This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File:                     YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier:          yd586XS6CEHKVmrHoRW9GR0nTBcIi7RNks7dLHLQ8OQ=
Subject key identifier:   50:7B:22:D3:2E:24:5C:34:39:BD:2A:E2:05:1A:9F:8D:DA:92:D2:90
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer:       /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial:       019BF763D1E834EFD015AFCF63C9FFAC4D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number:          10C4
Signing time:             Sun 25 Jan 2026 23:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 23:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 23:01:12 +0000
Files and hashes:         1: FlHMbNs80F0IuT4Av0zk4nnd58w.roa (hash: uOKcbHsW+r2mNq3fiimqbh7cRriRbTOrF8Meua/Wzbk=)
                          2: QuPhVmekJ4dhqBPpcI5OG6WfkBk.roa (hash: c8GP0XBznN8FZcjPHI/drnI5xLOeTCTAN2FjtvB53n0=)
                          3: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: Jjc1nxc3Imd0XV5UHgFReVOiciopi5Qo1ymXHPxHDhY=)
                          4: t94EIWlSW9NG33DSL0GHqLJL-LQ.roa (hash: FMpxWzf+dsmMIA+7EsV6yVLkhEZ3HpxaZOBxRMrjb4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:d1:e8:34:ef:d0:15:af:cf:63:c9:ff:ac:4d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
        Validity
            Not Before: Jan 25 23:01:12 2026 GMT
            Not After : Jan 26 23:01:12 2026 GMT
        Subject: CN=507b22d32e245c3439bd2ae2051a9f8dda92d290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b9:01:45:12:d4:8a:f3:89:af:1d:f5:06:e7:
                    ab:8f:61:b1:b8:e5:17:12:9d:77:ef:65:dc:3f:5a:
                    9d:af:66:b7:d3:48:b7:0d:d7:44:f2:d1:7f:5c:64:
                    22:45:fd:6a:90:e9:d1:ba:e0:66:9e:2a:6d:5a:42:
                    21:fb:0e:45:53:89:91:ba:56:07:ca:4d:56:94:53:
                    b0:f1:bf:31:cf:53:db:e8:ea:b2:a0:67:2f:f8:14:
                    6c:9c:76:0c:02:af:af:08:d6:9b:5e:95:1e:8e:70:
                    d8:37:de:db:48:c0:04:1a:01:fc:37:59:ad:23:e6:
                    06:6d:b3:90:ec:d0:bb:60:dd:84:02:85:db:5a:a0:
                    8a:3b:61:ee:10:32:e0:a4:6d:2c:35:4d:5e:28:99:
                    db:0e:04:72:48:f5:2f:c8:f4:9d:81:7d:c8:95:22:
                    ae:e8:9e:6b:86:51:c7:4f:54:41:9d:45:fd:b4:1f:
                    29:6b:09:8c:67:27:8d:54:2d:e1:5e:62:e7:cf:a7:
                    d0:cb:18:f5:05:60:95:ae:68:4c:c6:7c:9f:d7:df:
                    a9:f6:5f:a2:79:7b:93:5e:c8:1f:cd:65:ea:ef:ee:
                    e1:0f:c3:2e:a7:59:60:96:e3:69:e1:bf:66:03:5e:
                    ab:91:8e:8e:2c:51:3e:86:c3:eb:4d:23:bc:05:5d:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7B:22:D3:2E:24:5C:34:39:BD:2A:E2:05:1A:9F:8D:DA:92:D2:90
            X509v3 Authority Key Identifier:
                keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7b:4f:f6:77:d3:6b:b9:c7:00:40:f4:78:b7:0e:e0:1b:7b:
         50:40:a7:3a:b9:c7:ff:45:e4:45:9d:e4:4f:6a:fd:fb:41:60:
         5f:af:af:53:82:8a:33:c6:bb:02:25:01:13:71:cb:a8:b9:9f:
         51:1a:01:b0:10:ed:f9:5a:54:df:83:5d:69:ab:57:1a:d6:19:
         19:41:38:85:b3:df:e5:5b:15:8d:23:51:dd:af:1e:f2:3a:0d:
         b5:39:2b:dd:0b:9d:5c:da:78:70:9d:d1:05:3a:d0:11:1a:85:
         8c:c1:83:35:36:14:d7:35:04:9a:e7:4f:76:b6:cb:e7:cc:94:
         63:7a:6a:6d:c4:fc:84:bb:25:f5:61:ba:33:ab:72:09:06:53:
         cc:1e:87:da:47:1b:a8:e4:22:33:16:b0:7e:2e:fa:4f:61:4d:
         49:9e:13:cd:33:40:2a:0f:da:5c:4c:b4:ae:d6:8f:f4:27:8c:
         83:0e:89:77:6b:15:3f:f0:2b:af:a6:cf:00:51:4f:5b:4b:4c:
         ab:c6:81:4f:91:6d:c8:47:61:aa:0c:52:ef:da:58:97:63:56:
         91:4d:18:1c:99:08:ca:52:29:86:76:88:ab:94:79:a2:45:79:
         94:8d:86:3f:9d:17:f2:f2:15:ff:6a:40:89:60:45:00:a2:a5:
         ea:81:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:42 2026 by rpki-client