This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          FdhhQArarj5okRWHKt4RQZ0S0z2uylk59RmFIwQNlWA=
Subject key identifier:   DB:6C:32:4C:6E:55:CD:8C:19:E8:96:EA:34:E9:21:F6:C7:8B:BE:8F
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       019BF91BE73C5E8957317E719FCEDFFBBA7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          1046
Signing time:             Mon 26 Jan 2026 07:01:53 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:53 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:53 +0000
Files and hashes:         1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
                          2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: cjh4kfRDt5yOSm/6pJnVob38218rERJ6aV885nY/cKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:e7:3c:5e:89:57:31:7e:71:9f:ce:df:fb:ba:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Jan 26 07:01:53 2026 GMT
            Not After : Jan 27 07:01:53 2026 GMT
        Subject: CN=db6c324c6e55cd8c19e896ea34e921f6c78bbe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:09:05:2f:7d:68:34:77:c0:85:f4:17:c2:
                    f8:51:05:4c:47:13:46:c0:99:09:d9:45:34:e7:54:
                    f9:01:d0:6a:03:ff:56:e6:80:be:db:07:60:ca:3b:
                    54:b0:fc:a2:61:d8:8e:8c:1d:3c:33:f2:50:93:89:
                    e7:f1:35:56:30:e4:31:08:96:e6:21:c7:be:19:0b:
                    2c:75:f4:6c:2c:59:d0:7b:74:6f:ae:b8:9d:16:10:
                    4f:92:a2:27:f0:75:76:d8:3e:4f:f3:24:6d:95:f9:
                    e1:b5:61:3c:da:a2:99:a0:eb:c0:d1:83:bd:00:38:
                    9e:21:1f:f6:3d:a6:30:f4:a8:79:36:74:de:c3:98:
                    60:86:d8:fe:35:cf:fe:08:93:3d:b5:e9:21:4e:26:
                    dc:7d:6b:72:85:77:2e:c2:81:4c:8b:61:42:a3:63:
                    a0:97:86:de:8b:37:fe:a8:50:3a:9a:fc:c7:f1:28:
                    ae:4b:2a:1a:92:19:b7:ea:48:35:a6:c0:7d:fa:f3:
                    49:a7:54:61:05:a3:36:6b:99:53:c2:68:e3:04:40:
                    27:e8:bb:44:47:16:e6:a1:3b:c3:be:76:39:4b:76:
                    90:0a:15:81:a4:4b:9a:51:e5:c4:af:26:6e:ff:f0:
                    1b:32:c9:2e:77:38:90:d8:98:ca:6e:95:46:c1:47:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6C:32:4C:6E:55:CD:8C:19:E8:96:EA:34:E9:21:F6:C7:8B:BE:8F
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:86:db:e4:6f:af:11:5e:82:2f:cd:e4:e8:b6:04:a3:a5:
         42:4e:9b:a7:46:7b:b0:be:99:fd:9b:41:ed:a6:5f:f4:a2:6c:
         96:02:53:72:26:f3:5c:53:1f:c0:69:83:5d:ff:b4:50:64:e3:
         03:47:c5:04:56:7e:28:37:c4:77:c8:9d:66:05:11:9b:de:62:
         49:7a:36:ee:d9:e3:28:81:c2:5a:b0:83:90:59:a2:14:7e:7a:
         3b:2b:34:3b:0b:a9:6f:c5:25:d0:a7:3b:00:df:56:0a:8f:6c:
         1a:29:98:cb:f6:f4:94:2f:ed:75:58:11:ec:56:df:92:78:9a:
         63:a1:3c:9b:e7:7c:37:1b:cd:57:25:f3:cd:22:17:7a:d1:55:
         64:05:a2:69:99:5b:60:ea:c8:6b:7a:b6:71:53:77:f5:c8:44:
         a8:c0:44:5c:6f:b2:39:9d:bb:b1:9f:67:13:c5:fc:e1:ce:f4:
         97:ff:71:39:94:4f:68:3c:01:a3:bb:6e:f3:76:f9:5f:a6:45:
         e8:a0:88:d9:c3:7a:54:59:e1:14:46:ae:dd:25:fb:5e:46:4b:
         f7:42:78:1f:0c:61:e7:80:c5:4d:7e:24:e1:ce:31:08:3a:15:
         2a:b6:b0:ab:af:cc:a7:6e:fa:02:bb:0c:ee:6e:ed:7c:5e:33:
         0c:04:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:27:37 2026 by rpki-client