This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
File:                     Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json)
Hash identifier:          ejrJmxyJYgSxasaiz27E7blGExso1Ul2xl9IeSExr1o=
Subject key identifier:   F7:68:5B:54:7E:5B:69:EA:C9:72:AC:20:FC:CF:17:D0:7B:04:96:31
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       019BF688233884661086696B710999D9AE25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
Manifest number:          099F
Signing time:             Sun 25 Jan 2026 19:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:15 +0000
Files and hashes:         1: 2SCWKA3BpBv670idbinNJonNq4s.roa (hash: 4M8jBNOJkl6nMfGj6IAVqPv94bMqr+rR9rdVUgu9YhE=)
                          2: 8iuryml04fmZQZih2yKLkb78hW8.roa (hash: dl916czGPtggSTrDPjUVhqgnNmY5i/HKL0IVfwG6bUw=)
                          3: AJEm0tpZ80PX3AOqTJlJZLLFZRo.roa (hash: 9niTFrHFWmF03337Z/JCr6D2zR0zYQdhet735YBvLGg=)
                          4: OtVkQ4f1AeHI3V_qrZEwcYGqMW0.roa (hash: lQOpU/KkOdEbHcGa0HJQ2Z69/i85MPhOWNcJfoQZtBs=)
                          5: RMGZ-vy_dDQuHhZGPwdY1SDw3MA.roa (hash: J2ooeCLUwgG08rs8ThsvjcTV38rsjc50babTQPWvqzo=)
                          6: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: zrYZlyEAmok+JEpV2V2EWZH1/p2WGYbsaV6rNJPXW4M=)
                          7: kvQ545VBeKJ16540o8TuObo3Lms.roa (hash: 6nWlGmTGLlqKlb5UMIbOgwBINXEzC37TRE8Q0aoo66Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:23:38:84:66:10:86:69:6b:71:09:99:d9:ae:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Jan 25 19:01:15 2026 GMT
            Not After : Jan 26 19:01:15 2026 GMT
        Subject: CN=f7685b547e5b69eac972ac20fccf17d07b049631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:9e:7f:da:49:8a:8b:c4:1a:15:64:c2:cd:
                    0a:9a:38:42:28:00:37:8b:7a:5a:8a:19:d6:2b:68:
                    78:92:35:a2:a0:8c:6e:bb:93:d2:4e:51:17:7b:ef:
                    3e:31:c1:a1:ef:a1:69:96:e5:5b:8a:3c:5c:cd:48:
                    d1:4f:45:f1:d7:f2:3d:0e:94:b9:53:a7:40:e4:c4:
                    18:8b:d6:4f:57:e3:22:45:16:73:90:b8:5f:c9:6e:
                    d8:0a:52:b4:54:c0:4b:2f:f6:c5:84:16:03:45:60:
                    fa:20:13:d6:3e:c1:02:10:2b:7a:7e:3f:b4:ad:35:
                    16:0f:dc:31:61:bc:1f:7f:b7:3a:cf:29:2c:24:05:
                    d9:77:57:2b:cf:9d:74:7c:1c:87:3c:1a:28:98:1f:
                    af:6f:50:42:41:8d:bf:d4:dd:dd:47:8c:3d:46:d5:
                    51:d3:2c:33:1a:81:4c:a4:08:c2:84:d7:93:1a:ca:
                    1f:6f:e0:25:88:13:61:10:bd:4d:a6:41:28:c5:25:
                    f4:5a:cb:ce:36:70:81:a7:ea:32:f0:3b:9d:01:08:
                    b1:f9:4e:14:50:01:a1:f3:de:6e:ec:a2:dc:f0:11:
                    f9:31:25:ee:28:84:48:9a:68:92:1b:6e:a4:df:fa:
                    c3:d8:a8:ab:99:75:5a:9c:4e:f1:1c:14:c6:3f:eb:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:5B:54:7E:5B:69:EA:C9:72:AC:20:FC:CF:17:D0:7B:04:96:31
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:66:df:9b:3a:9a:a8:e4:e4:ab:9e:8e:9c:03:b9:aa:1d:
         94:bd:f8:1f:00:8d:15:7e:be:45:a2:9d:cc:2d:05:82:b8:d2:
         d2:1c:1c:dd:e5:64:9f:6d:f3:2d:7d:12:7f:39:24:d3:7c:45:
         d0:16:5c:dd:a0:48:13:96:28:e0:c3:84:94:07:10:db:7c:aa:
         9f:25:d6:59:5b:cb:7c:98:ff:43:64:4c:bb:43:ec:c8:27:9a:
         d5:1e:d2:80:fe:15:4a:fd:2b:c8:d3:3b:d1:15:bc:38:da:ad:
         d0:e6:7d:fb:2e:a7:15:a1:9f:33:ed:f0:fd:bd:7d:ec:ec:7b:
         ff:31:af:9b:19:94:ac:92:de:de:ed:21:a0:fd:33:e4:3b:41:
         2b:75:cf:f8:f2:6a:ee:9c:1a:10:b4:67:c8:ee:4d:d3:34:94:
         63:da:0c:e2:46:a4:81:5f:9c:b9:01:05:65:b9:c1:57:01:a0:
         f9:ac:1e:15:66:ce:c1:80:db:13:9f:2b:63:0b:b6:39:47:ea:
         62:97:3c:92:83:f3:cb:f1:d8:7c:bb:60:d7:65:c7:71:ae:c5:
         98:97:03:00:72:02:e2:e3:87:8b:d2:6e:64:9d:aa:c7:d7:d3:
         e0:00:de:60:07:22:3d:b4:34:a6:4c:83:1b:54:9e:64:3f:72:
         66:91:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:00 2026 by rpki-client