This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File:                     YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier:          uATaXzujDo4Ij3m0XL1Ud573zf9q6UAe0eszQC0dJAE=
Subject key identifier:   26:E3:35:25:59:91:36:ED:85:6D:21:06:09:40:C4:1A:45:DD:20:87
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer:       /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial:       019BF574E1960954E4B6758B405CFACC0BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 14:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:36 +0000
Files and hashes:         1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
                          2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: lAvbKcUXiJO1skDnMTLNuODnMc66/5yDk9YqdSOaGFM=)
                          3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:e1:96:09:54:e4:b6:75:8b:40:5c:fa:cc:0b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
        Validity
            Not Before: Jan 25 14:00:36 2026 GMT
            Not After : Jan 26 14:00:36 2026 GMT
        Subject: CN=26e33525599136ed856d21060940c41a45dd2087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:05:43:da:e0:1c:fd:61:ac:1f:ad:50:99:
                    50:1e:2c:3c:b5:97:96:c8:f0:dc:42:c1:5e:38:cb:
                    56:ec:3a:4c:05:b3:3a:d6:d0:ac:c0:c2:d6:20:a0:
                    f6:c9:78:d7:d0:0e:44:00:52:c8:73:a7:c3:44:24:
                    62:bb:c8:93:1f:44:04:a3:a2:40:56:f8:5b:56:0f:
                    11:b8:4c:46:cd:13:c9:e5:51:c3:9c:eb:dc:ad:ef:
                    6d:06:b1:92:fe:30:de:c0:0a:d3:0a:e7:fc:13:48:
                    8b:ab:3c:45:d8:2e:af:de:f3:17:b0:94:f9:61:6d:
                    93:6c:83:70:f0:6b:54:b3:aa:fc:a5:88:2a:d4:dc:
                    91:4b:a3:16:a1:55:9c:91:02:11:be:ec:25:a9:53:
                    85:27:aa:14:05:30:2c:48:2e:44:25:80:65:1f:e2:
                    35:26:fe:c2:e4:88:b2:49:06:10:6b:89:2e:50:53:
                    57:9f:53:ca:5b:9d:e6:56:bc:f6:03:9f:fb:be:f0:
                    b4:58:8c:73:4d:85:e7:5a:38:3d:31:41:58:33:79:
                    71:dd:a7:1e:1a:84:56:58:ff:23:6b:13:0b:38:40:
                    5d:ab:12:8f:ce:37:22:8b:e8:6d:75:52:ea:31:b1:
                    1f:17:eb:86:89:40:28:78:15:99:f1:e7:ec:1c:05:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:35:25:59:91:36:ED:85:6D:21:06:09:40:C4:1A:45:DD:20:87
            X509v3 Authority Key Identifier:
                keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fe:ef:25:1f:9e:ba:3a:8d:13:61:0c:6a:e4:20:a7:11:07:
         46:5c:5b:ee:98:1d:9a:cc:f4:d3:c9:58:98:79:35:f4:8a:9b:
         fc:cc:4b:05:db:25:95:b6:35:6e:5a:bb:7b:53:5a:1f:1a:d7:
         20:6a:4e:e5:29:ca:fc:ce:c2:67:0b:69:3b:08:dd:bc:55:96:
         a2:5c:e1:99:ef:85:d3:a2:5b:03:9f:a6:bf:12:50:8e:e9:b0:
         e1:7f:ef:6c:a6:57:f9:df:52:32:1a:fe:e0:7f:9e:88:bc:e4:
         e0:99:36:11:d7:df:86:af:60:d2:aa:d6:a8:4c:83:b3:68:47:
         40:b0:84:7d:73:93:4f:f5:83:54:e0:e7:08:1f:28:bb:e1:6d:
         0a:a6:b4:78:89:b8:d8:a3:a2:70:bc:9f:bc:4f:8e:fc:85:f4:
         61:70:f7:55:83:72:38:2d:99:e7:6d:b8:28:92:57:10:6f:cf:
         12:75:f3:54:80:99:52:07:f7:bb:c4:71:13:62:95:51:f5:6c:
         3e:9f:d1:48:f1:38:79:86:35:b7:37:38:84:21:49:af:fb:c7:
         09:5c:c1:55:49:da:74:60:00:00:8a:de:a1:b7:89:18:26:1d:
         6d:a8:27:08:d0:97:db:e4:a8:5a:d1:ef:05:d5:9c:cd:a7:da:
         9b:1d:ae:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:02 2026 by rpki-client