This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File:                     YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier:          oZplnREe1TfnJx7mm1I97S6XRXIKjEDGmR5E8YBF0YM=
Subject key identifier:   67:FE:D5:1A:CE:02:F4:36:19:74:30:5D:13:54:91:74:EF:42:BC:9B
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer:       /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial:       019BF6BF826D7C31AADF754E8DF21A1CB874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number:          177C
Signing time:             Sun 25 Jan 2026 20:01:44 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:44 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:44 +0000
Files and hashes:         1: RF-tJIO2NICablpWJ0rxXstB-5E.roa (hash: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=)
                          2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: BrpIk0wlilikAdo7BqrPEojAQ5SrF+7hnsNcYJFOsVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:82:6d:7c:31:aa:df:75:4e:8d:f2:1a:1c:b8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
        Validity
            Not Before: Jan 25 20:01:44 2026 GMT
            Not After : Jan 26 20:01:44 2026 GMT
        Subject: CN=67fed51ace02f4361974305d13549174ef42bc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:a9:c0:7f:47:53:93:b9:46:f3:ad:3d:de:
                    42:d7:44:ab:d3:e7:cc:2b:82:4c:c4:46:92:09:ba:
                    9a:28:92:a1:02:83:bd:82:fc:1a:c9:b5:03:16:54:
                    43:57:ac:bd:63:79:a4:c1:2b:d2:6a:62:c5:ba:84:
                    99:03:09:c3:07:96:fc:ae:69:8a:d1:ca:51:88:20:
                    c3:3b:7e:de:d2:d5:ae:66:f3:53:3c:ea:21:8a:5f:
                    f9:dd:2e:b2:49:67:80:99:f3:70:5e:65:13:62:c9:
                    10:07:4e:76:85:7d:b8:c3:84:54:61:02:9d:cd:6e:
                    84:54:06:44:fd:0d:1d:03:49:93:84:ff:2c:1c:88:
                    ec:32:a1:3c:7f:06:85:51:a5:94:bb:0c:16:90:b8:
                    25:ce:4e:03:bc:55:d1:46:d0:91:08:35:b0:7e:dc:
                    d9:23:ec:30:01:97:40:ff:b7:50:27:c7:9a:f6:7e:
                    0e:1c:fe:98:23:78:d9:d3:fa:32:42:36:e1:e8:6c:
                    90:79:cb:ac:b2:d6:1a:9b:39:9a:0f:bd:e0:28:8c:
                    bf:2f:a5:e8:9b:b2:e0:eb:d0:d8:e7:d3:eb:1d:74:
                    ca:e9:6a:11:60:a9:1a:ee:71:e1:fa:a7:db:d6:af:
                    2a:d0:36:0a:4c:15:26:7d:7b:5e:94:28:1b:df:cd:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:D5:1A:CE:02:F4:36:19:74:30:5D:13:54:91:74:EF:42:BC:9B
            X509v3 Authority Key Identifier:
                keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bb:fc:1a:a8:19:55:f1:a3:02:73:4b:4f:0f:26:79:64:65:
         85:66:2c:c5:ef:9f:d1:d7:06:0f:2f:74:44:01:22:9c:5a:24:
         81:29:64:26:0f:b2:ca:bf:88:fb:9d:2d:f2:93:05:11:6e:06:
         ec:e4:b3:48:34:13:78:36:8f:c4:a9:dc:33:78:8c:a1:aa:36:
         ee:65:44:9a:57:d0:61:a0:cb:65:5c:34:18:94:28:4a:fa:1c:
         a2:44:b0:7f:71:b6:38:d1:09:5e:55:39:63:c3:9f:0b:fa:6e:
         18:dc:91:37:53:24:57:07:c3:dc:c1:5a:3f:61:ef:59:12:7d:
         c0:e2:e7:8f:55:fe:12:b7:b3:53:27:a7:1f:12:07:58:d1:7e:
         3f:5b:01:e9:af:f2:04:ca:db:57:91:dc:b9:09:23:9a:4c:47:
         3d:e8:48:05:b2:6d:0b:7c:c3:d8:31:48:52:11:2e:25:13:45:
         19:6c:55:4a:9a:f6:86:b5:13:be:2e:44:f5:fb:18:03:4f:43:
         0d:9a:ed:cd:22:0a:09:a6:71:aa:0e:21:d0:bb:c6:e6:7c:07:
         a9:45:68:8a:d1:5d:fd:32:41:92:0f:6d:ef:48:9b:ca:cd:f3:
         a7:54:1f:1c:9a:c1:17:a5:7e:74:c0:33:b9:a3:a3:f5:78:6f:
         57:7f:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:06 2026 by rpki-client