This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
File:                     Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft (raw, json)
Hash identifier:          pKBvcfULEtzNGBTaMx1qVfNRmMakY6WW/97+/6NnqlA=
Subject key identifier:   99:2F:8E:78:25:37:6D:84:3B:CD:95:24:93:60:42:66:97:5D:45:AB
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Certificate issuer:       /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial:       019BF198598EAF72ACC648B5D6076753978E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
Manifest number:          1171
Signing time:             Sat 24 Jan 2026 20:00:51 +0000
Manifest this update:     Sat 24 Jan 2026 20:00:51 +0000
Manifest next update:     Sun 25 Jan 2026 20:00:51 +0000
Files and hashes:         1: 1K65w38M6qfSAhDPAumVfRtILbQ.roa (hash: gO+r/hBjuB8Ccta4Lz/HE+KAZTAzDxZlP8+em5+Zihk=)
                          2: 36VLbdU0YfHtOFhKlTvPhr-GKCY.roa (hash: ah0Mz3pCFiIlopLEIS1Tng+y+TvEE5d1jtSiEFfa/Do=)
                          3: 5yLyWIXfSv1r4k0_8nbdgA7HwJE.roa (hash: PQO62SQb8gcwDSWQltry1WEIm/d+EWmKX802izLgZ6Y=)
                          4: ADpHV81oLRNww3UPkZ2ylbeVYyQ.roa (hash: iE6K3Xh2IcBpnGljqbTHKAlsyrSy/6CD1qKuMNW47GQ=)
                          5: BlQ7QLfD5x6iutqgeo_eVzPaVtk.roa (hash: a6swOT7R/RX0SYVC7Z4btelSh4NSQ/SQytt7lytGyYw=)
                          6: E3X5DvCSlkdtfxAadUSESD3eJrk.roa (hash: kCGyuLKDilqRCLENtFOYzrUVWzlMBuvjueB/aZz2GHM=)
                          7: MDRHnTjt9DlUVua8sWg9_JbxY2U.roa (hash: i8n3TTVTE/GiyRPUsoyJpcq8KFM55OaIVs9pme0mfxA=)
                          8: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (hash: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus=)
                          9: SmLI4SmTecXNrl07lfbd5xd21lo.roa (hash: vFi3IJw/jL8mIUo7W9BhOmCtQalvVRWxm4SWl+O6Y4o=)
                          10: T-5iPcnqsCezQTEheWZWzWtrA18.roa (hash: IDRrVJDQTAycZw+3lmD3j1ROsNlDG2qWSW1sP/pYHrg=)
                          11: TEKfYHkotwU7_5ucl5CauD9rWBg.roa (hash: 2nLll6//1iJ2CCFmRLPt+PdNzBEZUp9S5l++rLed9jU=)
                          12: VEToInKbcqDe5lDhchbIl4AMp0Y.roa (hash: inka8uep2qo5aJFsSvXAFA+QL1UyC8x6RDmrR1OvuhU=)
                          13: VzdgV1bxOOkMBio-OPwUCejv-eI.roa (hash: Dzp/xLOc3m+FFo59d9oRR774pTKwEklWqH44s+jw078=)
                          14: WyLZrdb3qSOC31iVFKjKw8KpzYY.roa (hash: N/64ZJFkJRymrNDS4aAi5HI9lv2esPjvZv+p1U/Ss94=)
                          15: Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl (hash: /jXjHauRRUBXFtw5tiYsfKGK8sTtujKCLBPM/d9UMiY=)
                          16: efcP8-qp6rGIDUknP6ranBAFenc.roa (hash: eCznaG89xquMPr3uYbjxlMYwYWoDIZp7pfe+xehKenM=)
                          17: f8yn9hbw75bPtwP_3x1I77YrtTw.roa (hash: lbfxwVpBH3kCxRse/jePifr7mqG4EpAtxe5vRU33ODY=)
                          18: ih5Tik-miT3yn0gYGk7C4bCXJEo.roa (hash: 7XCAdlzsVKGd3oObkJcWEkL8UHGW4ZKL9LLtudw/LCM=)
                          19: nq1iKk8w1XflIXtC17UgSNfU_oM.roa (hash: F+lcomVmFtP5h7X/ECDiniz6Fh7EseUhUsvEf8G4EC0=)
                          20: pUUSDW7JRITPLH3NewhxW4cUvRY.roa (hash: qkr6YH2kb+kFgIzqY0pDMe+J2a9UaWnHDsLI3Fg85+Y=)
