This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File:                     yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier:          bL9bT6L4qzhi+abVVY54fAP/mwHK3N88JVOAUyhEH9Y=
Subject key identifier:   EB:67:D9:D4:7E:34:43:8B:06:9C:8B:2A:44:85:22:D2:30:F1:94:C5
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer:       /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial:       019BF2072D6419122C92E03E7AD4CEF9EAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number:          17E7
Signing time:             Sat 24 Jan 2026 22:01:55 +0000
Manifest this update:     Sat 24 Jan 2026 22:01:55 +0000
Manifest next update:     Sun 25 Jan 2026 22:01:55 +0000
Files and hashes:         1: CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa (hash: /XZl1WB2nbiNcL9b2RlvpS4iBe26ZsfShmWMbksslmc=)
                          2: R7rOqqQV9FpDCZLBm9QH6KbRejI.roa (hash: mcqImNWLjpTecGkgufT+Ix02VEv/VipznJBswQOZYeo=)
                          3: S3ly6OpAOrIt_7luoCILOFS7SJ0.roa (hash: MI6S4+JLe7VwJwm81yAr9HyDfPieJGPwWA3IVqKAm4s=)
                          4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: cUknYnSZwv8R5jx++BpcbPyXylrEPUubNwjMB6lXATg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:07:2d:64:19:12:2c:92:e0:3e:7a:d4:ce:f9:ea:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
        Validity
            Not Before: Jan 24 22:01:55 2026 GMT
            Not After : Jan 25 22:01:55 2026 GMT
        Subject: CN=eb67d9d47e34438b069c8b2a448522d230f194c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:33:95:de:42:08:bd:61:9d:9c:ae:88:f0:
                    e4:c5:2c:d9:83:b8:11:d9:4d:6b:56:62:3c:c0:23:
                    33:07:f5:41:b2:21:14:c7:10:c3:6b:da:1a:af:08:
                    3d:80:28:42:b8:9d:10:9e:da:f2:a3:a7:88:08:f5:
                    db:e3:e0:62:2e:86:da:c7:64:e8:07:89:f2:25:62:
                    e6:dd:01:3d:ba:91:ed:b3:a3:c9:df:34:2a:ec:5d:
                    8a:22:0d:f7:54:30:c7:49:81:e2:aa:a5:a3:48:d5:
                    e1:bc:58:ae:0a:b6:66:8f:35:9c:1d:79:ad:0c:e5:
                    0f:20:4a:41:59:17:0d:2a:5e:e4:01:13:63:99:66:
                    9f:b4:70:bf:99:80:cc:40:30:a2:c3:d5:01:9b:dd:
                    f8:e9:75:0f:4f:64:76:6b:af:3e:59:9c:fb:3b:d3:
                    28:6d:9b:68:a0:b1:79:3e:ae:09:2f:63:97:53:ab:
                    bc:e4:a7:80:54:34:45:70:63:be:ab:15:d4:e7:25:
                    16:c8:59:90:e0:a6:49:89:7e:e8:4b:6e:f3:05:7a:
                    3a:4f:6c:06:98:bb:6d:cf:4c:18:ce:90:a7:2b:8b:
                    21:2f:e9:0c:d8:64:e5:a2:0d:b7:4b:de:00:90:79:
                    d1:93:92:68:c0:b8:65:57:91:48:e7:8c:87:ff:3c:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:67:D9:D4:7E:34:43:8B:06:9C:8B:2A:44:85:22:D2:30:F1:94:C5
            X509v3 Authority Key Identifier:
                keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:f5:23:67:03:4c:14:d4:92:09:09:e3:72:82:2a:81:7a:
         98:24:02:5d:30:5f:e7:37:db:41:d1:c8:73:17:d7:70:8f:b8:
         f5:1e:c7:e6:30:e3:19:bc:51:c1:92:73:2c:6b:a7:2e:4c:ec:
         0f:82:80:0a:98:70:6d:fa:4a:5a:bb:b8:9a:e0:cc:15:1e:9d:
         16:f3:04:62:8d:af:27:a4:94:b0:67:ee:cd:f1:ef:ce:57:04:
         fb:29:f8:6f:0b:de:ef:9b:21:f1:93:08:67:fd:f6:0d:e2:66:
         bd:61:7e:fb:a3:95:2f:e0:c7:a2:8a:9a:d3:b2:45:9e:e8:8b:
         9f:b4:62:8c:95:32:5f:fb:66:1f:c6:d0:3a:cf:13:76:95:cd:
         7b:44:d1:90:c9:8a:ec:15:4d:f1:4a:7b:8e:75:a9:a9:f1:0a:
         55:6a:f1:9b:bc:49:1a:e3:d5:91:f1:fa:c3:75:a5:66:9a:69:
         ac:6a:61:4e:1b:ca:41:19:ce:36:01:3b:c3:ef:a6:25:08:d1:
         21:90:e4:60:d5:31:63:fc:90:2e:0d:91:7a:e7:91:28:b4:c9:
         8a:33:ea:22:4e:82:9f:94:41:27:a1:8d:c8:f5:0e:fc:9d:71:
         25:fe:5f:97:50:61:cd:bb:15:ab:3d:7d:61:8f:e3:67:05:44:
         74:12:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:08 2026 by rpki-client