This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File:                     YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier:          l8qHcEFFs4lUwvvAa2XnfkDKzUuHy8WbVbQK10PZEHc=
Subject key identifier:   0D:B2:5F:99:E5:10:87:8D:B2:AD:30:30:1F:A1:8D:9A:C1:DD:88:9A
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer:       /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial:       019BF3BDD1CEB6CF120579A025330403A92F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number:          177A
Signing time:             Sun 25 Jan 2026 06:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:02 +0000
Files and hashes:         1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
                          2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
                          3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: hbW+VMyiZ1y7Sp1iZKYx6L6q6mZZoc9B+vzeJ1g69uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:d1:ce:b6:cf:12:05:79:a0:25:33:04:03:a9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
        Validity
            Not Before: Jan 25 06:01:02 2026 GMT
            Not After : Jan 26 06:01:02 2026 GMT
        Subject: CN=0db25f99e510878db2ad30301fa18d9ac1dd889a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:e3:5b:b8:f8:cc:4f:e6:12:8c:b1:b5:c5:
                    d9:bf:0e:a8:4d:12:65:8e:6f:21:eb:6c:5d:96:9a:
                    7f:16:75:9d:f6:d9:a1:3b:5d:86:73:3d:e3:aa:98:
                    c5:e8:17:8a:9f:10:c8:ca:ec:05:5e:ea:ae:0e:c1:
                    ee:8f:dc:4c:7a:d4:4c:10:98:94:24:4d:45:59:5e:
                    25:29:84:05:16:21:2b:5e:4e:69:0f:c9:78:d5:28:
                    57:61:07:6e:ca:1e:30:50:1e:2d:e1:fa:30:5f:43:
                    02:9b:c7:f7:3c:6d:96:e0:b3:a7:06:a6:b8:e3:7c:
                    c9:28:9d:db:ca:cb:1c:8b:f6:26:96:9b:fa:91:a7:
                    e5:77:0e:29:53:41:31:ee:f0:4d:c0:39:22:ca:b3:
                    8e:d3:cf:78:52:6f:b9:33:57:b4:66:ea:4d:43:19:
                    5b:a5:d0:4d:f6:3b:f4:1c:d2:e7:df:62:40:ed:fd:
                    34:44:72:44:1c:24:30:7a:7e:8d:8c:75:59:56:45:
                    07:c8:67:68:63:24:27:f0:cc:00:26:89:da:1c:09:
                    f9:e2:61:60:9f:f7:a1:fd:41:e9:1c:b5:ad:14:e2:
                    f5:9b:bc:6a:0e:01:ec:c7:69:80:74:dd:92:5f:fa:
                    14:04:50:8b:21:d9:95:28:34:35:fe:92:a9:7e:7b:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:5F:99:E5:10:87:8D:B2:AD:30:30:1F:A1:8D:9A:C1:DD:88:9A
            X509v3 Authority Key Identifier:
                keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:2c:de:52:6e:69:90:70:6d:bc:bf:51:3a:66:f7:70:47:
         89:8c:b8:36:5b:26:f2:e0:0c:82:74:4e:12:8f:9f:ce:31:bc:
         9d:76:47:67:fc:0b:09:72:ae:de:f4:b1:2f:dd:86:1c:06:d7:
         da:9e:e7:40:17:da:b1:54:de:72:59:ed:10:42:fe:55:b0:0b:
         4e:a9:c8:9a:16:28:51:24:07:92:17:e1:bf:e8:a0:4b:d2:9a:
         24:60:78:c0:2a:05:08:d9:ee:22:48:cb:2c:2d:84:99:2c:5d:
         e0:92:8d:fa:5f:47:90:a6:9f:49:39:3e:b4:32:e5:d6:3e:8c:
         dc:d1:59:f1:0e:cc:02:56:de:0e:59:f5:4a:8d:58:08:f3:42:
         97:2c:59:25:e2:40:f2:3f:96:f4:56:9c:35:bc:2e:2d:8f:b1:
         ff:38:27:d6:18:6a:3c:7b:46:33:8d:85:16:f4:3b:ad:6e:dd:
         ec:7d:05:c5:81:47:d6:77:23:ae:19:e2:19:6d:ac:1a:ae:67:
         4b:9e:27:02:6a:95:6c:62:44:50:e4:3d:d2:0c:a3:1c:b7:8e:
         45:b9:ea:f5:c1:1d:1c:18:49:1d:22:71:00:1b:e6:bc:ff:f7:
         b9:40:6c:29:f2:03:91:10:55:d9:f7:6d:ae:74:9c:c7:27:03:
         45:ff:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:28:28 2026 by rpki-client