                          21: rcB_gTKQyon5L1ekK6QyPY33ncE.roa (hash: m6GuZytNUPy8PIlHIB9uYKzZao0j2orEwSJM8CoLyyE=)
                          22: wSN7r7hNDmQ5P3z7bDOOJY4KzPI.roa (hash: GUz9F5+jeMSsRRJHGP5PXsDLe9kd5RoheH3WCvm1Crg=)
                          23: yjp0F1DNzleK6-vCRsNxWVIlBNw.roa (hash: 3j9dCEuG9ERZFB+WenZiPdRjdEvmFVjCWNLAT55vJ+I=)
                          24: z-53IXFcKJ6y4Mf6a0CbR1GDMyI.roa (hash: 7n5dh4QPCbMNxOIfvTg67aQhUq6LDc9VCW/176Z07bA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:98:59:8e:af:72:ac:c6:48:b5:d6:07:67:53:97:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
        Validity
            Not Before: Jan 24 20:00:51 2026 GMT
            Not After : Jan 25 20:00:51 2026 GMT
        Subject: CN=992f8e7825376d843bcd952493604266975d45ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:b0:5c:a7:aa:7e:25:4d:31:3a:c0:12:0d:
                    ff:b4:39:58:05:e3:c1:db:d1:44:4e:4c:14:48:5d:
                    23:82:d4:10:4e:90:c3:d1:d9:7d:f8:19:2e:40:bf:
                    d5:2a:71:a2:77:42:13:88:22:26:84:34:c1:de:1b:
                    02:fb:7e:77:70:5d:92:8e:ef:23:e8:1b:95:3d:f9:
                    b3:1a:73:a7:89:bc:a4:1f:fe:b8:17:5d:81:59:af:
                    64:e4:d5:de:47:1c:1a:a5:1e:15:48:69:9a:22:1e:
                    3f:d8:b9:ed:43:b7:9d:da:9c:15:19:68:91:09:ba:
                    24:18:e5:b2:61:50:4c:33:29:5a:d9:af:be:1e:a2:
                    06:bc:58:ce:19:6c:e4:cf:91:3a:cc:78:a3:3f:22:
                    f1:79:84:7e:aa:14:a9:38:c1:7c:51:68:8e:f0:6e:
                    8e:eb:48:ea:a3:71:9f:6a:b9:4e:2d:83:83:46:71:
                    40:61:a1:78:5b:30:18:67:e8:0b:bf:48:a1:20:05:
                    60:7c:6b:fc:1b:c5:22:58:2a:79:10:09:92:66:05:
                    66:1b:28:e3:b3:aa:a5:34:b4:46:16:0e:7e:11:ea:
                    df:3b:54:c1:7b:21:15:b3:fa:2e:c8:1e:71:fb:d1:
                    bf:9d:15:bb:2d:a6:24:ee:41:f7:f8:99:5d:6d:98:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2F:8E:78:25:37:6D:84:3B:CD:95:24:93:60:42:66:97:5D:45:AB
            X509v3 Authority Key Identifier:
                keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:21:1d:da:c1:c5:ef:4e:4a:c5:be:f9:a7:9a:6b:f5:90:
         71:1f:ab:c9:08:b0:9a:d7:bc:f8:82:fc:ae:1c:3d:9c:b2:d5:
         1e:cf:1d:50:2b:91:63:4d:5f:26:29:c7:56:89:55:a6:dc:07:
         d5:aa:cb:c5:bb:5b:75:a5:d4:00:08:d5:68:72:93:21:a4:d2:
         e6:b9:55:98:77:cb:e3:1f:13:14:e3:da:df:39:eb:f6:f6:9a:
         43:c5:16:fc:5f:ae:f1:5c:f7:b7:ca:43:8f:03:e3:57:42:ca:
         67:a7:be:34:24:fe:a5:2f:81:b8:cf:91:27:09:3f:4f:9c:97:
         03:3a:6a:dd:8d:c6:c1:82:6b:f9:bf:da:56:45:78:c3:d8:c6:
         47:c3:63:a9:bb:14:9a:39:fe:38:5b:de:10:db:9f:6d:87:7d:
         18:4f:da:01:ee:88:59:81:cb:e0:0e:83:c9:72:14:13:7e:fa:
         53:b8:ca:2f:58:55:a1:bb:68:97:3f:e9:e9:ca:98:61:73:79:
         86:bb:b9:a5:23:b3:5e:55:68:5d:ce:35:15:b8:9e:c1:e8:0d:
         f3:a0:aa:5e:52:a0:1f:36:35:b7:eb:d9:6c:78:2a:a4:a5:0a:
         61:60:38:bc:d6:9c:1c:96:9b:e4:5c:80:2c:c2:8e:5a:d3:9f:
         b7:e0:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:39:37 2026 by rpki-client