This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File:                     YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier:          xuRxxVjzFJ2nSrTxltdzGY7YjkcmpRm4yycrqDrs0cU=
Subject key identifier:   F2:56:F9:D5:07:73:85:E4:F8:EF:2F:85:FF:1C:57:04:E5:3B:6F:7B
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer:       /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial:       019BF574FE2DC503582427E57E41FEEC5E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number:          01DD
Signing time:             Sun 25 Jan 2026 14:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:43 +0000
Files and hashes:         1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: oxqyUJyCCLABmE9Y78Q9VOBgkFv2yyUq5qBglxxBM64=)
                          2: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:fe:2d:c5:03:58:24:27:e5:7e:41:fe:ec:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
        Validity
            Not Before: Jan 25 14:00:43 2026 GMT
            Not After : Jan 26 14:00:43 2026 GMT
        Subject: CN=f256f9d5077385e4f8ef2f85ff1c5704e53b6f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:3c:0a:6c:3a:39:b8:a0:d6:52:2f:19:bf:
                    69:93:0e:49:a5:41:bb:28:32:43:fc:12:5a:df:cc:
                    46:d1:8c:28:55:37:e1:ac:59:e0:a3:6e:da:96:7a:
                    35:46:f0:13:79:56:32:b2:09:58:42:4c:2d:bb:f7:
                    3b:04:d1:5f:e1:fd:fa:03:a4:1b:7c:be:b8:a4:9b:
                    23:0b:52:28:e4:9c:ab:70:30:a2:20:e6:8e:ca:2e:
                    44:ee:8d:05:1a:ad:24:45:13:43:4b:dc:ac:62:2a:
                    f7:fa:9c:fe:5e:24:68:c8:e3:d7:c0:91:6e:37:50:
                    a2:80:78:e1:ab:c6:70:7c:ae:4c:64:24:34:d8:d8:
                    14:10:44:7b:15:b2:42:68:60:15:cc:8e:f1:73:b0:
                    c6:26:e0:4c:10:54:f8:ba:ce:45:06:39:8b:74:e9:
                    f2:7e:99:43:7a:83:02:ff:e4:a0:69:02:2b:87:89:
                    64:3e:29:a3:11:22:7e:6e:69:38:8a:88:6e:3f:d0:
                    eb:28:20:7a:45:51:46:16:25:23:fc:e0:a1:e9:da:
                    f7:e1:b4:7e:89:2c:6b:ba:4e:af:a2:3a:b4:d3:bc:
                    d2:1b:41:db:cb:c4:8d:e3:0d:e6:e8:cc:63:10:67:
                    9a:68:2e:fc:de:58:ed:28:0f:13:70:f9:61:7a:0e:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:F9:D5:07:73:85:E4:F8:EF:2F:85:FF:1C:57:04:E5:3B:6F:7B
            X509v3 Authority Key Identifier:
                keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:13:d5:f9:18:8b:bd:3a:d7:18:be:b4:02:81:19:33:8f:
         c5:f7:f1:94:25:f6:20:27:73:0e:c8:fc:1e:c1:a1:37:16:cb:
         00:4c:8c:9d:5f:4b:4a:3f:43:76:89:2d:34:8b:9c:7d:36:dc:
         cf:ca:14:bc:15:98:d4:c1:2f:09:a2:6d:c5:cb:06:30:46:e4:
         08:e6:82:44:f9:24:c3:68:93:97:bf:36:5b:1e:c7:ae:e6:3a:
         77:21:96:1d:6f:6a:78:6a:af:bc:6e:e9:cb:72:57:10:75:72:
         4d:ce:36:2f:33:41:ab:39:ca:e2:7d:c9:dc:42:cb:83:a8:01:
         00:e5:e7:71:49:06:e0:d8:61:db:14:68:17:91:ac:88:c8:d2:
         b7:52:83:0f:c3:cd:8e:40:a2:5f:97:62:df:89:ac:57:b9:31:
         a1:40:04:ff:63:58:4a:62:66:44:e8:8b:cd:3f:56:d1:50:d2:
         a3:46:82:51:2a:cb:e6:b0:75:a4:44:93:9c:13:24:ed:8a:5f:
         21:91:63:bb:38:15:9b:91:82:ad:b6:27:79:80:99:57:c6:34:
         0a:52:41:65:2d:eb:8d:98:63:f4:7c:90:42:24:57:d8:e5:71:
         bb:8d:71:3b:c3:e1:c8:ec:68:d9:3d:91:88:ea:f6:e8:75:7a:
         58:01:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:52:44 2026 by rpki-client