This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          4whoDU8DVgRUwBm1JGW849gj9VffM7MEFbQQuLnsDWY=
Subject key identifier:   42:C3:69:23:F5:23:02:7D:93:32:95:7E:81:FF:5C:83:18:54:47:34
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       019BF7D1E4D339D1B7C4FE79537EEEB973CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          111C
Signing time:             Mon 26 Jan 2026 01:01:26 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:26 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:26 +0000
Files and hashes:         1: D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa (hash: gqWDVnk0tUa5bFlFT+UYPIPkFsYBe4H7LkGhaI+lIUo=)
                          2: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: LdwZyRyfBzZX+Zlw6WJQyN8zAJ8bzzsgv6AHUyc0EIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:e4:d3:39:d1:b7:c4:fe:79:53:7e:ee:b9:73:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: Jan 26 01:01:26 2026 GMT
            Not After : Jan 27 01:01:26 2026 GMT
        Subject: CN=42c36923f523027d9332957e81ff5c8318544734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:ab:f0:ea:8f:67:fe:af:58:47:5f:68:95:
                    be:21:ac:3c:fa:7f:bb:03:74:e3:a8:76:b2:17:6d:
                    b4:33:be:ea:f3:69:5c:2b:93:4e:b1:15:64:e4:9c:
                    1b:75:49:6b:75:74:02:5a:ab:37:98:0d:37:c5:ff:
                    a4:2d:ae:2a:d6:29:c6:cb:c2:f8:ae:d4:ce:47:d6:
                    5b:a8:64:8b:e6:3f:46:d1:48:d7:a0:72:e9:3a:c3:
                    9c:05:61:ba:69:77:a9:49:1c:e1:84:8e:b6:0f:7a:
                    57:09:5d:e7:21:35:4d:f1:3a:a9:1b:c6:b3:88:83:
                    7c:81:8d:51:b2:61:14:5f:e2:ec:49:10:e4:10:ed:
                    e9:dd:2d:64:1d:cc:6a:a4:a4:60:51:40:41:20:cd:
                    f9:cc:58:6a:2c:30:ae:35:db:25:ad:a2:f3:ac:b1:
                    1a:e0:1e:47:52:68:ac:a1:07:a7:04:be:0f:7c:50:
                    70:48:3e:a6:74:11:d1:95:e9:22:f6:2e:30:79:6b:
                    d5:3f:b4:48:b6:1f:d2:d0:b6:65:fa:c0:be:65:50:
                    6b:2b:3c:ba:c8:b6:36:94:05:d9:1f:37:22:43:cf:
                    76:80:d3:3b:df:33:06:93:e0:3a:df:87:4d:01:6e:
                    b1:f5:f9:ca:ef:69:45:8f:1f:0d:0b:17:f9:4d:e1:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C3:69:23:F5:23:02:7D:93:32:95:7E:81:FF:5C:83:18:54:47:34
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:48:4e:8f:86:db:41:ca:bb:0b:c5:18:ae:63:d8:68:5f:5b:
         f5:4e:8c:a9:5e:cd:0d:41:b6:94:b2:67:65:be:40:98:71:f3:
         3f:7f:a9:ae:f2:2a:df:c2:71:64:32:ac:9f:29:f2:86:a5:af:
         03:1c:0a:65:e3:a8:af:a9:d6:2e:1b:95:96:2b:0e:ef:c0:c2:
         9a:c2:32:f7:23:fd:bb:53:d7:64:ba:9b:16:4f:b9:6d:fc:0b:
         ef:a4:18:f3:73:f5:cc:71:30:4f:76:62:05:01:0c:ac:b6:0a:
         a1:85:d2:6b:65:b4:e0:da:18:60:5e:89:92:c9:c7:1d:16:0f:
         6d:9a:f1:da:30:5e:df:9e:d5:df:30:4b:9d:fc:d9:cb:32:d5:
         ac:f4:66:b6:ec:5e:ec:f3:df:0b:22:d6:ab:5d:0c:df:94:97:
         eb:06:bc:1d:a9:d4:71:f2:57:9a:46:df:83:20:20:97:5e:e9:
         c4:12:15:95:c6:e1:75:d7:3a:28:55:11:b0:83:47:3b:57:7c:
         38:01:31:65:03:bd:f9:51:a8:a1:88:c5:dc:91:c1:12:33:3c:
         e6:99:b8:2a:a7:1c:e1:c8:9f:16:91:cc:2a:49:68:9b:31:74:
         50:2c:52:fb:8a:eb:44:18:2c:a1:29:07:91:10:1a:3c:e1:a1:
         2e:73:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:25 2026 by rpki-client