This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File:                     yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier:          ZFig6nzyuexIt7H3XUL4/CRh0W5+JYdEovXcxzjRvpU=
Subject key identifier:   02:5F:05:8C:54:C9:7D:9C:1B:C3:E8:EC:1B:E2:41:75:04:64:44:DC
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer:       /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial:       019BF1CF144D2EE03A14F0C810026ACD76B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number:          0C10
Signing time:             Sat 24 Jan 2026 21:00:38 +0000
Manifest this update:     Sat 24 Jan 2026 21:00:38 +0000
Manifest next update:     Sun 25 Jan 2026 21:00:38 +0000
Files and hashes:         1: CitEHd6r_CsQSgbionGA1eBcMLU.roa (hash: 1rANra1AzVxMgl8VcJaThBHrC2EUS4bUsTwEZ+EKh0w=)
                          2: WubjxHCSaP4QHue8QiWJLn9wu24.roa (hash: gOCleJwqwii3IPAc/S3k490GMZ5rkPiOH6rY9OCeZlc=)
                          3: cP554_mw0i_-2i5ondqs4ybL7Sk.roa (hash: 2BFM3dBYEA6Al1rq89/1sEyXAEFO0eUAmQaufDFqA9A=)
                          4: exHlZbA9ecU2iVgiMPKKZPhmcSg.roa (hash: DmuG2rd/8rphG/dmqlj3swfEdleaGRNUh2TlWVB35X0=)
                          5: ktjIcji8JZjmvPNVbyNsDh1AaNI.roa (hash: OhINTejQ3OUauCVxjnxjYQBZeRf8l4Bc1ZHLwTdPGVQ=)
                          6: mYlVHFIkWhjce6SZlz3waAY66A8.roa (hash: 4EmaIQp2LaV/4WUzCFLlD6HjVOOnifTa9SWdZEfSqzY=)
                          7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: 7kdmFit+AMoBP5VZQBsR/kOetfi0bIBCPrqwBMMthoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:cf:14:4d:2e:e0:3a:14:f0:c8:10:02:6a:cd:76:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
        Validity
            Not Before: Jan 24 21:00:38 2026 GMT
            Not After : Jan 25 21:00:38 2026 GMT
        Subject: CN=025f058c54c97d9c1bc3e8ec1be24175046444dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:69:78:f9:44:c2:14:07:7d:fe:12:e1:fe:
                    4c:cc:dc:f7:09:36:23:f4:2b:e9:97:b2:0a:f6:39:
                    be:06:f3:99:03:a8:ce:43:67:9c:6a:95:a9:41:97:
                    a0:77:03:2e:71:a3:1e:0b:81:13:e6:9a:2e:63:f2:
                    e0:2a:47:86:e9:e6:23:6f:7b:79:85:ef:72:48:97:
                    9e:74:5f:1a:ba:23:2b:04:0f:71:13:21:5e:db:47:
                    bf:40:9f:c8:65:d0:cc:53:6d:df:c5:7f:6a:30:a1:
                    c7:0b:bb:b7:cc:cc:2d:b0:c4:82:82:95:d5:6b:6d:
                    62:2b:ce:0e:78:54:19:da:19:ce:8f:ed:09:ff:f1:
                    d9:82:54:46:b5:16:86:f2:65:de:39:c0:61:6b:89:
                    16:83:79:92:b0:67:03:7f:48:f6:f6:af:16:06:e9:
                    09:96:af:99:1d:9f:77:2f:5a:41:c9:a3:d2:70:d1:
                    46:61:b1:04:7a:7b:e0:64:cc:6f:25:8f:d5:cb:11:
