:f4:c4:b1:a0:
         7e:a8:d2:19:09:be:ea:7e:ec:2e:55:7c:59:c6:42:cf:70:8b:
         0f:ed:62:8e:77:81:49:cd:f5:2b:a1:8e:c7:67:7b:52:c8:4a:
         29:43:a6:ea:f6:01:94:2f:43:02:94:fd:c0:48:15:2b:2d:bd:
         e7:f1:1a:1e:07:b9:18:ec:01:fe:f4:88:c4:9c:6e:f2:22:4c:
         ca:64:07:59:a2:aa:17:7e:04:f1:23:56:eb:dc:03:98:28:e5:
         dc:a0:12:07:e6:9b:49:3c:63:39:11:7b:05:8b:9c:1d:be:8d:
         e0:f9:9b:44:61:58:6a:af:b9:b7:41:76:fa:d2:d0:02:e2:59:
         3f:30:7d:e7:65:7b:25:80:92:1e:e0:fa:45:96:f0:80:b0:a3:
         ac:29:3e:a7:b4:35:51:fe:01:c2:63:16:88:02:da:cf:a9:e4:
         32:50:1e:09:51:94:da:56:2f:6f:fc:d1:12:be:22:58:ff:db:
         81:35:72:b2:c5:68:21:45:dd:75:bc:7b:a2:95:e5:78:67:97:
         32:d5:dc:f9:b2:a8:b1:b0:1c:83:2e:64:97:5d:84:5e:d8:57:
         69:37:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:06:19 2026 by rpki-client