This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          tt3TDJgOEyTggtQxuhdQ3v1Qm5l1+if8Y7BP79QnyPA=
Subject key identifier:   47:87:6B:3E:63:55:DD:8E:78:6C:BB:19:EB:3D:1D:75:F5:EF:A9:69
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       019BF50759B1248C419D06B5DEC5DB584530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          17F1
Signing time:             Sun 25 Jan 2026 12:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:57 +0000
Files and hashes:         1: HqGTGlJNCwD8iNo3O2yITxmeCwc.roa (hash: lYCD20DI0iQge3ODQugwP5cP7vicqwIE+12AsMdZEFg=)
                          2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          4: aPG3EYw2VofOCEzLOdUvwSZioag.roa (hash: Wotu54IXEWdJ5q1KogRg82/7w2mseyamEfZGS9yMPLs=)
                          5: sR1oPQtW-Makp0q2GEwGGGWP6-4.roa (hash: 42QylWBVPcRn+sQtIzfk5m8WJP9tWYlxV8MBA5fdb50=)
                          6: uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa (hash: DmupEvIL4K/NQQ7P0WNq04y0+5V0bCdj/6N1toh/r7g=)
                          7: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: 3Jwan54rRNmez7ijATlUEVmKWESp9n2ZTjLr1B6bVpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:59:b1:24:8c:41:9d:06:b5:de:c5:db:58:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Jan 25 12:00:57 2026 GMT
            Not After : Jan 26 12:00:57 2026 GMT
        Subject: CN=47876b3e6355dd8e786cbb19eb3d1d75f5efa969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:85:b2:f5:70:4d:1c:8c:72:83:33:a7:ff:
                    20:46:b8:f2:e7:89:92:b6:6b:06:63:2f:34:cb:ab:
                    c6:d4:ee:3d:36:78:28:f9:71:5c:e9:1a:70:fa:f3:
                    ea:6e:1b:5d:5c:b0:b2:af:9d:bc:77:5f:79:6d:ba:
                    b1:23:92:c3:4c:cf:c1:9a:df:6a:66:52:eb:de:1c:
                    8b:1a:bb:d3:08:5b:c7:13:f4:a7:d4:ca:e6:0f:06:
                    2c:5a:41:7c:7a:00:88:c8:3d:7b:83:bf:89:fe:75:
                    12:d7:30:40:21:50:bd:05:7c:60:38:cc:80:ff:18:
                    b1:63:94:fd:46:52:49:70:33:cf:d6:f5:ed:30:28:
                    13:75:5c:71:9f:cf:55:14:a3:d7:e5:ec:0e:5c:57:
                    7f:2b:ab:6f:b0:67:9c:5f:c6:3f:86:96:4e:4f:65:
                    00:14:fe:4c:7a:82:e4:ee:ab:c9:9e:d1:0a:40:3d:
                    3a:4d:9b:1b:b7:f5:b5:d2:71:ad:d8:e4:3f:8e:76:
                    c8:36:de:57:75:2b:67:a1:e8:00:3e:00:9f:c7:fe:
                    98:a0:34:dc:5b:50:64:ca:fe:a5:1e:84:19:62:af:
                    fd:05:fa:53:6d:05:b3:fa:8d:9c:08:88:a4:80:9b:
                    a8:a1:bb:40:af:a0:9d:28:62:3c:0a:27:05:0b:89:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:87:6B:3E:63:55:DD:8E:78:6C:BB:19:EB:3D:1D:75:F5:EF:A9:69
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:55:3b:87:38:6c:55:96:99:3d:5f:2f:c7:a7:a3:73:49:b6:
         74:a5:1b:8a:74:16:4d:8b:9e:cb:c4:c9:ff:a6:31:f1:e5:64:
         1f:48:6d:4b:3d:63:d6:f7:a8:38:16:15:c2:a9:5d:a2:94:c8:
         dc:a1:af:0a:b1:5e:f0:bd:68:89:64:81:d4:18:19:b3:d1:20:
         a7:74:50:d5:a2:87:ec:89:6a:3e:f8:8c:c6:9a:94:02:c7:bb:
         aa:10:2c:a5:08:2d:40:19:24:22:51:b9:20:f3:8d:17:58:2f:
         1d:ed:85:80:eb:b0:36:d6:cc:53:c0:fc:ce:85:e2:8c:26:a9:
         3b:76:45:12:f2:4e:28:6b:5f:11:42:92:7e:f1:a3:60:06:2c:
         cd:a3:db:85:b0:4f:2e:58:40:0c:24:df:15:9c:69:8e:3c:0e:
         3a:50:fc:bd:3e:35:2f:8a:1e:95:ea:6f:22:d6:10:10:43:71:
         05:74:49:d7:d3:63:73:3e:1d:f7:a2:20:ea:f8:fb:a7:ee:0b:
         56:6a:dc:25:d6:b3:77:e6:d8:13:ba:3e:25:b6:23:ad:f6:1f:
         2c:34:c0:64:8b:f1:df:0f:fb:15:1d:ce:eb:aa:89:d5:43:2f:
         e7:02:da:98:e8:da:0c:e8:c4:94:66:31:88:6e:44:f0:bf:10:
         e3:2d:f1:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1B1mxJIxBnQa13sXbWEUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw
YTViMzEwHhcNMjYwMTI1MTIwMDU3WhcNMjYwMTI2MTIwMDU3WjAzMTEwLwYDVQQD
Eyg0Nzg3NmIzZTYzNTVkZDhlNzg2Y2JiMTllYjNkMWQ3NWY1ZWZhOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEaFsvVwTRyMcoMzp/8gRrjy54mS
tmsGYy80y6vG1O49Nngo+XFc6Rpw+vPqbhtdXLCyr528d195bbqxI5LDTM/Bmt9q
ZlLr3hyLGrvTCFvHE/Sn1MrmDwYsWkF8egCIyD17g7+J/nUS1zBAIVC9BXxgOMyA
/xixY5T9RlJJcDPP1vXtMCgTdVxxn89VFKPX5ewOXFd/K6tvsGecX8Y/hpZOT2UA
FP5MeoLk7qvJntEKQD06TZsbt/W10nGt2OQ/jnbINt5XdStnoegAPgCfx/6YoDTc
W1Bkyv6lHoQZYq/9BfpTbQWz+o2cCIikgJuoobtAr6CdKGI8CicFC4lHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeHaz5jVd2OeGy7Ges9HXX176lpMB8GA1UdIwQY
MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt
M2I5ODhmMTg4ZDkxLzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx
LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFU7hzhs
VZaZPV8vx6ejc0m2dKUbinQWTYuey8TJ/6Yx8eVkH0htSz1j1veoOBYVwqldopTI
3KGvCrFe8L1oiWSB1BgZs9Egp3RQ1aKH7IlqPviMxpqUAse7qhAspQgtQBkkIlG5
IPONF1gvHe2FgOuwNtbMU8D8zoXijCapO3ZFEvJOKGtfEUKSfvGjYAYszaPbhbBP
LlhADCTfFZxpjjwOOlD8vT41L4oelepvItYQEENxBXRJ19Njcz4d96Ig6vj7p+4L
VmrcJdazd+bYE7o+JbYjrfYfLDTAZIvx3w/7FR3O66qJ1UMv5wLamOjaDOjElGYx
iG5E8L8Q4y3xjA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:24:46 2026 by rpki-client