This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File:                     YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier:          CyyhfWr3/Hsuo5RgMJlmUaZyhTQxufdyn/e/iw8FgvM=
Subject key identifier:   B2:4C:1D:09:65:BD:03:4A:15:25:F0:DE:79:B6:36:93:54:A9:86:B1
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer:       /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial:       019BFA9BF912721FC9F2289D061B83B537D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number:          0807
Signing time:             Mon 26 Jan 2026 14:01:24 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:24 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:24 +0000
Files and hashes:         1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
                          2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
                          3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: Quv9phMzH5np2pWjRULgLhQ9s/+X76fscZRnqLDkpZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9b:f9:12:72:1f:c9:f2:28:9d:06:1b:83:b5:37:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
        Validity
            Not Before: Jan 26 14:01:24 2026 GMT
            Not After : Jan 27 14:01:24 2026 GMT
        Subject: CN=b24c1d0965bd034a1525f0de79b6369354a986b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:43:a5:10:f4:2d:8f:1a:f7:f8:5d:b2:e0:
                    8c:00:2b:5a:9e:77:c5:9c:7a:00:b0:04:db:78:94:
                    82:1c:06:94:7f:e8:31:c9:09:19:b0:b5:dd:df:aa:
                    1a:81:7c:1e:a2:56:50:98:d3:94:0a:d1:bd:fe:de:
                    8f:3d:ae:e8:9c:81:a1:cd:d1:54:b5:14:91:69:0a:
                    5a:25:04:aa:98:81:63:bf:95:a0:3d:b6:f3:62:19:
                    7d:5f:17:4f:30:0c:4a:2a:fb:4e:4f:40:ab:f2:02:
                    45:38:e9:c3:fd:e7:fe:51:67:0b:f0:d6:e6:5a:fd:
                    b5:26:98:ac:83:fb:0f:f7:88:b1:8e:ea:ae:53:fe:
                    25:ab:b3:aa:44:7f:86:ce:13:b2:96:2e:e0:70:1b:
                    1f:b4:7d:1c:7c:82:c2:ed:b7:72:1b:6f:84:53:91:
                    f1:e9:e9:26:b2:ea:28:57:69:ab:3d:73:73:ea:5e:
                    e6:f6:59:41:90:28:17:82:d4:6a:dd:03:d4:15:7d:
                    8e:20:79:67:f5:de:19:89:3c:7c:d4:08:53:4c:01:
                    0c:71:57:8b:2c:09:5b:c7:02:73:59:fd:ef:52:04:
                    4c:67:b8:4b:5b:2e:90:02:aa:ea:b0:cb:71:36:9c:
                    a6:89:b9:a5:14:64:5a:af:f0:f7:a7:f1:ec:61:ab:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4C:1D:09:65:BD:03:4A:15:25:F0:DE:79:B6:36:93:54:A9:86:B1
            X509v3 Authority Key Identifier:
                keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:63:0e:e8:e9:0e:0f:51:5b:ac:b3:0a:3d:a7:a8:59:25:
         4d:e2:9e:a4:ad:09:f5:d5:6b:58:02:5c:60:b6:14:59:05:72:
         5a:c9:73:c3:63:a6:d3:c5:71:70:8b:76:8b:94:94:57:26:42:
         ce:e8:18:65:40:c3:1c:31:99:07:d3:2b:bc:38:90:70:fa:8d:
         6b:f2:b4:d0:87:08:78:e6:23:1c:ef:b9:15:3d:28:83:54:47:
         6c:ec:06:d8:d6:c9:a0:6c:34:d6:d3:09:e1:cf:78:9d:c9:fd:
         f0:09:18:f4:70:4c:5e:3f:81:5b:ef:82:60:2d:d2:8f:79:73:
         fb:aa:ff:7e:06:06:c5:c5:17:8b:2d:1c:03:37:f7:0d:c1:fa:
         4f:97:c5:67:fe:12:ed:1b:eb:e5:d1:fa:bd:06:bb:4b:ce:ee:
         c3:c0:60:ad:7a:b7:02:1b:6e:d5:24:1a:8b:81:8c:87:df:ec:
         fa:f3:61:64:bb:26:ad:8d:af:c3:fc:c3:e5:b4:9f:96:85:01:
         15:52:43:f7:b9:ef:0b:9c:8f:21:5e:17:63:ed:7b:36:7a:ee:
         18:9d:89:76:98:d1:2f:a6:c9:de:e3:39:79:ea:94:bc:0d:d3:
         0e:73:87:58:c6:86:32:b8:a3:21:a0:70:76:d9:c1:3e:4b:f8:
         1c:ee:81:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:39:11 2026 by rpki-client