This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File:                     Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier:          zt9egmCbIreCSEcGydqorMWzglb5YKgIF9zsy9GlXK8=
Subject key identifier:   01:B1:38:56:D2:0B:04:30:1A:66:CC:81:2C:38:80:DB:D0:0E:E6:C0
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer:       /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial:       019BF83F4FCC73461F96748045E66BBF226D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number:          1715
Signing time:             Mon 26 Jan 2026 03:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:57 +0000
Files and hashes:         1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
                          2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
                          3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: 8JB6agZqe/gASpc6ZCNcEQYzW3/AqzpFyP0XLem9Mr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:4f:cc:73:46:1f:96:74:80:45:e6:6b:bf:22:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
        Validity
            Not Before: Jan 26 03:00:57 2026 GMT
            Not After : Jan 27 03:00:57 2026 GMT
        Subject: CN=01b13856d20b04301a66cc812c3880dbd00ee6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:ab:ad:2c:4d:91:87:8f:3f:4a:96:34:fa:
                    8b:b2:2d:b4:cf:df:b5:9c:71:bd:e4:11:f7:4d:53:
                    9a:6b:1e:ee:cb:17:76:92:cb:0f:8b:a7:0d:5f:80:
                    71:ef:df:45:8e:92:d1:a5:a6:e3:8a:97:2a:25:da:
                    46:05:98:a7:c5:9c:7c:58:b8:01:8e:bc:09:3d:a1:
                    d4:b1:e5:df:86:d8:c9:6c:e2:70:ca:6d:82:71:c1:
                    2a:80:4e:30:7d:b0:d6:38:04:a6:95:02:ed:1b:5b:
                    41:b3:03:bc:85:13:fe:e2:dd:d3:50:8d:20:a4:04:
                    8a:02:fa:61:04:e3:59:47:35:3d:65:d2:12:b0:bb:
                    e1:92:50:0f:97:10:74:0e:e0:2d:2e:8d:85:27:7f:
                    32:86:aa:56:48:8d:2b:ef:0d:d4:25:1e:a1:a5:e5:
                    a8:fe:8f:3e:97:46:db:67:ad:06:ca:02:0d:31:17:
                    69:3e:c9:d4:bb:cb:7a:01:ba:76:e3:69:10:fb:43:
                    c6:eb:23:2f:7e:5e:98:1e:b3:c1:8a:6b:95:60:09:
                    5a:16:7e:43:9c:b7:8c:0c:7e:86:98:9a:b7:d8:fa:
                    89:12:18:81:15:bd:e9:75:84:b5:97:49:85:08:4b:
                    72:11:10:ef:46:f9:2d:c5:a2:fd:b2:93:b6:f3:9d:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B1:38:56:D2:0B:04:30:1A:66:CC:81:2C:38:80:DB:D0:0E:E6:C0
            X509v3 Authority Key Identifier:
                keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:71:72:70:da:1e:ae:9e:36:82:4d:c0:ec:6d:26:24:f1:
         54:12:95:b5:10:d1:31:69:c8:7f:88:44:5e:57:8a:17:68:90:
         b1:c9:ac:0f:8a:1d:be:65:fc:72:ba:bd:3a:80:7e:08:7e:bf:
         8a:0b:2b:9d:45:56:9e:27:28:51:70:8a:7c:31:46:98:a8:3b:
         d5:66:6e:b7:83:9b:80:15:66:68:8f:26:eb:3f:d4:ad:aa:17:
         29:af:98:33:e0:dd:20:a0:68:0d:e2:fe:ce:c6:5a:3b:20:92:
         bc:8a:74:67:4a:52:d3:68:62:c6:eb:4b:d2:35:ec:51:68:08:
         d4:18:a9:77:bd:28:9d:e3:b0:08:b1:d1:6d:18:31:7f:4b:02:
         b5:7e:3d:4f:98:5a:5d:ab:19:2f:60:3c:8d:cf:f4:e1:18:c4:
         92:7f:97:49:6c:7e:2b:a1:83:1b:21:61:30:c5:fa:b1:2c:3a:
         b1:eb:16:e3:07:4b:47:6e:bb:5c:67:0d:e4:00:ef:9a:6d:bd:
         c2:5f:31:44:4f:0a:c9:ee:d3:50:8b:5f:01:cd:a0:bf:b5:7c:
         6a:03:4f:c5:0d:50:ea:58:86:41:32:7d:64:d5:bd:19:50:b5:
         45:66:fc:1d:74:01:e9:e5:2b:27:d0:a7:2f:bc:27:73:d2:47:
         03:1a:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:46:46 2026 by rpki-client