This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          A1WqnrWrEN/PSx62uLonJZSbP35ZTLDMIYiRaEy8ahg=
Subject key identifier:   13:85:66:9F:B1:62:D8:A3:00:45:5E:DC:46:30:4C:52:7F:78:31:1B
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       019BF34F7D1794AECD4EAA6EAAECAEBAA46C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          08CD
Signing time:             Sun 25 Jan 2026 04:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:31 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: XNC883qVJeKt9OaLGPvwewLGKonib2BdeCF70+cntw8=)
                          2: 8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa (hash: yr3qgoPKK+MW0Wmz/o5fGlppgkLAJukaAckqwL8mZRo=)
                          3: DvcjVJOkMRapOd1S3buwBoLNCuM.roa (hash: PhgxUgpvf/qnyzn1ZNECv/I05gKGU5HogGKChSYsZr8=)
                          4: ZzV_VDVzaIqtDpwjtJwMSnjk_9Y.roa (hash: WaOF2f40LMOuM1ZWX/pUBZ5cJF1/e+UASVUsf1IegLw=)
                          5: xY3oO-WMZjEDTENfTRiDC2FkHKs.roa (hash: wPsvyOO1iyC8jxQyomTONofcW3odk+2KnelEPbJzeYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:7d:17:94:ae:cd:4e:aa:6e:aa:ec:ae:ba:a4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: Jan 25 04:00:31 2026 GMT
            Not After : Jan 26 04:00:31 2026 GMT
        Subject: CN=1385669fb162d8a300455edc46304c527f78311b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:fd:73:65:2f:e4:ca:1a:8b:38:72:94:b3:
                    46:7a:f8:ef:09:95:3e:f7:83:be:fc:96:a9:bb:b0:
                    7a:1d:18:15:01:9d:7d:aa:f2:08:8e:e0:dc:94:27:
                    e1:f0:3d:60:89:32:15:db:de:d5:db:72:5f:65:55:
                    40:7b:ba:51:97:33:2d:c5:51:53:56:bc:92:66:3b:
                    c4:d0:ec:e3:80:b3:60:04:ff:9c:4c:b4:b8:b7:12:
                    d2:62:19:98:c1:f7:d1:a8:5d:ec:f3:59:99:a8:9a:
                    db:43:b6:c5:f4:e1:19:84:56:72:06:82:63:16:5b:
                    32:3a:cb:c3:83:cc:40:eb:9e:bf:7a:87:eb:f3:2d:
                    74:92:20:38:70:c6:40:9c:d6:38:56:a7:4a:d3:82:
                    e3:8c:71:38:66:ea:2f:b0:17:88:32:ae:4a:2c:77:
                    0b:e3:db:2b:88:8a:a7:f0:17:24:1f:60:70:30:45:
                    73:e5:0a:15:ea:40:3f:31:3f:7e:01:a9:c5:43:29:
                    93:33:bd:8d:7c:be:2b:35:0b:64:62:60:1b:8b:89:
                    62:f7:ef:20:e0:f0:3f:9f:24:06:c9:34:34:3a:39:
                    79:a0:33:f4:e0:57:d9:10:8e:8c:ad:3a:32:3f:eb:
                    92:7e:8e:e4:3c:3d:b1:11:b1:e3:a4:3e:9c:96:40:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:85:66:9F:B1:62:D8:A3:00:45:5E:DC:46:30:4C:52:7F:78:31:1B
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:4b:6e:76:bf:53:d7:db:e4:a2:f8:bb:e1:0c:2f:71:14:
         0a:a9:bc:3e:4b:db:f5:6b:1f:c5:12:32:da:da:b1:b2:e5:87:
         86:8c:b8:9e:f5:3b:ff:df:42:22:bf:43:94:eb:65:fb:1b:e9:
         4f:6e:82:c4:83:ec:87:f3:ed:64:a5:e4:72:9c:1e:d0:50:44:
         ae:68:94:e1:0f:d9:a5:5e:1f:3f:30:0e:86:44:e1:d6:24:a2:
         1a:f3:b7:8d:35:f4:2e:05:66:69:9a:fa:55:6f:f3:b5:61:7d:
         40:58:91:45:db:2d:8a:3e:ba:51:26:f1:f9:df:39:25:4c:73:
         83:0d:ec:a6:29:8a:f6:89:2b:64:ff:f7:a1:63:a6:8c:de:b2:
         a6:2b:29:66:01:08:0d:1f:07:3a:81:d1:1f:4b:cb:05:27:a9:
         05:84:ce:b0:7c:35:38:81:2a:22:f8:5f:16:78:c2:7d:25:4e:
         c1:b3:c8:ad:60:3d:27:fc:d9:47:d1:1f:7c:fc:50:ca:8d:aa:
         8a:be:5e:b8:15:4e:17:c1:82:d2:28:6f:69:be:71:99:c7:c7:
         59:b1:ab:d4:87:cb:f1:d3:67:7b:bb:08:8d:5f:63:6b:92:af:
         af:ff:ee:00:79:38:56:76:ea:31:80:61:db:07:2b:cd:ff:62:
         ba:fd:6c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzT30XlK7NTqpuquyuuqRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm
N2YwNTQwHhcNMjYwMTI1MDQwMDMxWhcNMjYwMTI2MDQwMDMxWjAzMTEwLwYDVQQD
EygxMzg1NjY5ZmIxNjJkOGEzMDA0NTVlZGM0NjMwNGM1MjdmNzgzMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomf9c2Uv5MoaizhylLNGevjvCZU+
94O+/Japu7B6HRgVAZ19qvIIjuDclCfh8D1giTIV297V23JfZVVAe7pRlzMtxVFT
VrySZjvE0OzjgLNgBP+cTLS4txLSYhmYwffRqF3s81mZqJrbQ7bF9OEZhFZyBoJj
FlsyOsvDg8xA656/eofr8y10kiA4cMZAnNY4VqdK04LjjHE4ZuovsBeIMq5KLHcL
49sriIqn8BckH2BwMEVz5QoV6kA/MT9+AanFQymTM72NfL4rNQtkYmAbi4li9+8g
4PA/nyQGyTQ0Ojl5oDP04FfZEI6MrToyP+uSfo7kPD2xEbHjpD6clkCrIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOFZp+xYtijAEVe3EYwTFJ/eDEbMB8GA1UdIwQY
MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct
MTE3NWU1YTA3YTU1LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1
LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoBLbna/
U9fb5KL4u+EML3EUCqm8Pkvb9WsfxRIy2tqxsuWHhoy4nvU7/99CIr9DlOtl+xvp
T26CxIPsh/PtZKXkcpwe0FBErmiU4Q/ZpV4fPzAOhkTh1iSiGvO3jTX0LgVmaZr6
VW/ztWF9QFiRRdstij66USbx+d85JUxzgw3spimK9okrZP/3oWOmjN6ypispZgEI
DR8HOoHRH0vLBSepBYTOsHw1OIEqIvhfFnjCfSVOwbPIrWA9J/zZR9EffPxQyo2q
ir5euBVOF8GC0ihvab5xmcfHWbGr1IfL8dNne7sIjV9ja5Kvr//uAHk4VnbqMYBh
2wcrzf9iuv1sHw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:45 2026 by rpki-client