This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File:                     ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier:          UDhl0xNozDeqb3GC0gnqdST5+LMMxcS7zV0sB9TXK9g=
Subject key identifier:   18:48:25:2C:B3:3C:E6:F2:EF:1D:64:19:1D:4C:4D:4B:CD:5B:F9:AA
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer:       /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial:       019BF2AAF1E9EA12B88EBDFA726E653B6F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number:          0708
Signing time:             Sun 25 Jan 2026 01:00:47 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:47 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:47 +0000
Files and hashes:         1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
                          2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
                          3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: Qg0xxHwPU1xNBsdLB+l0eH/M9J6/3hzMB4MfpaJcjws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:aa:f1:e9:ea:12:b8:8e:bd:fa:72:6e:65:3b:6f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
        Validity
            Not Before: Jan 25 01:00:47 2026 GMT
            Not After : Jan 26 01:00:47 2026 GMT
        Subject: CN=1848252cb33ce6f2ef1d64191d4c4d4bcd5bf9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:11:3d:2d:89:f4:2f:5c:ac:8e:80:3a:ab:
                    93:16:01:32:f7:69:b9:84:a2:11:00:9a:01:77:d2:
                    25:8c:eb:6b:4b:46:6a:59:28:70:0d:7a:9a:c5:9d:
                    fd:4f:40:f5:84:66:12:3e:5c:9f:c8:0a:84:5a:e1:
                    30:bc:4d:06:ac:11:fb:36:48:3c:17:4d:e3:d1:72:
                    bb:78:c7:b0:27:d8:39:70:9d:dc:34:47:7b:11:ad:
                    0f:9d:b0:da:2a:2f:ee:5a:cf:f4:37:7d:8b:f2:e9:
                    a5:0e:6d:5e:45:73:d3:52:de:6f:cf:d6:ca:d2:d4:
                    2e:a4:5e:3e:13:bd:91:0b:14:4c:e3:d2:77:3c:b0:
                    5c:51:03:dd:df:79:c1:26:b8:ae:76:9c:d8:be:73:
                    6e:e4:eb:41:17:37:0c:6b:14:e4:56:6b:e8:a2:de:
                    46:cc:e9:41:ac:8b:3e:5e:de:2d:eb:59:05:9f:cf:
                    83:2a:ad:2c:1d:f9:97:2b:e6:37:91:2d:0d:5e:9d:
                    32:0a:bc:d6:d9:21:52:fb:1e:8e:6d:ce:26:61:e2:
                    12:e6:b7:eb:29:15:d9:08:7e:38:d8:9f:ca:57:7c:
                    1e:07:f6:a7:ac:1c:12:87:0f:8c:7a:65:49:48:f2:
                    6e:eb:72:7d:b7:31:bb:4a:91:56:66:d1:50:8f:2b:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:25:2C:B3:3C:E6:F2:EF:1D:64:19:1D:4C:4D:4B:CD:5B:F9:AA
            X509v3 Authority Key Identifier:
                keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:60:26:04:f3:6d:81:ba:76:1e:5d:7a:e7:58:ab:38:04:3a:
         2d:16:91:64:a6:aa:10:d4:c7:a2:0b:3a:08:a8:c6:3f:f1:43:
         17:be:04:67:0b:7b:69:0c:7a:f5:bc:c9:7b:c5:0c:ad:05:86:
         83:01:02:93:ac:d8:34:28:20:06:9b:a7:02:e5:33:24:28:5b:
         d7:52:9b:eb:46:8a:b8:82:24:43:32:d3:cc:93:77:a4:4d:40:
         c6:43:da:c9:bb:e2:bf:ef:37:0b:45:e5:b9:5e:e8:1f:2f:c9:
         fe:39:b2:d7:f3:00:ab:03:3f:1e:ca:b3:0b:bc:79:12:c1:52:
         d2:47:ad:d7:80:f0:07:07:17:e8:c0:38:ac:76:8e:b9:9a:fe:
         a8:38:cd:7f:47:e7:1b:c7:79:e4:c3:f7:c8:74:fd:48:4b:28:
         ed:bf:9b:28:5a:31:aa:e9:16:5a:ce:fa:3d:77:fc:b0:c7:1b:
         9b:6a:ae:85:95:79:90:39:bd:86:36:f7:6a:6d:eb:7c:dd:33:
         04:36:55:1d:28:da:f2:7b:26:c0:85:d0:14:fa:18:48:cd:9d:
         34:d1:6b:38:f0:73:70:d0:b8:47:95:3b:01:94:a5:36:6a:0b:
         18:ff:31:4f:46:27:b1:0a:29:9f:f2:4f:19:0c:9e:bc:d3:a6:
         7f:05:de:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyqvHp6hK4jr36cm5lO2+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3
NmQ3ZGYwHhcNMjYwMTI1MDEwMDQ3WhcNMjYwMTI2MDEwMDQ3WjAzMTEwLwYDVQQD
EygxODQ4MjUyY2IzM2NlNmYyZWYxZDY0MTkxZDRjNGQ0YmNkNWJmOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCMRPS2J9C9crI6AOquTFgEy92m5
hKIRAJoBd9IljOtrS0ZqWShwDXqaxZ39T0D1hGYSPlyfyAqEWuEwvE0GrBH7Nkg8
F03j0XK7eMewJ9g5cJ3cNEd7Ea0PnbDaKi/uWs/0N32L8umlDm1eRXPTUt5vz9bK
0tQupF4+E72RCxRM49J3PLBcUQPd33nBJriudpzYvnNu5OtBFzcMaxTkVmvoot5G
zOlBrIs+Xt4t61kFn8+DKq0sHfmXK+Y3kS0NXp0yCrzW2SFS+x6Obc4mYeIS5rfr
KRXZCH442J/KV3weB/anrBwShw+MemVJSPJu63J9tzG7SpFWZtFQjyuZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhIJSyzPOby7x1kGR1MTUvNW/mqMB8GA1UdIwQY
MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt
MGQ0ZjQwYmMzZmFhLzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh
LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGAmBPNt
gbp2Hl1651irOAQ6LRaRZKaqENTHogs6CKjGP/FDF74EZwt7aQx69bzJe8UMrQWG
gwECk6zYNCggBpunAuUzJChb11Kb60aKuIIkQzLTzJN3pE1AxkPaybviv+83C0Xl
uV7oHy/J/jmy1/MAqwM/HsqzC7x5EsFS0ket14DwBwcX6MA4rHaOuZr+qDjNf0fn
G8d55MP3yHT9SEso7b+bKFoxqukWWs76PXf8sMcbm2quhZV5kDm9hjb3am3rfN0z
BDZVHSja8nsmwIXQFPoYSM2dNNFrOPBzcNC4R5U7AZSlNmoLGP8xT0YnsQopn/JP
GQyevNOmfwXeTQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:23:36 2026 by rpki-client