This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File:                     YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier:          7R7TWvg5gjxrmuwOIF/gViw+0JJJxl9i4+9M3knJlhQ=
Subject key identifier:   AB:64:60:5C:1A:FA:7E:00:06:E9:C6:73:52:4E:5D:5F:09:71:6D:D8
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer:       /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial:       019BF5AC514997E2D900BAC1DBD6021CF2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number:          064C
Signing time:             Sun 25 Jan 2026 15:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:09 +0000
Files and hashes:         1: 5ZAuleUfs3xsRQhzkoCahGaJCWo.roa (hash: ivILs9BQhVFkirFYVcK8aKDzDGyD3nZV4Eo7Dn0qk6o=)
                          2: JfzkG74hCuXipueYiQnJYRqjhXc.roa (hash: /UjZLGM2bizX+MblKNId48l/mey7CKbKk+KDmswLAkY=)
                          3: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: tUrauYJP9i/TbFXXTc8Hd3Ngydb8+PLwrK1VFyUUwDw=)
                          4: uOJGLkQyNKaT4f4wdR-jRPZe12A.roa (hash: 5CaACMppaC0ZLckUFh8CxWfK9ZG13WoON1Fhk+k16FE=)
                          5: wb0y_StQjDMa_SDpB0fetTMoG-4.roa (hash: zwkaDNDwM/dFM6yP/gTAG7Z5iKNQnQWnPHvM5tlP8v4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:51:49:97:e2:d9:00:ba:c1:db:d6:02:1c:f2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
        Validity
            Not Before: Jan 25 15:01:09 2026 GMT
            Not After : Jan 26 15:01:09 2026 GMT
        Subject: CN=ab64605c1afa7e0006e9c673524e5d5f09716dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:d3:27:68:63:4a:10:a2:ad:4f:34:51:72:
                    ed:93:91:b6:1a:e6:4b:33:1b:76:bc:10:bb:d9:e9:
                    97:47:11:e0:fa:de:f5:39:e3:e0:a6:b3:38:c0:58:
                    6b:07:25:ed:e0:a7:ce:29:d7:7a:cc:04:98:5f:68:
                    36:26:b0:89:05:7e:6c:d9:2d:05:09:b0:68:57:e7:
                    87:89:14:fc:7f:d8:4f:33:2c:e8:a7:ba:4c:8f:22:
                    7a:e2:d4:26:d8:15:56:47:0c:97:c3:2e:26:6f:47:
                    eb:2c:2e:ed:a1:6c:26:91:16:da:95:66:72:ad:da:
                    03:a7:1c:b6:b9:f0:53:8d:ec:97:85:f2:bc:f6:00:
                    42:c5:d5:f4:5e:61:8e:17:69:1b:7c:ab:ef:f5:33:
                    8e:de:fd:e9:f3:60:64:aa:97:91:45:47:e8:17:72:
                    c9:1a:7b:b1:61:6a:cb:70:cb:e1:ef:ae:30:65:0f:
                    d4:d8:36:78:99:b2:20:83:5f:86:aa:1c:76:67:ea:
                    fe:9b:60:b2:55:24:6b:6d:87:a3:57:4e:68:bf:6b:
                    19:08:ff:ff:81:8d:b4:cf:39:6f:45:27:56:ea:e2:
                    1a:28:65:de:e9:41:79:8f:81:71:18:be:7e:7b:fa:
                    39:82:22:83:83:1d:35:71:00:dd:86:c5:bf:c1:05:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:64:60:5C:1A:FA:7E:00:06:E9:C6:73:52:4E:5D:5F:09:71:6D:D8
            X509v3 Authority Key Identifier:
                keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:de:7a:57:6e:c7:da:23:d6:80:0a:fe:0d:be:33:03:e8:
         d5:f8:cf:2b:af:1e:d0:e7:af:c1:09:06:84:87:09:88:b4:64:
         05:80:85:1c:bf:a5:32:a4:5f:ac:53:f9:eb:ab:80:fe:09:35:
         ef:8c:99:92:73:a7:69:b5:bc:a3:0e:1d:01:98:f1:29:bd:0e:
         8c:44:70:f5:7d:36:bf:a2:1f:88:a1:01:3e:bf:20:c7:ed:b3:
         f7:d7:0c:ce:17:d1:fd:cd:0f:86:df:ba:54:65:70:7b:4d:3d:
         8d:62:7a:69:5e:2b:b0:49:78:f1:a7:b9:5e:32:0b:85:e4:3e:
         3f:dd:ea:b2:98:9f:db:2b:38:d3:ec:aa:4e:ad:06:24:c2:fd:
         4a:86:a0:d0:44:0d:70:8b:e2:42:66:12:d5:9a:e0:e6:88:7a:
         c4:e9:6a:42:d2:81:01:4a:11:40:5f:0d:0f:d8:e2:61:bb:e2:
         de:94:98:c0:40:79:0f:59:55:d9:a1:ad:90:e6:50:28:ae:64:
         91:24:70:aa:b6:bb:ec:c9:04:d6:a3:32:4e:42:29:91:42:38:
         f3:9b:33:b8:38:e3:7c:f3:59:ff:27:6b:6f:41:a7:5e:36:5a:
         5e:6e:d2:61:f5:fd:6b:ed:75:22:00:79:6e:50:59:57:48:3d:
         2d:69:ed:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1rFFJl+LZALrB29YCHPL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3
NGJmMWYwHhcNMjYwMTI1MTUwMTA5WhcNMjYwMTI2MTUwMTA5WjAzMTEwLwYDVQQD
EyhhYjY0NjA1YzFhZmE3ZTAwMDZlOWM2NzM1MjRlNWQ1ZjA5NzE2ZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lPTJ2hjShCirU80UXLtk5G2GuZL
Mxt2vBC72emXRxHg+t71OePgprM4wFhrByXt4KfOKdd6zASYX2g2JrCJBX5s2S0F
CbBoV+eHiRT8f9hPMyzop7pMjyJ64tQm2BVWRwyXwy4mb0frLC7toWwmkRbalWZy
rdoDpxy2ufBTjeyXhfK89gBCxdX0XmGOF2kbfKvv9TOO3v3p82BkqpeRRUfoF3LJ
GnuxYWrLcMvh764wZQ/U2DZ4mbIgg1+Gqhx2Z+r+m2CyVSRrbYejV05ov2sZCP//
gY20zzlvRSdW6uIaKGXe6UF5j4FxGL5+e/o5giKDgx01cQDdhsW/wQXHLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtkYFwa+n4ABunGc1JOXV8JcW3YMB8GA1UdIwQY
MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt
ZTQ3MzUzMWY2ZmU4LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4
LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxXeeldu
x9oj1oAK/g2+MwPo1fjPK68e0OevwQkGhIcJiLRkBYCFHL+lMqRfrFP566uA/gk1
74yZknOnabW8ow4dAZjxKb0OjERw9X02v6IfiKEBPr8gx+2z99cMzhfR/c0Pht+6
VGVwe009jWJ6aV4rsEl48ae5XjILheQ+P93qspif2ys40+yqTq0GJML9Soag0EQN
cIviQmYS1Zrg5oh6xOlqQtKBAUoRQF8ND9jiYbvi3pSYwEB5D1lV2aGtkOZQKK5k
kSRwqra77MkE1qMyTkIpkUI485szuDjjfPNZ/ydrb0GnXjZaXm7SYfX9a+11IgB5
blBZV0g9LWntwA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:51 2026 by rpki-client