This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          kTrkw0/94VNKR3Qw7Yd781I9CZ7YcaIeedEEJ6LXGcw=
Subject key identifier:   AB:E6:E5:7F:2B:2E:DB:78:1F:26:EF:6D:3F:93:CE:50:10:5A:D1:07
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019BF4994216E916A04ED733C2105362F7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          0C28
Signing time:             Sun 25 Jan 2026 10:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:42 +0000
Files and hashes:         1: 8y6CSuTPq3UxhTyIPDkLzey39TU.roa (hash: d0MlsOE7YxSPTJhFI0bSHyZQVZmMtG9CLdrDZmVT9Fg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: XPEA+SjNVdjIMmCgyO+8ybndsaYmS3SYp2ZNh5IW5cg=)
                          3: gEzEJ6XiEvkU7WE0W5L45VqOyXU.roa (hash: M/qvtMRQ3XJJlTOVAUv0L9u5CgWgEkXMKqMCgmgXNVM=)
                          4: uiEPOruYyynMnv0DkemAao-QO_M.roa (hash: zwZ/t6zJRBJasigAc2EM1YRTTVM6B1E25xzsECcPnU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:42:16:e9:16:a0:4e:d7:33:c2:10:53:62:f7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Jan 25 10:00:42 2026 GMT
            Not After : Jan 26 10:00:42 2026 GMT
        Subject: CN=abe6e57f2b2edb781f26ef6d3f93ce50105ad107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:f0:f2:24:aa:23:bc:d7:e3:12:47:7c:a1:
                    18:64:25:e5:20:f8:6c:e3:d6:1b:f2:02:93:cf:82:
                    ab:b3:ca:2b:74:42:30:df:1b:be:0e:02:b1:16:a7:
                    68:e4:d5:c3:92:0f:98:ac:07:5a:e2:d6:96:93:ca:
                    73:bb:32:60:e3:c8:3a:fd:3d:fa:4f:69:fe:d5:9a:
                    86:f4:55:48:d9:4f:d0:16:67:e2:53:0a:af:1b:e8:
                    74:ee:51:40:67:95:5c:cc:d8:8b:e9:ad:22:2e:78:
                    91:2c:a6:a7:9a:09:45:66:a0:db:22:4f:c6:39:1e:
                    53:20:de:8b:0e:b7:d9:3b:f0:d6:28:e0:2f:d5:c1:
                    dc:80:04:e5:53:37:85:64:12:1e:18:11:a9:b4:f2:
                    43:5f:d1:fd:39:83:41:c4:01:ab:ed:de:fe:59:53:
                    c5:13:c7:71:70:cf:39:17:d4:41:25:f7:fe:85:f5:
                    48:a6:d1:36:90:a1:0f:70:d5:81:4e:12:82:c7:f7:
                    bb:84:d4:df:d4:26:e8:ed:c0:05:c2:29:dd:75:37:
                    64:df:b6:0a:66:9d:2a:68:00:01:14:f6:e0:15:96:
                    94:47:6c:d3:2a:68:42:6f:4e:96:2b:42:ce:32:43:
                    ee:85:ee:c4:f3:f2:ba:4e:ab:b4:3f:93:1a:44:93:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:E5:7F:2B:2E:DB:78:1F:26:EF:6D:3F:93:CE:50:10:5A:D1:07
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:c3:0e:2c:48:eb:54:73:6d:2a:8b:da:b0:1c:79:c8:21:
         29:e3:d7:f7:a4:7d:ca:9c:5c:28:e2:96:0d:cc:a8:8f:fb:74:
         7c:5e:6f:6b:61:83:28:27:92:e6:e8:d4:70:00:3d:c9:68:da:
         44:7d:01:bb:c0:ca:41:58:22:74:a5:b4:6f:61:1e:11:5c:0e:
         eb:d6:ea:1c:42:b1:50:a5:77:eb:9a:d0:b5:6b:54:e0:a4:d6:
         c1:95:b3:1f:ab:6b:26:5a:2b:b4:8e:0c:35:b8:fb:c5:a9:34:
         7e:1d:28:73:2a:2a:7e:85:ce:85:d5:aa:bc:14:61:51:0b:83:
         30:11:a4:d1:81:95:7d:79:2c:c1:bd:ac:72:b6:42:da:63:05:
         fb:70:9e:4e:40:c9:b0:8b:a7:dd:35:df:b3:44:84:bd:3c:10:
         14:13:6f:0b:c1:b4:57:24:d9:56:a3:95:65:4e:15:2e:49:96:
         f7:07:96:48:a2:ce:1e:9f:96:38:6a:27:df:68:96:b5:0d:83:
         42:63:63:1a:55:e9:5e:ef:68:92:38:c7:d1:22:4a:cf:ad:ee:
         d4:31:28:3d:3c:55:8a:1b:08:39:f4:e6:7a:ec:a0:1f:8f:b0:
         10:78:4b:3e:ba:10:a1:52:48:46:62:d6:12:64:e7:a0:a3:e2:
         0b:93:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:22:10 2026 by rpki-client