                    de:e9:f9:68:4c:15:f8:e3:9d:17:00:06:17:23:a3:
                    d7:7e:33:b3:0d:df:0f:36:38:31:37:ac:fa:20:cb:
                    25:a3:1d:9c:e2:fa:40:a2:50:ad:6f:df:46:1e:cf:
                    96:9b:71:fb:f4:24:5e:72:52:fa:09:f9:f1:75:1f:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5F:05:8C:54:C9:7D:9C:1B:C3:E8:EC:1B:E2:41:75:04:64:44:DC
            X509v3 Authority Key Identifier:
                keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4c:cf:12:03:99:57:ea:64:2e:2b:e2:aa:db:26:65:06:6b:
         5d:1d:11:68:e0:71:a4:bf:21:de:1b:0a:a8:3f:23:53:b2:47:
         9e:8a:09:d8:ff:2e:e0:35:e1:bb:09:ec:3b:cf:61:d3:ff:bc:
         2f:82:61:b3:b8:12:77:45:c4:49:10:7a:1b:fd:b8:f9:62:ba:
         5e:25:ca:18:ec:dd:46:d7:5a:5d:9a:0f:00:4c:77:ae:11:dd:
         d6:0f:c7:b7:18:7f:ee:d8:ca:cf:5e:47:8e:2c:57:cf:70:ab:
         ee:65:de:ee:e1:38:8e:9c:f5:e9:c7:30:a8:e0:1d:84:67:9b:
         a4:e3:f2:3c:43:9d:ef:cf:b6:7b:ff:a2:8a:cb:ca:7e:f6:89:
         62:6c:fc:35:e1:ba:6c:b1:4c:e5:6f:80:01:aa:fe:80:b7:d6:
         b2:cc:81:64:3d:38:d0:dd:e5:3e:91:68:05:cc:98:a3:e2:17:
         ef:f4:6c:8e:e6:b3:ef:75:59:5a:57:69:05:8b:b5:0a:d8:e6:
         ef:39:07:21:5e:87:89:5b:98:61:d9:6e:04:3a:fe:5b:d8:5d:
         fd:f5:d9:2b:3d:22:8e:9b:eb:7f:2c:95:f4:4d:4f:ba:cd:48:
         6c:44:28:86:ac:8b:a7:13:09:4a:bc:4b:be:aa:d0:6c:4c:fc:
         0f:43:1b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvxzxRNLuA6FPDIEAJqzXa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk
MTdiYWMwHhcNMjYwMTI0MjEwMDM4WhcNMjYwMTI1MjEwMDM4WjAzMTEwLwYDVQQD
EygwMjVmMDU4YzU0Yzk3ZDljMWJjM2U4ZWMxYmUyNDE3NTA0NjQ0NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoRpePlEwhQHff4S4f5MzNz3CTYj
9Cvpl7IK9jm+BvOZA6jOQ2ecapWpQZegdwMucaMeC4ET5pouY/LgKkeG6eYjb3t5
he9ySJeedF8auiMrBA9xEyFe20e/QJ/IZdDMU23fxX9qMKHHC7u3zMwtsMSCgpXV
a21iK84OeFQZ2hnOj+0J//HZglRGtRaG8mXeOcBha4kWg3mSsGcDf0j29q8WBukJ
lq+ZHZ93L1pByaPScNFGYbEEenvgZMxvJY/VyxHe6floTBX4450XAAYXI6PXfjOz
Dd8PNjgxN6z6IMslox2c4vpAolCtb99GHs+Wm3H79CReclL6CfnxdR8cTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJfBYxUyX2cG8Po7BviQXUEZETcMB8GA1UdIwQY
MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt
N2Y0MzViZjU1MDFjLzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj
LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkzPEgOZ
V+pkLiviqtsmZQZrXR0RaOBxpL8h3hsKqD8jU7JHnooJ2P8u4DXhuwnsO89h0/+8
L4Jhs7gSd0XESRB6G/24+WK6XiXKGOzdRtdaXZoPAEx3rhHd1g/Htxh/7tjKz15H
jixXz3Cr7mXe7uE4jpz16ccwqOAdhGebpOPyPEOd78+2e/+iisvKfvaJYmz8NeG6
bLFM5W+AAar+gLfWssyBZD040N3lPpFoBcyYo+IX7/Rsjuaz73VZWldpBYu1Ctjm
7zkHIV6HiVuYYdluBDr+W9hd/fXZKz0ijpvrfyyV9E1Pus1IbEQohqyLpxMJSrxL
vqrQbEz8D0MbaA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:07 2026 by rpki-client