This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File:                     yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier:          9VrP5D5JSvEEGcwPxz5DKHdnkfosQgjQvHbppkxRSpA=
Subject key identifier:   35:59:C9:CC:3E:B2:F2:CF:03:CC:A5:53:67:2F:B4:C5:6E:AD:FE:D1
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer:       /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial:       019BF5AC6A30E65B5E66FFE2C1EAF841F8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 15:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:15 +0000
Files and hashes:         1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
                          2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
                          3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: +oqB7PAsFp3iEGGu30db53pKL0Aot0NEPSgDyQTuf4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:6a:30:e6:5b:5e:66:ff:e2:c1:ea:f8:41:f8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
        Validity
            Not Before: Jan 25 15:01:15 2026 GMT
            Not After : Jan 26 15:01:15 2026 GMT
        Subject: CN=3559c9cc3eb2f2cf03cca553672fb4c56eadfed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:7a:fd:b6:43:6f:2b:23:25:4c:87:37:e9:
                    46:d5:08:05:f0:ec:0f:bd:ce:75:cb:8e:8c:49:8c:
                    2c:3e:44:eb:51:2e:f6:e6:6d:2e:56:8a:56:07:dc:
                    ae:4c:f8:33:da:2f:87:87:9f:04:da:dd:d4:c1:be:
                    6f:dd:ce:ea:1f:ce:37:2f:bd:b9:58:9b:c2:ad:66:
                    d4:65:88:f2:c7:99:ab:86:f2:5d:70:cb:0b:f7:43:
                    78:c8:1a:ab:f9:db:07:1f:98:56:25:96:2b:85:4b:
                    6d:c8:99:f6:ab:81:a7:9b:34:96:05:9a:c9:f2:75:
                    df:fd:57:15:ce:84:8d:e3:9d:61:06:6f:f5:a2:63:
                    25:c5:27:66:5d:2e:b4:58:b8:38:d7:ac:8a:a8:40:
                    95:ed:10:ec:b5:11:0c:16:88:b7:92:d4:f3:3e:01:
                    99:bf:f8:b6:02:1e:07:8b:39:d8:af:b3:da:b0:5a:
                    57:86:7d:22:ab:12:03:55:54:6a:83:39:56:a4:79:
                    86:aa:ae:19:38:29:af:58:e2:78:f8:e4:42:3a:97:
                    66:b6:0b:c9:cf:af:9b:65:db:d7:e8:7b:a9:c5:5c:
                    54:5d:04:8f:10:15:d2:da:b4:ca:28:aa:5a:f9:13:
                    f9:d1:c7:8b:03:2e:0b:7f:57:1b:94:6b:14:af:84:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:59:C9:CC:3E:B2:F2:CF:03:CC:A5:53:67:2F:B4:C5:6E:AD:FE:D1
            X509v3 Authority Key Identifier:
                keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:15:d3:21:9d:d7:5d:00:c0:67:44:d2:90:c8:fb:7e:5f:20:
         ca:b0:16:49:af:35:24:33:88:17:30:be:28:ab:f3:46:a7:e0:
         a8:8c:8e:58:13:8b:8a:aa:16:50:e1:3d:7d:b6:bc:09:6a:e7:
         fc:c7:10:d8:68:59:9c:6a:cf:10:d1:13:d2:e0:d6:c8:cf:01:
         ca:cc:11:f3:1f:0c:c5:19:61:fc:23:58:db:35:98:a7:3d:ef:
         55:ad:d4:20:d1:b7:14:98:80:90:ee:a5:6c:69:e5:ac:58:f7:
         6c:76:42:6f:64:96:02:ab:81:77:9e:85:8e:5d:a1:c7:9d:15:
         3f:e4:d5:68:c2:dd:34:5b:ac:61:f8:6e:d9:68:43:af:12:9c:
         43:b7:1c:07:07:7d:46:6c:62:54:83:3a:62:77:a7:8d:07:2d:
         02:ac:19:61:d4:bf:42:ce:21:2c:e5:8f:f6:ed:af:23:e2:34:
         04:e2:19:cc:77:76:5d:98:5a:05:26:47:6f:45:27:1d:2c:48:
         9d:da:e0:7d:59:47:49:5c:d5:c5:ab:19:e0:00:a9:5f:84:d0:
         15:fc:d5:98:0d:da:6a:78:ab:e8:80:04:ac:a7:4b:f7:47:54:
         09:0a:c3:ab:1e:e2:9a:27:66:2e:5f:f8:80:93:61:f3:9e:31:
         c8:2d:74:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1rGow5lteZv/iwer4QfjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx
NjhjZTEwHhcNMjYwMTI1MTUwMTE1WhcNMjYwMTI2MTUwMTE1WjAzMTEwLwYDVQQD
EygzNTU5YzljYzNlYjJmMmNmMDNjY2E1NTM2NzJmYjRjNTZlYWRmZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvV6/bZDbysjJUyHN+lG1QgF8OwP
vc51y46MSYwsPkTrUS725m0uVopWB9yuTPgz2i+Hh58E2t3Uwb5v3c7qH843L725
WJvCrWbUZYjyx5mrhvJdcMsL90N4yBqr+dsHH5hWJZYrhUttyJn2q4GnmzSWBZrJ
8nXf/VcVzoSN451hBm/1omMlxSdmXS60WLg416yKqECV7RDstREMFoi3ktTzPgGZ
v/i2Ah4HiznYr7PasFpXhn0iqxIDVVRqgzlWpHmGqq4ZOCmvWOJ4+ORCOpdmtgvJ
z6+bZdvX6HupxVxUXQSPEBXS2rTKKKpa+RP50ceLAy4Lf1cblGsUr4SzvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVZycw+svLPA8ylU2cvtMVurf7RMB8GA1UdIwQY
MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt
N2E1YThkMDk2N2M4LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4
LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchXTIZ3X
XQDAZ0TSkMj7fl8gyrAWSa81JDOIFzC+KKvzRqfgqIyOWBOLiqoWUOE9fba8CWrn
/McQ2GhZnGrPENET0uDWyM8ByswR8x8MxRlh/CNY2zWYpz3vVa3UING3FJiAkO6l
bGnlrFj3bHZCb2SWAquBd56Fjl2hx50VP+TVaMLdNFusYfhu2WhDrxKcQ7ccBwd9
RmxiVIM6YnenjQctAqwZYdS/Qs4hLOWP9u2vI+I0BOIZzHd2XZhaBSZHb0UnHSxI
ndrgfVlHSVzVxasZ4ACpX4TQFfzVmA3aanir6IAErKdL90dUCQrDqx7imidmLl/4
gJNh854xyC10+Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:28 2026 by rpki-client