This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          yPzU1WW3w7ZmNLXKvz2uigBpiHaEFaqM3RBSslDy6R8=
Subject key identifier:   CE:47:35:84:74:66:6C:E1:50:DD:AA:87:07:6A:AF:20:23:F8:DC:E5
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       019BF42BC245D7217AAFF5B0515E8373D39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 08:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:06 +0000
Files and hashes:         1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
                          2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
                          3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: wMOBt0nCRs5tppaZlhpYYfLnwpkL7XooMAmnjvBbYII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:c2:45:d7:21:7a:af:f5:b0:51:5e:83:73:d3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Jan 25 08:01:06 2026 GMT
            Not After : Jan 26 08:01:06 2026 GMT
        Subject: CN=ce47358474666ce150ddaa87076aaf2023f8dce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:65:58:15:32:77:50:1c:ce:d5:02:8a:01:
                    9a:81:b4:91:8a:cf:ba:ea:10:20:95:10:04:9b:53:
                    07:cc:59:93:b1:a7:bb:c6:50:89:31:de:b1:b2:75:
                    42:64:87:43:cd:d2:e2:93:ce:2c:c9:05:80:8f:c9:
                    d1:6a:1b:ba:c0:7e:3b:2e:2d:0b:93:ab:f3:b7:ce:
                    f2:14:9d:8d:16:22:ae:b4:a2:50:92:2f:1a:40:a7:
                    77:ad:01:a1:5e:cd:03:38:d5:0c:93:d8:9d:64:dd:
                    77:94:0e:80:36:23:7c:87:e7:cc:71:4d:28:6f:9d:
                    25:ad:a4:c5:80:86:8c:85:42:89:da:f4:86:df:76:
                    3a:28:67:d2:60:19:4c:0b:73:b1:17:fd:88:1c:83:
                    e8:57:3b:b9:4d:dd:4f:f5:9d:e6:49:ad:88:6e:71:
                    2f:b9:41:c0:1a:99:8e:2c:91:4e:ff:2e:80:9e:ad:
                    47:71:b9:56:a4:1a:45:b4:4c:e0:3a:5e:b3:7a:ef:
                    9e:e0:84:c7:3a:b7:2c:37:ad:7b:1a:e1:99:9f:76:
                    2d:c0:0e:1d:8e:df:53:d3:ab:b6:d7:81:8e:ec:53:
                    60:fd:4f:5c:b7:b8:c7:8a:58:c6:31:49:f2:c5:85:
                    40:d2:33:35:25:80:00:83:af:99:23:b6:cd:87:83:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:47:35:84:74:66:6C:E1:50:DD:AA:87:07:6A:AF:20:23:F8:DC:E5
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:a6:51:5e:d8:d4:d4:15:11:d4:31:0c:b8:2e:f9:d3:3c:
         01:a3:9a:a2:b7:0a:d5:53:a4:a9:78:b6:a8:93:df:e9:39:45:
         21:0d:5f:b4:70:1b:21:5c:bf:7e:cc:ce:b8:48:af:22:13:94:
         80:d7:88:a7:6f:6b:7c:4d:c6:3c:56:6d:a5:ef:48:8d:d5:e3:
         d2:c5:89:1c:2b:a3:1e:0a:cd:57:5c:ad:1d:2a:10:cd:c9:8a:
         a3:e4:81:28:5f:2c:38:75:79:73:56:ff:7f:ad:8d:7e:60:3a:
         32:28:64:6c:5f:7f:d8:4e:92:21:2b:01:8b:95:12:af:b8:40:
         6d:37:de:c4:8e:58:ca:91:28:12:15:23:4f:4a:5f:b2:37:4e:
         49:bf:75:77:f2:e6:27:81:8e:d0:bb:ea:1f:c4:cf:d8:38:09:
         49:1a:f5:7e:7a:c0:c2:92:70:10:b8:1f:e2:16:8a:1a:b0:2e:
         e6:f7:89:3f:48:6e:89:51:a7:6d:22:dd:40:6d:ca:8e:bb:68:
         cf:07:ea:ad:64:09:b6:15:73:86:2b:78:2f:3d:cf:67:36:08:
         73:5c:a2:2c:9a:fd:28:fd:eb:91:13:97:ed:ec:59:f8:00:c5:
         e6:15:0c:69:13:f4:f9:90:14:86:0b:c2:34:a3:d0:5a:5a:61:
         f4:f6:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:02 2026 by rpki-client