This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File:                     YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier:          Ri5bU6sD74cs4HQdN6MxPcFkEaShLu2HsfQ3EeMQqs4=
Subject key identifier:   B9:71:DC:A6:10:F1:6D:98:F9:DA:C2:FD:44:58:3E:32:CD:D2:3E:3F
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer:       /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial:       019BF2AACFB8F4091C810860C02043519044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number:          13DB
Signing time:             Sun 25 Jan 2026 01:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:39 +0000
Files and hashes:         1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
                          2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
                          3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
                          4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: QYFlGxXOVEXwURv+r8cqo9LZJPMN8E0Jsc31jJv9+pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:aa:cf:b8:f4:09:1c:81:08:60:c0:20:43:51:90:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
        Validity
            Not Before: Jan 25 01:00:39 2026 GMT
            Not After : Jan 26 01:00:39 2026 GMT
        Subject: CN=b971dca610f16d98f9dac2fd44583e32cdd23e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:03:a2:5e:27:b8:e7:ca:19:4e:77:c6:d1:
                    43:54:83:ee:97:4a:48:fc:da:4e:02:75:20:6b:4d:
                    9c:03:4e:2b:bf:40:1e:df:52:3c:79:26:f3:21:10:
                    64:82:f4:24:4e:00:73:cb:82:f7:8a:ce:a6:ea:92:
                    f8:f3:ae:88:9d:45:ef:f8:24:c3:0f:e5:bb:50:42:
                    a1:bb:f4:e2:86:5d:2e:2c:f6:1c:fe:d4:f2:e8:03:
                    5a:11:fe:84:c5:61:b6:66:1a:83:fa:f1:16:97:d7:
                    e3:3d:df:fd:86:7f:f3:2f:09:00:c1:d1:b3:06:e4:
                    f6:74:09:73:9e:b9:6c:09:81:38:c8:02:b0:9f:a2:
                    80:b3:ff:06:88:d8:a4:d4:bb:42:39:8e:14:b2:f2:
                    dd:40:04:86:6d:f5:b2:de:21:33:d1:5f:df:e4:f6:
                    91:dd:15:b0:fc:e5:36:d6:2d:7b:50:c7:8d:95:d4:
                    eb:48:8a:3c:9a:95:a8:46:5a:9c:11:97:28:fc:1f:
                    fc:da:bf:8a:06:b0:38:7b:65:f1:7b:3b:94:9a:54:
                    9d:d2:41:f0:b6:7a:35:89:9d:80:fb:57:6a:37:6c:
                    1d:b1:d5:65:a3:7e:9b:36:ef:67:34:cb:85:ff:2e:
                    f4:0a:01:4b:0d:38:1a:ad:a0:de:0a:a6:11:70:bb:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:71:DC:A6:10:F1:6D:98:F9:DA:C2:FD:44:58:3E:32:CD:D2:3E:3F
            X509v3 Authority Key Identifier:
                keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:c5:d7:a0:19:db:05:2f:05:e3:20:d7:04:da:87:0f:8b:
         ed:00:9d:08:7d:7c:b7:ce:92:af:db:ff:e2:ab:12:8f:a7:1a:
         40:da:15:37:8f:a8:81:ee:05:ea:d8:84:29:e4:4e:43:61:1f:
         08:50:ca:7c:88:a7:f3:76:0e:7b:64:7a:29:0d:0d:90:87:3f:
         fa:32:21:94:53:f8:69:20:f6:13:2b:11:cd:00:d8:3a:05:e4:
         36:9e:33:83:38:c1:44:a2:10:0c:db:56:c1:f1:48:be:44:f0:
         9c:c7:1a:a5:35:e1:4b:60:5c:30:21:a9:10:b0:70:83:e7:81:
         e0:59:7c:dd:42:93:69:e1:3e:75:5c:90:b5:88:be:13:fe:97:
         21:5c:12:17:77:dc:15:13:69:dc:22:cb:7f:14:66:cd:08:58:
         5a:61:1a:60:1e:1b:79:f7:cc:7e:e3:10:e4:4a:0e:8e:e5:bc:
         1a:59:52:9a:25:ca:57:12:45:72:a0:7f:83:78:e4:56:51:ad:
         fb:cc:5e:c2:e6:eb:cf:35:3a:42:c8:81:3f:1f:32:bf:47:6d:
         60:73:68:1a:55:b9:48:e5:a6:3a:5c:73:48:90:97:69:a0:f2:
         19:9d:3e:c9:28:52:3a:29:53:23:d4:79:d9:d9:ac:80:98:3a:
         f9:d7:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:36 2026 by rpki-client