This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File:                     YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier:          B9SHuXkHV6fxiTtAJujLLlXICArV0Yeh5KqT7H0N/U0=
Subject key identifier:   70:8B:CC:9E:CC:97:E1:0D:37:C4:58:40:8B:7E:40:DC:85:0F:76:F3
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer:       /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial:       019BF83F9BDBA9DDDBA6A6B7853FF3E42B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number:          127A
Signing time:             Mon 26 Jan 2026 03:01:16 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:16 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:16 +0000
Files and hashes:         1: ObjrmTselcOgfHeqKSeC3ZkZE8M.roa (hash: h15edxf80NHDBsD89JncvBzL8sjznUrSp3Fp172V3UI=)
                          2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
                          3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: g1M6DWm4er3SuZFTiv3L4tMUv/NBk315Mc4HEmo6v48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:9b:db:a9:dd:db:a6:a6:b7:85:3f:f3:e4:2b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
        Validity
            Not Before: Jan 26 03:01:16 2026 GMT
            Not After : Jan 27 03:01:16 2026 GMT
        Subject: CN=708bcc9ecc97e10d37c458408b7e40dc850f76f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:55:1f:a5:c2:e0:9f:12:a8:db:d7:e4:2e:
                    28:4d:c0:9c:8b:e5:59:88:2b:a4:92:1a:aa:88:d6:
                    04:33:14:c2:2d:30:77:cf:d6:55:55:f6:19:54:00:
                    fb:f6:23:34:86:d6:0f:ae:60:d0:d2:f3:38:1f:2f:
                    c7:cb:c4:64:c0:1d:24:97:29:1c:4c:38:c7:a4:0d:
                    37:8a:24:fc:11:3b:19:fc:92:af:12:89:32:dd:62:
                    36:9f:9a:c3:11:ce:28:28:b9:10:b4:6f:16:d1:a7:
                    6a:b0:9a:2f:77:cd:9a:84:91:64:3d:16:db:58:36:
                    71:a6:5e:a6:5a:eb:db:9e:f1:73:d9:5b:d8:a0:99:
                    32:0b:5a:15:d3:d8:0e:39:46:4f:fc:53:bd:90:2c:
                    e5:ec:37:26:7d:27:f4:57:a8:62:f8:35:37:1f:42:
                    e0:d6:2c:3a:d1:72:ee:35:34:6e:aa:6c:44:5f:69:
                    0b:e2:25:61:85:a8:ea:b3:ef:a1:f1:8f:a2:b9:51:
                    7d:06:f2:7e:99:4c:e3:33:41:65:af:41:31:42:4d:
                    8a:b3:57:e5:25:3f:f6:b0:d5:1b:a6:1d:87:ea:7f:
                    38:4b:52:59:35:ca:09:d9:03:00:40:52:c0:55:e7:
                    8b:34:47:e3:d9:b5:91:23:9d:7c:df:f3:2b:80:4e:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:CC:9E:CC:97:E1:0D:37:C4:58:40:8B:7E:40:DC:85:0F:76:F3
            X509v3 Authority Key Identifier:
                keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:45:ba:0f:a0:bb:c0:62:7b:7a:57:b9:8f:5a:d1:27:00:
         d0:54:03:f6:e9:db:b4:30:6e:86:3c:00:e3:da:97:02:ef:09:
         0d:79:2f:54:4f:ef:83:2c:53:50:de:0a:48:de:58:6f:5a:45:
         27:a7:b9:fc:c2:95:a4:6d:59:3b:ff:46:59:58:6b:b1:bf:a6:
         d6:25:77:ac:93:c2:56:c5:18:b3:df:d4:61:11:d3:20:4b:14:
         b1:4b:af:4f:13:10:b0:3d:7a:ba:f9:28:69:b5:8d:4d:89:6e:
         aa:c9:a3:08:c2:67:9f:89:98:1f:6e:4e:1d:27:c2:b6:be:66:
         20:83:66:e0:55:77:cd:fd:f2:48:60:0c:c8:8f:cc:b1:cf:37:
         7b:4b:c0:0f:36:f0:5f:65:30:4f:aa:f6:0a:e8:80:bc:02:12:
         8a:ad:f9:1e:8c:14:38:c4:ec:00:ce:9f:ac:47:a8:08:c0:fc:
         6b:b8:c0:e4:53:24:4c:df:6d:73:59:19:4c:29:4e:6d:00:9f:
         94:cc:49:73:b7:ce:ae:c4:ca:f4:eb:14:9d:27:29:82:39:e1:
         2d:d4:06:64:f8:9b:09:07:aa:0a:18:ac:7f:44:1b:d9:0d:83:
         05:3d:da:d1:fe:c9:45:68:4a:d8:6d:e1:04:0d:23:d3:53:21:
         ed:af:64:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4P5vbqd3bpqa3hT/z5CuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmJlNjYxZTU3YzE0NjU5YTYwOGU5ZjZiZTYwNWQ2MjUw
MDQ3ZmMwHhcNMjYwMTI2MDMwMTE2WhcNMjYwMTI3MDMwMTE2WjAzMTEwLwYDVQQD
Eyg3MDhiY2M5ZWNjOTdlMTBkMzdjNDU4NDA4YjdlNDBkYzg1MGY3NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNdVH6XC4J8SqNvX5C4oTcCci+VZ
iCukkhqqiNYEMxTCLTB3z9ZVVfYZVAD79iM0htYPrmDQ0vM4Hy/Hy8RkwB0klykc
TDjHpA03iiT8ETsZ/JKvEoky3WI2n5rDEc4oKLkQtG8W0adqsJovd82ahJFkPRbb
WDZxpl6mWuvbnvFz2VvYoJkyC1oV09gOOUZP/FO9kCzl7DcmfSf0V6hi+DU3H0Lg
1iw60XLuNTRuqmxEX2kL4iVhhajqs++h8Y+iuVF9BvJ+mUzjM0Flr0ExQk2Ks1fl
JT/2sNUbph2H6n84S1JZNcoJ2QMAQFLAVeeLNEfj2bWRI5183/MrgE5xJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCLzJ7Ml+ENN8RYQIt+QNyFD3bzMB8GA1UdIwQY
MBaAFGAr5mHlfBRlmmCOn2vmBdYlAEf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQt
YmQzYTYzMGVlNWNjLzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQtYmQzYTYzMGVlNWNj
LzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWVFug+g
u8Bie3pXuY9a0ScA0FQD9unbtDBuhjwA49qXAu8JDXkvVE/vgyxTUN4KSN5Yb1pF
J6e5/MKVpG1ZO/9GWVhrsb+m1iV3rJPCVsUYs9/UYRHTIEsUsUuvTxMQsD16uvko
abWNTYluqsmjCMJnn4mYH25OHSfCtr5mIINm4FV3zf3ySGAMyI/Msc83e0vADzbw
X2UwT6r2CuiAvAISiq35HowUOMTsAM6frEeoCMD8a7jA5FMkTN9tc1kZTClObQCf
lMxJc7fOrsTK9OsUnScpgjnhLdQGZPibCQeqChisf0Qb2Q2DBT3a0f7JRWhK2G3h
BA0j01Mh7a9kjg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:24 2026 by rpki-client