This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File:                     YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier:          7UKK6yA1Xl4n6+RC48MGAFH5w3Mkra5iKsoR+i8PxYY=
Subject key identifier:   B8:A7:1B:05:9E:C7:D0:61:1A:98:D8:9F:8A:5C:6E:2B:6E:24:0B:B2
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer:       /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial:       019BF68810A524E05778E47F7BD8951BB219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 19:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:10 +0000
Files and hashes:         1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: hsP/C9n2vCbkQmmKpvdUKW2+/HEzWX8m89AOQQ0fb9c=)
                          2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
                          3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:10:a5:24:e0:57:78:e4:7f:7b:d8:95:1b:b2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
        Validity
            Not Before: Jan 25 19:01:10 2026 GMT
            Not After : Jan 26 19:01:10 2026 GMT
        Subject: CN=b8a71b059ec7d0611a98d89f8a5c6e2b6e240bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:a3:cc:18:42:2d:f1:0a:15:a2:00:9c:66:
                    94:9b:af:17:e0:c8:bf:a0:68:b5:89:33:a6:48:14:
                    42:73:2a:d7:94:2a:71:25:e0:8b:87:07:2e:54:26:
                    d8:76:a1:8f:c1:7d:df:37:28:9f:2d:55:2d:f7:d7:
                    a6:2a:cf:5a:55:b5:e6:74:79:f6:f1:c9:50:56:f2:
                    ed:15:99:7d:7d:c5:7e:60:05:29:f9:86:ca:ff:a4:
                    e5:27:78:f6:5c:f9:81:e4:65:7a:14:cd:7a:af:4d:
                    b0:7b:27:78:8f:20:62:fa:e1:75:1d:46:02:36:1f:
                    4d:6e:8f:4e:95:25:80:b2:fd:fa:37:16:f3:78:6b:
                    12:13:21:17:1a:b1:51:63:86:b9:96:e6:48:cc:e4:
                    da:37:1b:67:f8:a2:79:8a:75:3e:11:b0:26:1a:4c:
                    a6:07:59:32:c0:84:2f:f3:39:83:30:4d:cb:3f:db:
                    7b:55:4d:80:ff:5a:e1:99:76:b8:36:b0:09:ed:75:
                    ca:bd:53:72:0d:60:25:ae:74:9c:d9:0d:e1:f4:06:
                    54:b4:b7:c1:17:dd:46:4f:c6:61:2f:3f:d7:88:04:
                    37:a4:c5:c0:b1:1c:e0:f1:a7:19:b8:57:1e:81:38:
                    51:b7:c0:f3:e3:40:e7:ae:43:9e:a1:7a:a1:e7:15:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A7:1B:05:9E:C7:D0:61:1A:98:D8:9F:8A:5C:6E:2B:6E:24:0B:B2
            X509v3 Authority Key Identifier:
                keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:97:df:63:41:5a:a7:9a:e5:26:97:bb:4d:21:ef:ee:8d:
         6b:3e:b6:e1:23:d8:20:62:7e:01:9e:24:ee:30:56:5e:0b:ae:
         6c:3c:40:aa:d7:f8:e7:87:ac:be:63:ce:c9:7b:0f:0e:46:fa:
         4d:2c:54:ee:e8:77:60:b6:f4:c0:81:c1:53:bf:1d:17:cd:b4:
         d5:9c:8a:e5:a1:f5:20:91:2a:aa:74:1d:9b:ea:f0:bf:ee:d7:
         a6:cc:fa:07:2e:c9:7b:54:59:c2:51:71:c6:09:ca:7a:d8:cd:
         e3:17:84:93:fa:d5:0c:d5:9f:a6:cd:8c:8a:cd:44:eb:57:84:
         64:01:d8:56:ac:f2:c4:9e:c5:eb:9a:a9:39:64:95:9c:8b:54:
         a3:f7:fe:3c:90:94:5b:26:56:8d:5a:48:b6:ec:e7:29:2d:e7:
         cd:41:c2:36:f5:00:d1:4e:94:98:b8:6c:c5:05:15:2e:c6:23:
         9f:a8:97:6e:a7:8b:4c:f0:6d:35:80:06:7d:8d:e6:26:e6:3e:
         00:b4:5d:ec:49:c9:26:09:61:2b:13:ec:17:61:c6:84:71:5d:
         ab:df:f7:58:f5:d1:30:02:3d:a1:11:06:dc:a4:d6:58:5b:1b:
         9b:c5:a5:af:f3:ea:04:31:e7:17:27:4b:6c:5a:f7:8d:96:ca:
         dd:cd:2f:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2iBClJOBXeOR/e9iVG7IZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz
NzNlMmEwHhcNMjYwMTI1MTkwMTEwWhcNMjYwMTI2MTkwMTEwWjAzMTEwLwYDVQQD
EyhiOGE3MWIwNTllYzdkMDYxMWE5OGQ4OWY4YTVjNmUyYjZlMjQwYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJujzBhCLfEKFaIAnGaUm68X4Mi/
oGi1iTOmSBRCcyrXlCpxJeCLhwcuVCbYdqGPwX3fNyifLVUt99emKs9aVbXmdHn2
8clQVvLtFZl9fcV+YAUp+YbK/6TlJ3j2XPmB5GV6FM16r02weyd4jyBi+uF1HUYC
Nh9Nbo9OlSWAsv36NxbzeGsSEyEXGrFRY4a5luZIzOTaNxtn+KJ5inU+EbAmGkym
B1kywIQv8zmDME3LP9t7VU2A/1rhmXa4NrAJ7XXKvVNyDWAlrnSc2Q3h9AZUtLfB
F91GT8ZhLz/XiAQ3pMXAsRzg8acZuFcegThRt8Dz40DnrkOeoXqh5xV3bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLinGwWex9BhGpjYn4pcbituJAuyMB8GA1UdIwQY
MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct
NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm
LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvCX32NB
Wqea5SaXu00h7+6Naz624SPYIGJ+AZ4k7jBWXguubDxAqtf454esvmPOyXsPDkb6
TSxU7uh3YLb0wIHBU78dF8201ZyK5aH1IJEqqnQdm+rwv+7Xpsz6By7Je1RZwlFx
xgnKetjN4xeEk/rVDNWfps2Mis1E61eEZAHYVqzyxJ7F65qpOWSVnItUo/f+PJCU
WyZWjVpItuznKS3nzUHCNvUA0U6UmLhsxQUVLsYjn6iXbqeLTPBtNYAGfY3mJuY+
ALRd7EnJJglhKxPsF2HGhHFdq9/3WPXRMAI9oREG3KTWWFsbm8Wlr/PqBDHnFydL
bFr3jZbK3c0vtA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:40 2026 by rpki-client