This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File:                     YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier:          ql6obohF3CyjbvN8RApW0kIos/z/ahwiRFA/QQxqvms=
Subject key identifier:   F8:FD:02:EB:3C:AD:C4:7A:04:4E:B0:0C:23:45:13:58:64:3E:25:22
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer:       /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial:       019BFC537578AC574C7EBFBE2F8447555CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number:          0FE7
Signing time:             Mon 26 Jan 2026 22:01:26 +0000
Manifest this update:     Mon 26 Jan 2026 22:01:26 +0000
Manifest next update:     Tue 27 Jan 2026 22:01:26 +0000
Files and hashes:         1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
                          2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
                          3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: 1pThZDb9IVcI1dbllbYkMtDwaQ/zUCVXTRPttvp6XrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:53:75:78:ac:57:4c:7e:bf:be:2f:84:47:55:5c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
        Validity
            Not Before: Jan 26 22:01:26 2026 GMT
            Not After : Jan 27 22:01:26 2026 GMT
        Subject: CN=f8fd02eb3cadc47a044eb00c23451358643e2522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:ed:6b:8b:03:88:ee:4d:28:28:5e:2f:70:
                    b9:c8:a1:e5:a8:e6:92:76:41:6f:37:9e:90:24:91:
                    15:0f:fd:db:dc:1d:cf:6e:c8:26:00:a8:1c:79:a2:
                    f5:db:01:89:0c:ac:5d:95:dd:e0:22:59:8e:ec:53:
                    eb:36:52:a9:94:3d:e9:64:7d:ac:89:ec:ea:e0:be:
                    71:cf:d4:e8:f5:a2:0c:ed:19:6b:5e:81:01:94:e9:
                    ee:98:f6:83:06:2a:56:45:1b:3c:e9:16:b0:ce:86:
                    ba:36:8f:55:36:77:98:d2:2b:44:76:78:1d:5d:88:
                    c1:86:dd:32:b9:05:4c:c1:d2:9a:9e:2c:b9:7c:3c:
                    d4:5a:10:d7:5d:a4:35:bf:e0:66:44:d1:76:72:59:
                    3f:a0:ec:11:18:b1:a7:2f:a4:f5:e3:b0:2a:3e:a0:
                    20:b5:4a:e5:db:71:a2:f6:5f:1d:cc:2f:79:77:1f:
                    7d:c0:1c:28:89:d7:e2:35:0b:c2:0b:c2:cc:34:1b:
                    5a:34:49:28:6c:01:c8:9c:e5:7f:19:e6:82:8e:c5:
                    01:a1:b8:7b:c8:9b:20:69:e6:fe:71:49:55:31:67:
                    e6:5e:4f:60:9d:8c:66:9a:70:01:fd:68:25:60:6b:
                    f4:59:7e:b6:23:f8:1d:5c:ca:58:3e:b2:cf:bf:c4:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:02:EB:3C:AD:C4:7A:04:4E:B0:0C:23:45:13:58:64:3E:25:22
            X509v3 Authority Key Identifier:
                keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:63:59:f2:fc:89:d8:2a:72:2c:a9:48:53:68:b3:59:2f:8d:
         35:d4:a3:81:de:d2:ab:eb:78:96:bd:0f:a4:df:a2:4c:90:4e:
         56:eb:d2:2c:81:73:f1:3c:3e:3c:a3:19:f8:95:6c:3d:98:30:
         1e:7d:2f:e0:38:bb:5e:48:ac:f6:c1:af:69:09:f6:02:36:68:
         87:dd:f7:54:33:10:19:be:22:70:30:0f:de:18:86:10:94:e6:
         06:f9:e2:4f:f7:29:ab:0f:ce:1f:e3:2a:e4:c7:cd:0f:0d:2a:
         9f:27:c0:90:62:49:16:d1:f0:12:d9:80:94:14:f3:1b:8b:af:
         db:97:67:ca:97:7e:4f:bf:bd:32:17:35:21:bb:8e:ec:23:48:
         50:55:35:11:1e:42:c5:67:32:d2:f8:9e:1a:ef:48:f2:63:1c:
         db:43:32:95:9b:5d:16:3e:c9:ef:9c:1a:4c:89:8a:c3:b8:8e:
         02:df:0b:e9:87:9b:3c:1a:92:61:d7:c7:6f:c3:7e:bc:ea:3f:
         76:7c:63:cc:28:5c:fc:10:af:e7:b6:f9:78:6c:21:30:cb:08:
         d7:6f:c4:da:69:f3:ff:a9:13:6e:74:da:9d:d4:67:c7:df:4e:
         0d:df:50:10:ff:20:d0:6b:92:0d:45:4c:2e:f3:18:1c:88:5e:
         74:20:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:36:45 2026 by rpki-client