This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
File:                     YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft (raw, json)
Hash identifier:          z6yjaqbEwdIl8gxSY2w/hUZF3cqw/j5Bxe0E/9yYFpA=
Subject key identifier:   E6:ED:CF:D7:B3:66:86:B2:0B:84:9E:82:10:B2:B8:41:0C:0D:18:B2
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Certificate issuer:       /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial:       019BF3870613EFCB19B1E29BBC7CE7A10DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
Manifest number:          1528
Signing time:             Sun 25 Jan 2026 05:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 05:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 05:01:10 +0000
Files and hashes:         1: 2dNlCcYTwuLwzsnBQLcW5azrUC0.roa (hash: LdCokJaoTg0Ayv8WOg6znK8za4O+cYZSIl7zsI7HgqI=)
                          2: MMwhBGW76MVn4Dg5EbZwOtE-V9k.roa (hash: hEekmWExVpRk8yl5uIiicxfMKJpS9Azptnbba7Lmq4g=)
                          3: PJSHdZS95adkLNWcV4sGR1iLw40.roa (hash: 6w7h78uytxCAdBP54QlwzbmDu/qnNv60V+P+VcQ00lk=)
                          4: YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl (hash: v8n3UajlYxYQOQHO2SFu/2mSFs+yLRw7o6DaA/oeqMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:87:06:13:ef:cb:19:b1:e2:9b:bc:7c:e7:a1:0d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
        Validity
            Not Before: Jan 25 05:01:10 2026 GMT
            Not After : Jan 26 05:01:10 2026 GMT
        Subject: CN=e6edcfd7b36686b20b849e8210b2b8410c0d18b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:fe:3d:f9:19:d4:46:62:d7:39:bc:c7:29:
                    40:b5:02:16:21:0c:5d:b2:b4:fe:93:67:62:7b:4b:
                    33:ed:43:98:1a:04:4f:01:a4:2d:0e:f0:75:71:f9:
                    d3:4c:e1:21:ce:f9:9a:aa:3a:8c:8c:9a:b7:74:f5:
                    de:19:43:d2:ee:5e:30:e9:1f:9a:c4:e4:c9:11:5d:
                    2b:02:9c:d8:47:09:6a:c9:b4:41:fb:cd:8f:62:34:
                    be:c4:ed:ef:5a:8e:f4:e5:04:59:79:6d:8e:cc:1c:
                    f3:03:cf:ae:23:34:8f:47:cf:3e:d8:b0:80:29:a2:
                    ec:d9:6f:23:6a:74:3e:ca:28:e6:20:dc:0b:40:96:
                    e7:47:52:da:b1:5a:bf:09:02:24:fc:c6:4a:0d:88:
                    47:85:fa:51:91:96:a8:8d:06:a1:65:d1:ba:6b:0c:
                    82:d8:40:1b:46:d7:78:fc:dd:0a:e8:f2:19:07:8e:
                    d4:ed:21:49:29:fb:28:82:12:bc:d8:6b:b6:24:81:
                    23:69:46:fc:c0:32:4b:e2:e3:28:3d:d0:2f:0a:55:
                    aa:4e:40:85:57:05:fe:08:38:76:e1:a1:cd:88:b2:
                    0b:ea:6b:27:53:fa:44:3c:71:c2:01:c3:ae:ea:7e:
                    d5:56:ff:b1:cc:2d:9f:f8:0c:03:da:70:14:2b:c8:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:ED:CF:D7:B3:66:86:B2:0B:84:9E:82:10:B2:B8:41:0C:0D:18:B2
            X509v3 Authority Key Identifier:
                keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:72:cd:84:e4:5c:98:dc:eb:19:37:f6:0d:94:bf:81:a8:
         93:76:f9:85:96:6b:c2:9a:84:dd:54:40:85:0d:ac:69:8f:e8:
         e3:a9:c6:46:da:3e:35:bf:33:01:d1:14:51:0e:80:23:3b:07:
         81:e0:fe:32:40:fb:d3:dc:3d:68:2c:b6:c5:f2:1d:f2:32:7b:
         78:be:90:12:7b:be:48:ad:c6:fa:aa:34:24:8d:c0:a3:b1:29:
         2a:22:65:86:59:e5:6d:0b:06:c0:9d:e7:49:5f:df:18:6e:bb:
         0c:5a:85:dd:83:f5:9e:13:af:62:ea:b2:b8:1f:fa:d3:53:a2:
         98:03:8b:6c:51:66:36:f3:35:dd:8f:9f:d9:b8:d6:82:8e:66:
         cf:ea:23:11:fb:0d:07:df:ac:52:fa:78:19:5d:8f:b6:f2:40:
         8f:5a:41:c0:31:9c:27:f7:16:0f:09:9e:bd:1b:61:1e:27:15:
         4c:a7:ce:95:e1:e8:49:41:cd:83:b0:d4:2e:4b:79:43:ac:cc:
         f5:e3:14:94:28:79:be:74:e4:95:73:1f:19:df:60:de:2d:47:
         da:a9:27:bd:b6:bc:30:88:0c:0f:37:80:55:c8:d6:b3:b1:2d:
         b7:bd:3f:a8:74:9f:a2:83:fb:7b:e3:44:91:f7:ad:d9:46:f5:
         27:eb:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:09:08 2026 by rpki-client