This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File:                     Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier:          Hzf8Crk8RVpqyq8Ul2PHzv7vfvBXw9zijkPHFop6jeU=
Subject key identifier:   1F:92:41:C2:C4:FF:54:6D:50:12:29:AD:A1:16:22:E1:C1:25:B5:E3
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer:       /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial:       019BF2E2B0DDACBD57556CABFB12FEE47DBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number:          085E
Signing time:             Sun 25 Jan 2026 02:01:41 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:41 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:41 +0000
Files and hashes:         1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
                          2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: DTe+2NPEeZ/ESzwSntbQvaqP16e9QLTarZ1ZLGfLMsc=)
                          3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:b0:dd:ac:bd:57:55:6c:ab:fb:12:fe:e4:7d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
        Validity
            Not Before: Jan 25 02:01:41 2026 GMT
            Not After : Jan 26 02:01:41 2026 GMT
        Subject: CN=1f9241c2c4ff546d501229ada11622e1c125b5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:52:c1:0d:ae:d1:c1:b8:38:f7:f5:e9:e2:
                    fb:11:61:54:36:ef:22:29:dc:69:5c:56:24:11:f9:
                    9d:7f:cd:6a:ce:cf:c7:82:ad:4b:f2:62:0e:7c:fe:
                    6f:cc:59:f6:8d:15:66:92:4f:71:00:d9:73:ce:ee:
                    23:79:f3:be:d7:20:38:a8:9f:70:af:93:fa:f2:0f:
                    1d:b6:ff:0b:7a:84:4a:fb:ff:fd:5d:a3:10:f0:a2:
                    32:92:f9:57:c9:a3:99:9d:9e:f7:95:e0:74:8d:b2:
                    3b:a4:92:e3:cd:28:3d:14:84:c5:60:8d:58:01:db:
                    d3:51:dd:eb:93:51:f8:4a:f0:9d:e5:37:d3:62:46:
                    d4:06:75:e9:ea:dc:37:08:ee:c9:58:ec:ec:fb:85:
                    41:a0:a0:46:8c:c4:f4:25:42:41:30:49:a0:52:33:
                    30:67:9c:e6:2d:25:87:4b:13:b0:d1:fa:bf:b1:84:
                    b2:5f:f4:7a:67:c5:4a:ed:a4:d2:35:87:eb:67:11:
                    29:78:be:6e:5e:16:70:0c:3a:86:98:3e:3c:3b:35:
                    9a:be:19:7d:82:31:ad:57:04:3d:d0:6b:5e:66:85:
                    6e:51:33:d4:ee:12:dd:78:a6:ce:cf:94:e9:aa:82:
                    2f:69:cb:83:0d:7b:aa:50:ad:7e:a7:a9:f4:73:d5:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:41:C2:C4:FF:54:6D:50:12:29:AD:A1:16:22:E1:C1:25:B5:E3
            X509v3 Authority Key Identifier:
                keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:17:8f:35:40:d5:34:6b:a3:da:6c:6f:18:ee:dc:a8:45:e4:
         01:20:e9:34:62:27:20:9f:f8:49:79:ec:fe:08:e1:2e:da:4f:
         4a:e1:56:75:73:47:ed:85:43:7d:60:87:44:03:20:35:ec:b1:
         c1:75:33:0a:a4:01:57:d7:d7:29:ab:18:60:3a:35:37:31:aa:
         ec:03:b5:27:aa:c4:30:f7:ea:19:86:ef:26:f1:e3:a8:6c:df:
         bf:af:f2:59:ef:25:ab:4e:68:e8:37:43:f9:b9:bf:97:d1:4d:
         c0:35:0e:30:2e:98:48:8d:f2:b0:6c:b8:78:fa:3a:65:8f:d4:
         c1:cf:e0:f2:72:ed:ce:c4:9c:b6:60:8c:e1:d4:fb:1a:56:c5:
         ce:ca:1f:3b:56:a3:7d:0b:73:58:bc:f2:dd:15:b8:0e:b2:58:
         8d:bf:a5:bd:bd:68:a3:29:e7:81:78:12:27:72:56:cf:34:76:
         e3:71:a0:03:23:82:4d:ca:cc:c9:44:61:d5:e6:e8:47:66:17:
         f9:7b:a3:3a:9e:34:cb:4e:e9:b0:17:aa:7d:fa:01:e4:a3:47:
         91:3d:8e:e8:34:ee:00:cf:52:e8:1e:01:19:db:c1:34:62:ef:
         48:bb:34:cb:9c:70:cd:05:af:19:1e:81:32:ea:56:bc:c5:f3:
         43:b6:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:40:07 2026 by rpki-client