This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          52NBw0DaioRS5zUAA67RGmFJDfbg+v++9XN5m4MyKSs=
Subject key identifier:   84:11:48:5B:83:60:F3:27:F5:DB:0D:47:85:F1:79:6D:C6:0B:40:6B
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       019BF35078D81580ED13CBC2484A3B5C4B60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 04:01:35 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:35 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:35 +0000
Files and hashes:         1: TrY6aUvOznEWPgwFCDr7RM2O3ms.roa (hash: DDvKuMgIkfq65IcNVG0b6/9Oq5NsQ98eHZFJJ6S6qiM=)
                          2: YddULzzqlHaijBKc45wV-2A9NRg.roa (hash: DJJK0mLKzBAwLMCbEIMtOEBhlQs/ecomUOMz09kFmzw=)
                          3: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: dBoHfjW6oZHeEFKnZBUuGeWM8G930kFdSI2u2arafUY=)
                          4: g4nCWXK_03YbprQHpph4RAU5af4.roa (hash: bja30FhVlRyFoYSsgn4yCXyL+dT+/OEpibcb3uOS2oE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:78:d8:15:80:ed:13:cb:c2:48:4a:3b:5c:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Jan 25 04:01:35 2026 GMT
            Not After : Jan 26 04:01:35 2026 GMT
        Subject: CN=8411485b8360f327f5db0d4785f1796dc60b406b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:63:49:37:ec:a2:6a:0d:d3:4a:7b:ef:4b:
                    ec:cc:b0:de:47:37:e8:3f:a7:3e:be:11:c1:33:73:
                    19:77:c8:a2:3a:c8:8e:6f:dc:e9:b4:d3:73:62:1c:
                    aa:b8:b1:14:53:7e:d1:99:75:d6:fb:d8:7d:24:aa:
                    e5:a0:1b:7e:c2:a6:ce:90:fc:62:07:a2:ec:de:66:
                    c9:32:07:6a:6b:a3:70:db:4e:7c:82:2e:30:90:a5:
                    ea:3f:5b:28:a1:e0:58:db:d2:c7:c3:53:41:b8:6e:
                    d8:9d:f4:f6:4f:ad:3e:7c:06:57:36:2a:a8:c5:62:
                    f8:a3:86:2f:ca:93:8d:cd:8c:1c:3a:3f:f5:d2:81:
                    32:34:11:49:d2:45:5f:1c:4b:c7:f3:c7:bd:50:24:
                    ec:91:43:24:64:39:54:a4:60:4c:81:09:e5:f6:44:
                    8a:83:35:e1:c0:b1:73:d7:36:88:8c:64:6e:0b:a6:
                    64:1a:0c:83:9b:01:af:b3:f7:13:95:97:1c:bb:a2:
                    75:34:0b:58:b6:75:e2:01:c2:f6:0b:a8:84:65:ed:
                    21:20:a5:ee:46:13:6c:29:71:f2:ba:7a:e6:a0:ba:
                    28:b9:72:ab:e8:0a:2b:5f:d0:3c:86:62:d3:ce:20:
                    19:07:9a:1f:3c:ba:cb:3f:28:98:50:ae:b7:5a:1b:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:11:48:5B:83:60:F3:27:F5:DB:0D:47:85:F1:79:6D:C6:0B:40:6B
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:31:85:df:be:6a:33:b7:bb:17:16:e6:f2:bb:90:db:b0:
         b9:c3:b5:42:93:22:bd:f0:03:b0:86:c6:97:03:73:64:0f:37:
         b2:48:a7:5d:b1:e0:9c:54:0e:95:c5:03:3c:63:11:fb:7a:ff:
         31:e5:40:d8:39:ba:52:e3:4b:c7:c2:a6:6a:7d:f4:dc:77:b8:
         4c:1b:ad:57:10:b5:52:05:ca:4a:96:2b:3f:6f:8c:c6:1a:ac:
         f8:b5:5c:c5:4f:78:a8:00:6a:64:be:e0:9c:49:e3:5c:ed:af:
         16:f8:d4:99:43:33:7d:75:03:76:6e:10:f2:11:9b:0c:db:54:
         eb:20:b3:3f:4c:0c:0f:32:b2:a2:95:91:81:46:59:80:c0:4b:
         93:1f:f3:15:93:0b:b5:a3:4a:7a:cc:00:42:71:5b:84:32:d7:
         99:65:98:2d:89:a2:e7:10:97:e2:cf:6f:4d:4a:20:53:7e:e3:
         68:b2:f9:ad:db:22:be:4c:19:0c:aa:af:ee:c9:72:c8:49:4d:
         53:8d:31:f9:24:e2:60:eb:54:6a:8c:51:d5:69:67:7a:1d:d2:
         b3:7c:3d:f4:c1:ad:1c:8e:42:15:58:a6:b5:58:02:cd:8c:d1:
         4f:2d:0b:33:04:22:69:40:79:3b:35:d0:05:0a:c6:7d:62:25:
         b2:6e:64:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUHjYFYDtE8vCSEo7XEtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZWNhNDAxMmJmN2I1MDU2ZTJlMGExNjFlYjQ2MTg4NzZj
OTExMmEwHhcNMjYwMTI1MDQwMTM1WhcNMjYwMTI2MDQwMTM1WjAzMTEwLwYDVQQD
Eyg4NDExNDg1YjgzNjBmMzI3ZjVkYjBkNDc4NWYxNzk2ZGM2MGI0MDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtItjSTfsomoN00p770vszLDeRzfo
P6c+vhHBM3MZd8iiOsiOb9zptNNzYhyquLEUU37RmXXW+9h9JKrloBt+wqbOkPxi
B6Ls3mbJMgdqa6Nw2058gi4wkKXqP1sooeBY29LHw1NBuG7YnfT2T60+fAZXNiqo
xWL4o4YvypONzYwcOj/10oEyNBFJ0kVfHEvH88e9UCTskUMkZDlUpGBMgQnl9kSK
gzXhwLFz1zaIjGRuC6ZkGgyDmwGvs/cTlZccu6J1NAtYtnXiAcL2C6iEZe0hIKXu
RhNsKXHyunrmoLoouXKr6AorX9A8hmLTziAZB5ofPLrLPyiYUK63WhsWgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQRSFuDYPMn9dsNR4XxeW3GC0BrMB8GA1UdIwQY
MBaAFHvspAEr97UFbi4KFh60YYh2yREqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYt
NThjYWY0NzAxYmUzLzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYtNThjYWY0NzAxYmUz
LzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2Exhd++
ajO3uxcW5vK7kNuwucO1QpMivfADsIbGlwNzZA83skinXbHgnFQOlcUDPGMR+3r/
MeVA2Dm6UuNLx8Kman303He4TButVxC1UgXKSpYrP2+Mxhqs+LVcxU94qABqZL7g
nEnjXO2vFvjUmUMzfXUDdm4Q8hGbDNtU6yCzP0wMDzKyopWRgUZZgMBLkx/zFZML
taNKeswAQnFbhDLXmWWYLYmi5xCX4s9vTUogU37jaLL5rdsivkwZDKqv7slyyElN
U40x+STiYOtUaoxR1Wlneh3Ss3w99MGtHI5CFVimtVgCzYzRTy0LMwQiaUB5OzXQ
BQrGfWIlsm5klA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:52 2026 by rpki-client