This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          +/L9GFWRt0sbjWkrpQ+Z2ywrKpP7WQ8/Sezo7VR35XY=
Subject key identifier:   8A:2A:03:51:C3:D9:A4:15:95:F4:34:E6:A4:95:2E:52:4B:2D:F1:0C
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019BF42C0B538FBA5E0DC6C8FF0E279C55A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          180E
Signing time:             Sun 25 Jan 2026 08:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:25 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:25 +0000
Files and hashes:         1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
                          2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
                          3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
                          4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
                          5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
                          6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
                          7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: S9gsw3j7HWRr+eeG0ySi2sx4+VgBWKI4JpRilVf+w6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:0b:53:8f:ba:5e:0d:c6:c8:ff:0e:27:9c:55:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jan 25 08:01:25 2026 GMT
            Not After : Jan 26 08:01:25 2026 GMT
        Subject: CN=8a2a0351c3d9a41595f434e6a4952e524b2df10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:c5:b9:88:93:43:6d:57:25:58:36:7a:09:
                    74:33:8c:c3:c5:af:86:40:da:1e:16:88:d9:6a:63:
                    dc:f2:0b:a4:fc:e8:75:a8:61:db:9c:9b:87:9b:56:
                    e3:b4:c4:6c:d6:c7:14:23:1a:12:14:40:23:48:5c:
                    19:3c:e7:f2:a4:cf:73:12:d0:a9:83:b9:3b:57:a7:
                    44:ad:1b:ef:7f:4c:09:dc:b3:65:72:9f:87:3e:c1:
                    b8:ba:28:56:17:87:84:06:11:b1:f1:62:65:6b:52:
                    bb:c0:bb:7c:29:ed:af:07:f8:a6:09:1c:5e:6f:9f:
                    c4:9d:ce:5f:89:32:3e:64:6b:81:35:c9:cc:ae:c6:
                    f5:94:9a:fa:9d:b8:dc:f3:70:38:7f:fa:d9:e9:25:
                    a8:9a:39:5f:18:60:99:a2:03:71:be:4b:bc:73:7e:
                    46:d5:2e:ca:0c:7b:3e:74:d3:a1:fb:0f:a0:ea:11:
                    e3:90:1f:d7:6b:2f:d2:a4:ff:2d:4d:46:ac:af:1b:
                    8d:af:a3:26:61:97:77:58:67:14:db:7d:ca:f2:a9:
                    2c:c1:54:27:c0:c5:51:79:84:69:d0:8c:5d:1b:ca:
                    9a:9c:e0:34:d9:bf:38:64:b7:50:98:0a:1e:e7:27:
                    85:08:13:3a:14:dc:5c:ab:a0:84:31:65:4d:0a:16:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2A:03:51:C3:D9:A4:15:95:F4:34:E6:A4:95:2E:52:4B:2D:F1:0C
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:91:9b:9b:cf:18:bf:12:b8:61:5d:1e:b1:8c:1e:f7:0d:
         17:7e:b1:4a:71:6e:22:7a:07:3f:50:a0:cb:2b:c7:19:3e:98:
         ca:8d:cf:c4:5e:eb:68:bf:c1:de:c7:a6:ab:c0:68:db:bc:f5:
         ce:94:1c:5d:3a:26:c9:58:ce:e1:f1:c5:3b:46:3a:81:7d:78:
         9a:b8:b1:8b:39:0d:06:0b:23:c1:f0:21:c8:40:88:ec:9a:e8:
         8d:ee:a7:ce:0e:94:a5:30:33:5a:62:3a:35:bd:83:f3:d5:e1:
         37:1f:e5:d2:ea:96:1b:cf:8f:04:94:6e:35:9c:f9:9d:aa:1f:
         ad:65:d2:0d:da:55:6e:c3:1b:67:50:0f:ce:73:e3:c4:5c:75:
         d9:00:20:e8:56:c2:7f:44:6b:6e:25:12:3f:16:7c:24:bc:33:
         7b:54:3f:82:ce:d8:b1:ba:c6:a0:64:f7:53:eb:3f:97:f6:a6:
         ec:90:94:b1:2f:ac:3e:93:dc:ab:ce:8f:86:9e:08:46:0b:78:
         89:e3:59:58:5b:a1:78:9f:5d:0e:dd:d3:dd:78:dd:6e:fc:98:
         b1:45:5e:b1:1b:7f:3a:cc:7d:0d:e0:18:bc:61:b1:5e:06:2d:
         57:81:31:45:c9:0e:bd:95:12:47:64:26:2e:71:ff:89:e8:8f:
         53:3f:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:41:19 2026 by rpki-client