This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          R1jj185ewPotC08E2b39wq37DYdhU+7t4S2gmwhZNsM=
Subject key identifier:   B4:94:B3:A8:46:91:C8:28:29:C5:ED:01:02:69:95:E5:BA:66:C1:D1
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019BF5ABBADED985B312B7A33B309E3A89CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          07D1
Signing time:             Sun 25 Jan 2026 15:00:30 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:30 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:30 +0000
Files and hashes:         1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
                          2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
                          3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: M8zfsutcQ7u7rPNoPhDBKVc2Dq6YpIFkcwKJVtAgD94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:ba:de:d9:85:b3:12:b7:a3:3b:30:9e:3a:89:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Jan 25 15:00:30 2026 GMT
            Not After : Jan 26 15:00:30 2026 GMT
        Subject: CN=b494b3a84691c82829c5ed01026995e5ba66c1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:cc:00:45:df:aa:37:11:b0:fc:2e:4c:c0:
                    a5:0c:93:f7:55:f3:e6:f3:12:7c:1f:f2:96:78:65:
                    f7:d9:83:6e:5a:43:fb:1d:79:4e:33:05:21:37:b8:
                    cd:a6:ba:c5:f7:9c:2b:bb:41:49:ac:79:0e:05:b2:
                    17:87:e3:b4:1a:5f:e1:ae:9a:d3:6d:e5:ed:96:37:
                    33:9b:1e:3e:5d:f7:91:e4:a2:24:e6:9e:85:aa:55:
                    90:2e:ce:5f:c4:d0:f7:42:af:35:5b:ff:61:77:de:
                    7c:35:da:b9:a4:9a:67:b0:79:51:77:dc:fe:6f:4e:
                    da:c9:4f:48:96:35:0a:03:b6:84:51:3f:6c:58:48:
                    44:bf:8d:fc:d3:e4:7d:3c:16:c5:18:4c:25:5a:e1:
                    71:6d:71:2e:38:55:4d:2e:5a:22:74:88:14:02:28:
                    39:86:53:02:18:ae:cf:60:b4:3d:70:6a:bd:09:00:
                    e5:23:c8:6d:88:2a:13:28:0f:23:78:4d:a2:6d:c5:
                    ba:58:87:0a:1e:f5:a8:ff:54:60:b9:e4:cc:78:0c:
                    d7:37:9e:26:e2:d8:34:c7:a9:53:6b:91:4b:7d:ee:
                    a7:90:cb:57:2c:48:a0:5d:4a:0a:3b:a5:56:f6:f8:
                    1d:d4:5c:72:9d:8c:4e:cb:3d:b7:9e:49:08:a7:b5:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:94:B3:A8:46:91:C8:28:29:C5:ED:01:02:69:95:E5:BA:66:C1:D1
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:ce:9b:82:7d:3e:6a:b5:70:8a:30:af:68:14:b4:dc:20:
         40:0d:e2:0f:de:89:d9:20:29:7f:e4:7c:ff:fb:f7:9f:88:b4:
         f6:1a:22:65:bb:eb:73:4d:df:e8:de:cc:b2:ea:73:d6:d9:73:
         8d:1e:33:81:d5:01:64:6c:1c:e0:d4:00:c9:68:0e:ac:d6:5f:
         67:f9:2f:11:ae:41:b9:55:32:a6:4d:eb:d4:55:e6:1a:11:b7:
         61:5b:6c:b7:41:85:45:7f:27:f6:e0:47:de:fc:76:6c:6e:49:
         7e:7f:8a:93:1a:ed:24:9c:11:7f:88:47:dd:50:e7:8c:82:e4:
         c5:93:e7:f5:53:a8:05:90:50:c0:9c:50:0f:57:93:f4:c2:26:
         d5:81:f5:d8:0a:f5:98:e2:ff:42:43:d5:66:1e:a0:dc:9b:b0:
         bd:91:1a:6d:df:8a:58:5f:2a:c3:c8:24:b5:f9:b9:bb:cc:67:
         40:aa:48:b6:55:db:da:91:bf:db:e8:f7:a1:76:ef:98:a3:53:
         49:da:8e:42:3c:9e:a8:1e:a3:40:0b:a9:96:7f:29:fe:5d:53:
         89:0e:8b:b0:4f:de:a5:5a:be:f7:b3:52:44:2d:42:c1:49:72:
         a5:14:15:b8:1e:4a:65:f3:80:4e:ea:c8:f9:d1:6b:b5:62:2c:
         d4:ba:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:52:53 2026 by rpki-client