This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          Z6vRI3PoiqBeUNDNtxDI+PpHJxqSCVlZNmqKESmXgnc=
Subject key identifier:   F2:BB:27:3F:05:2D:FF:29:98:A2:38:39:CE:F9:2B:4B:9F:3E:CB:DD
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       019BF4D0A36ED7B92A7A42D41CE582134D2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 11:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:12 +0000
Files and hashes:         1: _ogFXsnc26cwnEEfI1RwCOLLjKE.roa (hash: T8WBXJPVj3V1XgVoalRoALm/8/55OH4oJDKe47m+Cgk=)
                          2: cisGlTDG6YbGvbXjq8ObLwOftto.roa (hash: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho=)
                          3: uWQ_yyWTJKlwMIna4dHe1PfEbz8.roa (hash: tvPaUHk8Xmgw+avX8XEILYU/M4IbkxRiILy7UdTCanQ=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: +qtB5AdcezwkPnqpKeukff89kpV5Et5hChUI7HAjj/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:a3:6e:d7:b9:2a:7a:42:d4:1c:e5:82:13:4d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Jan 25 11:01:12 2026 GMT
            Not After : Jan 26 11:01:12 2026 GMT
        Subject: CN=f2bb273f052dff2998a23839cef92b4b9f3ecbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:97:ba:de:1d:12:b2:92:49:89:3f:51:7c:
                    41:f2:ce:ad:75:02:bc:81:39:ff:2b:ef:bc:4d:f9:
                    8d:df:5b:37:81:88:8f:fd:b0:da:34:77:67:ab:7f:
                    a9:6b:e7:bf:4b:25:a7:75:e8:a8:9a:67:f7:3c:32:
                    24:cf:a3:1f:63:97:4b:95:ac:3b:c9:b2:fc:71:c9:
                    6b:24:b0:43:fe:38:11:75:dc:03:d3:6b:ed:f5:03:
                    37:8b:e9:27:99:1a:50:37:50:aa:fb:2d:21:72:bf:
                    f7:7c:20:f5:e5:6a:1e:1b:4c:56:d3:77:15:2d:bc:
                    6f:08:1b:49:97:f4:09:16:7c:6f:2e:f1:05:f6:9b:
                    a6:33:c2:c3:dc:b7:ef:fc:58:95:cb:02:5f:03:87:
                    d5:3e:28:dd:a3:89:a3:40:f7:eb:31:45:bc:43:81:
                    7c:3d:c9:0d:41:eb:e4:a1:27:2c:ae:ee:0e:94:98:
                    ca:8f:70:89:a6:e6:84:28:12:59:50:b2:d8:f3:bd:
                    2b:29:cf:7c:23:30:8d:58:ce:8a:fc:cd:1c:ce:5e:
                    cb:14:17:11:f3:03:4e:fc:7a:4b:b0:b9:9c:a3:3f:
                    5d:1a:72:88:00:0a:bf:64:ac:4f:46:dc:62:c1:04:
                    83:e7:5e:b5:9f:f8:53:8b:93:99:8a:39:aa:20:e4:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BB:27:3F:05:2D:FF:29:98:A2:38:39:CE:F9:2B:4B:9F:3E:CB:DD
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:68:6f:a6:59:c7:03:59:a4:3d:ce:4d:e7:ff:4c:f5:4f:
         8e:d1:cb:96:28:be:9c:ef:22:30:77:77:cc:65:c5:e3:66:5c:
         5a:5d:c7:a4:f7:10:76:3e:d5:0d:dd:f7:58:87:cf:49:00:f6:
         5f:8a:d9:4c:dc:12:40:ef:fc:51:2b:f6:5f:43:14:80:4b:0c:
         3c:80:e8:3e:d1:f7:30:ae:c9:d9:0d:63:e9:69:09:9d:6f:82:
         cb:35:d6:c3:a8:c9:19:18:8c:b3:20:e4:26:9e:e8:8f:dd:a2:
         14:8c:b6:5f:ac:8e:68:e7:87:a5:9e:ec:24:72:06:85:9f:ad:
         e2:13:e2:51:96:9a:59:ce:86:18:28:23:d0:a4:8f:48:a4:9c:
         6e:c9:65:15:9e:cf:39:26:6d:9f:47:a4:80:4c:1e:07:a1:e7:
         01:01:75:d1:46:47:64:ff:1e:6e:95:18:2a:ca:c3:64:b8:3d:
         b0:3b:d2:68:43:6d:6b:b4:da:ef:7e:27:d3:84:a4:c5:79:cd:
         44:c6:ff:3b:6c:f7:a0:5b:b3:32:eb:92:ea:51:fc:7f:5d:92:
         43:86:74:7f:96:53:ff:f2:d3:15:ad:98:be:e5:ba:4a:b4:f4:
         04:c4:64:db:0a:f4:b5:e1:9a:d2:32:3f:91:11:22:c5:b4:e2:
         c9:1a:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:27:02 2026 by rpki-client