This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          PMECzjYXDfI78bsJzrnZSSyPbED9oS/T/Cp4JFKqv4w=
Subject key identifier:   08:BC:D9:F2:84:2C:D0:F2:41:43:70:E9:43:B5:5D:5E:49:7F:13:B0
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       019BF72CF8F298C45259CB7F8FD267AE205B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          139D
Signing time:             Sun 25 Jan 2026 22:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:18 +0000
Files and hashes:         1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
                          2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
                          3: G3k1ceVeNrPiVfhClGYQkeWRt20.roa (hash: 230dvF/Eg30qO5iDwzXcq17h9jrnLTrgKjBI6YrKsv0=)
                          4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
                          5: Ll9Fv1iWjrQbay6dldfz3298BT0.roa (hash: sXUak+rlRyYVaN4/qSmJAIPbXZ1DujHL5AjXw6i4lS8=)
                          6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: EorhrBxObAqtdP9+KuHFC4+mBywtmpMllOGhyfGAf1o=)
                          7: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:f8:f2:98:c4:52:59:cb:7f:8f:d2:67:ae:20:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Jan 25 22:01:18 2026 GMT
            Not After : Jan 26 22:01:18 2026 GMT
        Subject: CN=08bcd9f2842cd0f2414370e943b55d5e497f13b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:fc:71:41:8f:05:1c:48:6a:25:5c:53:f5:
                    28:05:99:f8:f8:6f:2d:bd:50:6c:90:f2:9e:45:14:
                    88:4b:ad:cd:62:0e:d3:b8:25:f9:d2:c5:f4:5f:8d:
                    9c:c1:78:54:12:c6:fb:c4:fd:f4:81:07:41:6a:19:
                    25:8f:f2:c7:3d:08:05:74:10:46:ca:be:93:ed:e0:
                    26:0e:b2:67:48:e3:39:47:8a:e4:ce:32:20:ed:72:
                    7c:49:14:42:09:d5:6c:00:85:85:a9:83:01:43:fc:
                    42:29:29:fd:28:38:97:26:02:18:51:15:c0:a0:9c:
                    8b:5e:ac:a4:12:e4:42:76:f0:ab:c9:8f:85:03:62:
                    f3:80:85:dd:36:88:9b:2f:cd:2d:cc:80:1a:55:17:
                    f0:c1:37:4b:ab:aa:ef:76:0f:de:b2:8a:b0:ff:35:
                    3a:9d:93:95:34:b1:c5:e2:91:58:42:ce:88:77:3e:
                    6e:73:e5:8e:6e:55:09:05:4a:05:20:32:b0:e6:7c:
                    69:b2:67:6a:26:30:e5:85:dd:4d:a9:a5:d0:3b:12:
                    bb:bd:61:34:5f:63:24:07:85:fe:b5:16:1c:de:57:
                    72:98:26:96:9b:ce:a4:21:08:72:3b:3e:bc:8d:00:
                    bd:3c:34:aa:49:23:70:8f:30:2d:52:9f:58:ee:2d:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BC:D9:F2:84:2C:D0:F2:41:43:70:E9:43:B5:5D:5E:49:7F:13:B0
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:45:52:14:ca:40:48:dd:49:03:b6:1e:14:e4:54:da:3f:2e:
         2a:ef:47:78:66:29:0f:3d:e1:0c:34:e9:b9:00:f8:b5:b9:99:
         ea:83:55:9c:b8:e4:cc:17:8b:a5:4f:1c:47:f8:fd:49:fa:2a:
         36:6f:5f:84:5b:64:4d:52:2f:8a:8f:0a:28:fa:bf:3c:b0:75:
         ea:47:52:0c:fb:4b:fb:b3:24:c8:b1:90:5d:6d:ac:3b:77:f1:
         c6:b1:32:9f:ac:d1:09:1a:b5:ff:15:df:fc:37:79:29:ff:65:
         e9:15:03:b8:a7:46:cc:1c:9d:f0:a3:99:05:b7:31:14:f6:4b:
         f3:4c:e5:b9:6e:20:e4:4b:b7:c8:cc:6a:f6:a2:9c:88:61:09:
         11:3c:4c:7b:72:a7:5e:12:3e:32:f2:61:4d:fb:f9:67:bd:60:
         6b:fe:da:c6:c4:25:06:c2:f4:5d:fc:79:88:9e:36:18:a9:ea:
         bf:aa:07:f8:7f:11:36:31:30:19:40:3b:b7:68:51:d9:0f:24:
         86:df:ec:b5:ab:60:33:63:ae:5c:aa:9b:76:ad:2a:a8:d5:dd:
         a2:f7:11:2f:91:30:76:0f:69:12:46:eb:09:d5:3e:dc:9f:91:
         29:be:10:74:8a:36:ce:a6:5e:40:35:4f:b3:46:5a:ac:af:8e:
         b4:56:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:29 2026 by rpki-client