This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
File:                     yHR0zrha8xEi7eWG1NZbD1tNl_A.mft (raw, json)
Hash identifier:          7zaA06i2WdFg2WbbwlIQT86WOSfgv2XgxtYynV5YFGo=
Subject key identifier:   A8:C5:FC:F8:AA:F1:83:A9:17:23:9B:49:99:AD:ED:8F:24:C7:5D:9E
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Certificate issuer:       /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial:       019BF80825016F031783F135656DF1BC60E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 02:00:41 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:41 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:41 +0000
Files and hashes:         1: bos6SM7aKOJra7RYZZ1mtKTAVUs.roa (hash: 1H7aFqrene1yynQaBSt/d+zqOjOlIoieVytSTXqiFUs=)
                          2: yHR0zrha8xEi7eWG1NZbD1tNl_A.crl (hash: xjQ25BHTCcj6lc2DCffrH6eTi0jvu2KVzHNisMHiSV4=)
                          3: z_xt-CQRAhsXnLTqgnCrMmbMP58.roa (hash: eIIyzQzJYmbZdcrWUO9WH+pCc1dJXijLjPuV4Vr1ti0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:25:01:6f:03:17:83:f1:35:65:6d:f1:bc:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
        Validity
            Not Before: Jan 26 02:00:41 2026 GMT
            Not After : Jan 27 02:00:41 2026 GMT
        Subject: CN=a8c5fcf8aaf183a917239b4999aded8f24c75d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:62:f0:f2:49:06:df:c1:c8:3a:40:49:19:
                    f1:e5:d3:03:8a:54:17:57:2f:4d:d0:de:f7:5b:85:
                    27:44:6f:ef:2a:72:c3:e4:77:9c:7a:af:d9:bd:7e:
                    9a:d6:2b:45:da:4f:4b:bd:17:b9:d5:e4:20:3f:9a:
                    d7:2b:1d:9c:49:4b:56:0e:16:9b:42:00:42:b6:a5:
                    91:66:36:f8:f6:54:d2:16:20:24:bb:7a:09:f0:6e:
                    c3:ff:97:f9:01:6b:fe:23:fc:e9:6a:4a:0d:7f:86:
                    5f:30:3f:98:c2:41:a5:cd:60:f9:b4:5a:e8:f7:5f:
                    6e:57:fb:86:5f:c9:db:f9:ce:84:b2:c4:45:5e:09:
                    aa:9e:29:d3:39:ec:77:d4:b6:e8:6f:b5:62:8a:69:
                    1b:79:14:f0:ac:ce:13:84:ac:e4:84:63:ed:9d:5b:
                    3e:4c:96:0d:20:94:25:ef:0f:96:75:c1:3e:23:4a:
                    af:12:1c:b7:21:ed:94:0b:26:b2:3a:27:ba:50:36:
                    b6:8f:d1:63:8e:e4:07:91:b0:83:ec:a4:b2:93:69:
                    4d:40:4b:9d:fa:b2:31:b5:6f:20:62:a4:02:3c:6e:
                    92:ef:6e:d4:c4:01:da:a0:e7:ee:fa:66:0a:76:14:
                    d7:f0:ea:5c:d0:8a:c8:5f:54:46:0c:fc:32:91:f4:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C5:FC:F8:AA:F1:83:A9:17:23:9B:49:99:AD:ED:8F:24:C7:5D:9E
            X509v3 Authority Key Identifier:
                keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:e8:ae:02:c8:c4:a4:54:e6:72:ef:69:ed:ef:8f:7b:a8:
         3c:ef:51:ed:cd:c9:f7:66:03:81:1a:85:d1:42:1c:ab:72:d8:
         d2:bc:45:71:5b:5f:9f:aa:32:53:4d:f6:15:e9:f5:08:c7:a3:
         6a:3c:aa:b0:2d:a9:d1:cb:b6:d1:48:05:fe:aa:cb:aa:86:d5:
         28:ad:27:a7:03:93:b4:15:2e:7a:22:fa:23:00:81:e9:93:13:
         82:8a:ae:e5:50:4d:36:ab:07:d4:77:6f:8e:a4:28:7d:78:75:
         9d:c0:60:3d:c4:fb:4e:81:35:49:39:22:ee:92:bd:9b:9f:85:
         96:f6:8f:17:51:82:fc:4e:2c:c9:28:3b:be:59:a3:fb:49:36:
         42:ed:d4:16:07:77:16:19:42:c2:d3:6c:ec:6e:6c:ee:15:54:
         83:e0:ba:29:dd:85:53:19:31:3b:ad:88:73:23:57:d8:26:d5:
         8b:2d:d1:3c:4a:f6:78:56:1f:9b:f7:5b:66:de:3b:c9:f6:4f:
         b5:81:86:0c:11:17:96:a6:d3:99:a4:74:63:0e:c6:df:da:9f:
         f5:ee:c6:ed:bc:5e:b2:76:fa:f3:96:1b:56:8a:e1:80:10:e3:
         82:65:93:b0:4c:8d:50:8c:58:64:4d:26:4d:d6:71:c5:9f:1a:
         21:39:43:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4CCUBbwMXg/E1ZW3xvGDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0
ZDk3ZjAwHhcNMjYwMTI2MDIwMDQxWhcNMjYwMTI3MDIwMDQxWjAzMTEwLwYDVQQD
EyhhOGM1ZmNmOGFhZjE4M2E5MTcyMzliNDk5OWFkZWQ4ZjI0Yzc1ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHti8PJJBt/ByDpASRnx5dMDilQX
Vy9N0N73W4UnRG/vKnLD5Heceq/ZvX6a1itF2k9LvRe51eQgP5rXKx2cSUtWDhab
QgBCtqWRZjb49lTSFiAku3oJ8G7D/5f5AWv+I/zpakoNf4ZfMD+YwkGlzWD5tFro
919uV/uGX8nb+c6EssRFXgmqninTOex31Lbob7ViimkbeRTwrM4ThKzkhGPtnVs+
TJYNIJQl7w+WdcE+I0qvEhy3Ie2UCyayOie6UDa2j9FjjuQHkbCD7KSyk2lNQEud
+rIxtW8gYqQCPG6S727UxAHaoOfu+mYKdhTX8Opc0IrIX1RGDPwykfREKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjF/Piq8YOpFyObSZmt7Y8kx12eMB8GA1UdIwQY
MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt
MDM1ODY1MjNiMTMzLzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz
LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzzorgLI
xKRU5nLvae3vj3uoPO9R7c3J92YDgRqF0UIcq3LY0rxFcVtfn6oyU032Fen1CMej
ajyqsC2p0cu20UgF/qrLqobVKK0npwOTtBUueiL6IwCB6ZMTgoqu5VBNNqsH1Hdv
jqQofXh1ncBgPcT7ToE1STki7pK9m5+FlvaPF1GC/E4sySg7vlmj+0k2Qu3UFgd3
FhlCwtNs7G5s7hVUg+C6Kd2FUxkxO62IcyNX2CbViy3RPEr2eFYfm/dbZt47yfZP
tYGGDBEXlqbTmaR0Yw7G39qf9e7G7bxesnb685YbVorhgBDjgmWTsEyNUIxYZE0m
TdZxxZ8aITlD0w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:07 2026 by rpki-client