This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          RLBJBmT+JO1Ys5hHquK6KKnlOat3SY4BvlEa/r8DxpI=
Subject key identifier:   C4:37:09:A3:BA:50:9E:DC:CD:D9:0D:43:7B:F5:31:84:03:47:BB:C5
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       019BF6BE6526972D0B78507899BB3EA4F39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          0E19
Signing time:             Sun 25 Jan 2026 20:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:31 +0000
Files and hashes:         1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
                          2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
                          3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: SzJ5BDd0N7uCB235idWrJloBnd28eL4FExHJ0sNTKMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:65:26:97:2d:0b:78:50:78:99:bb:3e:a4:f3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: Jan 25 20:00:31 2026 GMT
            Not After : Jan 26 20:00:31 2026 GMT
        Subject: CN=c43709a3ba509edccdd90d437bf531840347bbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:5c:85:a0:6f:16:1b:b6:60:f4:fa:e8:e9:
                    3f:c2:87:f2:32:4e:1b:0a:2c:ad:01:10:b4:26:e1:
                    34:14:3d:7d:54:1d:7b:59:34:46:57:54:e8:6c:00:
                    95:a1:fe:4d:08:60:c6:b0:35:f1:01:ea:51:97:85:
                    70:3e:d0:70:58:98:83:56:e3:bd:ac:46:a4:57:83:
                    e9:8c:ba:6a:f3:74:07:4b:fa:57:3c:6e:28:ec:2c:
                    30:91:57:0f:44:55:bd:be:81:35:76:93:fa:0b:85:
                    9c:15:83:19:98:2f:04:b5:47:ca:df:23:45:02:4d:
                    70:21:55:8c:0b:35:be:08:63:74:4e:78:77:08:5d:
                    8f:92:e3:4e:ca:09:8d:1a:cb:b1:33:ce:cb:5a:46:
                    75:00:c6:28:b3:45:e4:c7:4f:30:bd:4c:7c:89:0f:
                    e8:7d:b4:45:81:75:f9:05:09:b6:31:b0:4f:1b:03:
                    c7:ae:48:7d:f2:ec:88:d4:f5:ae:50:90:71:1f:76:
                    80:da:c9:ed:f5:4d:3f:13:8e:b5:ca:d8:54:18:a8:
                    89:98:74:ef:f0:8e:c0:67:79:69:cb:16:32:1f:8a:
                    03:12:fc:fc:07:70:a0:8b:53:bb:9b:f4:b8:77:32:
                    f6:c4:5d:69:ae:83:aa:59:4f:31:6e:b7:e2:f7:0e:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:37:09:A3:BA:50:9E:DC:CD:D9:0D:43:7B:F5:31:84:03:47:BB:C5
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:ed:88:94:ca:3b:e6:68:e5:3b:8a:cb:9a:1c:9e:62:f0:17:
         9a:5e:ba:76:34:da:cb:55:c8:c1:76:f5:1b:a8:90:6c:ac:ce:
         4e:45:31:97:7b:47:3f:8d:ca:ed:7e:4f:57:26:0f:35:06:fc:
         85:ae:da:e5:56:a8:f2:7f:db:b7:4e:9c:5b:93:fc:a8:67:b7:
         17:90:6f:d7:e2:0c:a4:cb:44:de:61:0b:59:33:c2:94:dd:a0:
         a4:7d:18:02:21:e3:34:fe:c8:62:20:e5:e1:e7:df:15:54:3d:
         18:c8:0a:7b:ff:52:ae:0e:eb:3b:eb:ad:d3:bc:e1:a5:6d:f6:
         7a:1d:bd:d3:8a:99:e9:10:1f:8c:2e:97:87:5d:89:00:f8:e8:
         c4:96:b3:bd:30:7c:f7:43:cc:4b:b4:d4:a8:d6:85:50:19:76:
         c5:02:92:38:e6:a1:8c:18:7c:94:87:4a:eb:a9:03:14:31:21:
         ac:21:b7:5c:c6:0b:d9:32:c0:aa:45:e7:a2:26:a7:ac:e6:f0:
         39:77:1a:16:78:a4:f9:b4:f8:ba:0b:e5:ea:90:79:5d:5e:bd:
         75:34:dd:ca:46:b7:a5:e2:9a:dd:89:b4:ec:68:c1:7c:96:09:
         2e:e6:40:e8:cb:55:b4:12:e9:49:e5:b3:bc:63:1d:72:bc:a1:
         f7:86:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:18:28 2026 by rpki-client