This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File:                     ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier:          hmSvTFUGRicIfGqXgz78zegKHofO/cRogFq2PfzRSq0=
Subject key identifier:   FE:79:BA:50:B9:B4:3B:66:EC:16:D3:47:82:95:C6:F8:0A:4B:93:B4
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer:       /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial:       019BF4D09C0BD4437FBA8D4E236DD33BF20F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 11:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:10 +0000
Files and hashes:         1: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (hash: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk=)
                          2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: aNHIcohMBee5/GEe0PN7d4DL0UpaxeTAfaPHifzIjOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:9c:0b:d4:43:7f:ba:8d:4e:23:6d:d3:3b:f2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
        Validity
            Not Before: Jan 25 11:01:10 2026 GMT
            Not After : Jan 26 11:01:10 2026 GMT
        Subject: CN=fe79ba50b9b43b66ec16d3478295c6f80a4b93b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ed:28:74:cc:be:79:a9:73:66:19:a2:33:5d:
                    71:5d:92:c0:67:29:ec:55:2e:f1:ac:e0:90:3b:f0:
                    53:11:65:03:40:b6:ac:cd:72:b9:6b:b8:66:be:2d:
                    ca:f3:3a:57:6d:91:86:4a:97:2f:d8:f3:d6:c9:51:
                    93:f9:a7:e1:0d:47:28:04:2a:86:fd:c7:ea:ef:35:
                    82:a7:3b:fe:51:6b:f5:c2:1b:9a:92:a3:a9:76:0e:
                    7f:86:02:68:de:d1:02:a7:e6:4d:62:7b:c3:10:33:
                    37:9c:3a:e3:33:57:0c:3b:b8:dd:ad:c7:38:a1:c4:
                    9a:fd:2b:e5:6e:23:8c:2d:ee:d8:ff:8d:f3:ec:a1:
                    28:6e:40:3d:b3:63:9c:2e:35:34:d9:13:da:fc:31:
                    4c:a8:5c:92:c1:80:f1:e6:0c:ae:35:9e:ce:17:a2:
                    76:a5:81:f5:cf:0d:1c:9c:c7:67:c3:6c:9d:f7:e4:
                    02:d5:33:31:69:eb:b1:fd:26:85:df:13:f4:90:df:
                    e4:1e:07:a9:7c:33:77:03:7f:fc:23:6e:a8:7f:10:
                    58:b3:64:d0:06:62:32:24:df:7a:0d:1c:de:20:b5:
                    bb:1c:f5:df:90:bc:34:b9:84:81:58:99:3f:24:c8:
                    e7:ad:3a:de:c1:dc:20:d0:fe:98:2c:5a:5d:be:7f:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:79:BA:50:B9:B4:3B:66:EC:16:D3:47:82:95:C6:F8:0A:4B:93:B4
            X509v3 Authority Key Identifier:
                keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:70:6b:ca:2e:a0:f7:7a:e3:f1:87:b4:92:dc:ce:56:1f:72:
         1d:13:ec:b7:8f:da:f3:10:46:91:24:5d:2d:ef:05:6d:b9:9f:
         5a:2c:18:e1:1d:cb:15:1a:68:d3:2c:7b:43:39:f8:55:75:c7:
         bd:40:71:1e:73:49:bb:22:12:25:b3:c2:5b:5c:ea:17:d9:07:
         a5:12:2a:02:12:79:a3:89:d7:cf:f8:65:ab:3a:8b:d4:bf:96:
         68:64:99:5c:c2:04:49:1f:9c:fe:17:ad:b9:d0:85:5b:1a:48:
         50:be:4e:48:1d:37:a2:4d:59:e4:4e:92:c1:82:88:ee:f3:48:
         b7:de:04:18:89:f3:61:c9:43:78:b1:41:cf:5d:87:e6:d5:a7:
         31:18:90:46:7f:cb:0b:34:1e:9e:2b:06:8f:78:16:7c:89:a9:
         62:2e:33:0c:10:0b:49:18:e4:76:02:03:32:15:41:3e:d2:11:
         43:d0:f6:73:0f:b9:16:74:1d:15:6c:3d:3d:b2:69:92:28:41:
         3e:84:cc:3e:7c:18:75:22:25:09:28:f1:11:aa:67:0b:bf:ec:
         9d:7e:b1:6a:04:2c:94:d0:79:af:71:17:50:79:88:18:40:4d:
         0f:23:a9:e7:84:dc:3f:b4:60:e0:aa:96:23:03:7f:1a:46:8a:
         42:51:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:14 2026 by rpki-client