This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          3v2v/uKGzL4OsbemUZZw0dfgTgUhDo9ug2D37MuXwUY=
Subject key identifier:   9B:27:44:59:E9:F8:75:22:BD:DD:61:21:18:D1:F8:DD:A8:A0:8B:FF
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       019BF7D2735ED45589B3935040BF4498D211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          053D
Signing time:             Mon 26 Jan 2026 01:02:02 +0000
Manifest this update:     Mon 26 Jan 2026 01:02:02 +0000
Manifest next update:     Tue 27 Jan 2026 01:02:02 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: 4/1XZX+9xo0x4STgSmBiB46RWEVr3nE3rgAyQF0Q+74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:73:5e:d4:55:89:b3:93:50:40:bf:44:98:d2:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Jan 26 01:02:02 2026 GMT
            Not After : Jan 27 01:02:02 2026 GMT
        Subject: CN=9b274459e9f87522bddd612118d1f8dda8a08bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:75:ff:eb:c4:6a:78:99:2b:e1:b7:38:44:
                    8c:2a:8f:84:4d:fe:2a:4f:15:4e:10:0a:da:93:65:
                    5c:f6:91:22:5a:e9:35:31:98:6f:37:25:7e:00:02:
                    78:9e:e9:db:8a:01:ed:35:04:82:8b:7a:b4:66:c5:
                    b8:0a:79:c1:18:ed:a8:ee:3d:c5:5f:4c:03:6f:dc:
                    59:57:79:42:7b:83:d9:1c:6f:65:71:1c:b0:2c:d7:
                    57:d9:69:3e:af:f2:8d:c0:3a:14:f9:9e:1b:f7:d1:
                    c0:40:d2:9a:fa:f1:c8:1c:a4:15:b6:0a:53:24:a8:
                    8b:3c:61:4f:ef:19:93:fe:73:f1:75:a6:af:fa:9d:
                    36:d0:c9:56:09:89:4d:33:b7:f5:64:14:78:4e:7a:
                    1f:d0:f2:9b:91:02:5e:7a:24:fc:11:65:f2:6f:fe:
                    11:ef:39:68:03:10:45:b5:69:14:6d:1d:88:d2:8f:
                    5e:7e:69:2d:90:92:33:47:55:40:79:94:10:00:49:
                    d8:ed:9f:08:1e:be:b4:b8:ce:ec:83:7a:c9:53:28:
                    14:cc:27:82:cd:58:15:98:67:40:29:29:29:3e:67:
                    b5:40:32:d1:4e:5f:51:3f:c8:32:4e:04:b8:31:ad:
                    e8:3a:d9:da:07:83:5c:e3:8e:27:fd:f3:a4:2a:3d:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:27:44:59:E9:F8:75:22:BD:DD:61:21:18:D1:F8:DD:A8:A0:8B:FF
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:78:70:c9:69:f6:94:e6:c4:c4:87:89:3f:e2:fb:e0:4f:c8:
         de:fe:51:64:78:24:4b:a8:4d:44:12:47:35:c5:ac:37:05:1d:
         9c:96:6d:1c:0e:0b:60:a6:12:4f:14:71:b8:a6:cd:70:30:7b:
         ed:15:33:86:7d:6e:10:75:22:5c:6e:03:fb:f9:9f:db:9d:bd:
         eb:bb:af:a1:f3:e6:d9:3f:e0:60:a5:ee:24:20:fe:55:d6:81:
         b9:fd:cf:20:a6:96:62:fa:5d:ad:73:0c:e5:d4:79:7b:7c:d3:
         ff:e0:76:21:cd:43:46:16:48:d6:74:f3:4d:97:02:c9:a9:dd:
         b1:05:bd:0e:de:54:90:e1:a9:b4:22:e8:c1:b9:47:3b:b1:e2:
         47:70:6e:49:c0:8e:e6:e8:76:a1:fe:a5:78:83:83:ae:78:9b:
         35:85:38:69:14:47:9b:b2:3b:01:a1:b9:69:8f:35:2e:13:f0:
         32:3e:db:b0:02:53:dc:03:9c:7e:ad:9b:07:de:f6:40:3f:0a:
         e5:9b:22:8d:91:33:4f:84:13:cb:3b:93:f4:c3:fa:64:be:19:
         fe:fa:50:8c:b8:e5:e7:b1:a9:dc:48:7a:be:d2:a7:84:80:4c:
         8c:dc:15:84:89:8b:09:0d:a4:8e:24:b0:ce:0a:85:b0:86:21:
         0e:78:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:57 2026 by rpki-client