This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          BVlId5W8O58QTzEC6Aj1N7hoETWMvThdZXJcunzZw9A=
Subject key identifier:   C0:61:71:5B:DE:EC:6C:83:84:D6:E7:49:66:A6:49:0E:BE:FC:AF:D3
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019BF5E309609EBC85960E69DCC449DD609E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          053C
Signing time:             Sun 25 Jan 2026 16:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:55 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: g1EjJ/0r5oNF4o3X13KObpezLS4mOSlwDutidIxbLdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:09:60:9e:bc:85:96:0e:69:dc:c4:49:dd:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Jan 25 16:00:55 2026 GMT
            Not After : Jan 26 16:00:55 2026 GMT
        Subject: CN=c061715bdeec6c8384d6e74966a6490ebefcafd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:e8:ca:59:4f:7d:92:dc:39:3b:df:5b:99:
                    3d:25:6f:a8:89:18:07:a9:3b:5c:22:f4:70:ec:a2:
                    19:e5:ce:14:54:3f:10:9d:39:fd:8a:24:68:aa:de:
                    90:1a:d9:bc:9e:c1:b9:ab:11:76:e0:42:c4:75:6f:
                    a0:1b:be:02:23:89:32:be:b2:55:ed:6a:d3:08:c8:
                    b5:5d:b4:6c:51:72:ba:87:66:f3:70:1a:94:18:0d:
                    05:e4:0f:d2:6a:06:c5:2b:f2:1d:1f:20:ad:64:81:
                    3c:ef:90:b9:87:e5:d3:6f:3d:2d:d5:94:4e:f6:59:
                    bb:2f:a6:72:42:c9:2a:f4:31:05:18:6c:d8:ca:cf:
                    60:c2:99:3b:7a:13:33:c5:ea:27:29:62:46:53:b7:
                    fe:46:74:37:cd:4a:6c:23:76:d3:a8:c2:f2:af:a6:
                    34:fd:5f:00:f2:57:ec:fd:cf:2e:2b:17:05:88:2a:
                    5a:dd:de:07:7a:51:f9:9f:a6:27:7e:1d:bd:5e:ef:
                    8c:87:e3:d4:5e:80:df:de:ce:f9:68:5d:9c:f4:6c:
                    0b:d8:23:00:a2:9b:72:53:c6:2c:f5:41:fd:85:63:
                    a8:e7:ba:f7:c3:e7:65:e3:37:17:3b:1f:04:83:f4:
                    df:ab:c1:79:cc:e0:05:7a:1e:94:af:a3:86:c3:c3:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:61:71:5B:DE:EC:6C:83:84:D6:E7:49:66:A6:49:0E:BE:FC:AF:D3
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:79:52:0c:dc:37:b2:2f:17:97:4d:52:38:fb:3a:1d:fb:25:
         fa:d3:9e:e8:d0:73:ed:58:77:0e:69:24:33:8f:f0:43:cc:bc:
         ca:38:33:bb:42:93:f7:86:6f:97:a3:53:c2:d9:ae:e0:6a:10:
         d0:f4:4b:13:9e:c5:16:3b:61:00:c9:c4:a9:93:4e:5f:2e:70:
         13:ad:ff:17:37:e0:d4:8f:98:07:82:61:9e:55:13:a5:1d:1f:
         ae:32:63:01:08:f5:fc:98:0b:4b:ae:f9:97:5e:1a:39:81:b7:
         f2:a9:78:c0:40:f2:70:bc:db:da:63:52:e4:e0:8c:d1:5b:ab:
         fa:c5:e7:52:ed:7b:2e:4c:c9:e0:cb:4e:64:c6:30:9a:70:32:
         6f:5c:72:ce:54:b0:37:8f:90:55:24:bc:11:82:cd:20:33:ad:
         02:af:7d:bf:fb:96:dc:71:92:ad:2f:7b:2a:56:71:0e:69:bd:
         8f:9e:c4:07:a1:13:77:4d:48:54:d0:6e:11:4d:c6:41:55:ad:
         71:5b:d8:72:2c:aa:ab:9f:aa:8a:3b:01:97:db:fb:e9:84:88:
         70:8d:56:f4:fb:20:10:ba:f4:1d:b4:b7:47:34:57:9b:11:c5:
         ca:52:60:df:ba:2e:75:3a:2b:33:c6:45:27:f0:dd:10:9d:f3:
         5a:95:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:26:58 2026 by rpki-client