This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File:                     YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier:          W4tmeL9HEL86yCinc+O3M9DbxgwH7WzcDKL0olQN0lA=
Subject key identifier:   76:B5:0A:40:B2:0B:2F:45:B0:CE:43:61:49:10:1C:07:33:68:89:71
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer:       /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial:       019BFA65170128749AA47EC0E3700FA66381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number:          0FE6
Signing time:             Mon 26 Jan 2026 13:01:27 +0000
Manifest this update:     Mon 26 Jan 2026 13:01:27 +0000
Manifest next update:     Tue 27 Jan 2026 13:01:27 +0000
Files and hashes:         1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
                          2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
                          3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: BhWjMitsYiuZhX7LLDsoF/ettz952O4G09U9xl6o388=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:65:17:01:28:74:9a:a4:7e:c0:e3:70:0f:a6:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
        Validity
            Not Before: Jan 26 13:01:27 2026 GMT
            Not After : Jan 27 13:01:27 2026 GMT
        Subject: CN=76b50a40b20b2f45b0ce436149101c0733688971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:ee:7b:82:13:f6:20:88:57:74:06:72:53:
                    92:fa:a7:70:f7:e6:84:05:d1:e4:4e:ac:8a:1e:1e:
                    36:cc:d2:ef:4a:a0:7d:03:d7:ab:6f:89:5b:cf:ad:
                    b9:92:4a:1a:68:ff:de:aa:3b:86:77:0a:95:66:a4:
                    67:e9:db:df:4f:c8:08:51:d8:7c:55:2d:4c:d5:bf:
                    e1:75:42:02:94:8b:a8:8a:00:e8:d5:5f:9e:0a:5a:
                    6c:14:32:6e:80:4b:be:bd:1a:1b:42:97:1c:18:01:
                    73:5c:06:a3:e2:24:46:aa:e8:24:0c:4d:dc:e1:20:
                    db:1c:57:35:18:ff:59:fb:c1:93:28:e8:34:65:7b:
                    9e:f5:36:83:fd:9b:72:b2:82:88:4a:17:17:ea:22:
                    a3:73:90:48:8c:24:df:dc:de:ac:02:e7:d7:a3:77:
                    cb:f0:b5:6c:b4:dc:36:e0:bc:e9:d6:6d:b5:ee:47:
                    e0:0e:7d:be:5c:b8:5c:61:c3:98:4d:94:14:d2:df:
                    52:28:60:b0:e3:7f:38:b2:ce:7a:a4:6b:d2:fa:34:
                    5e:63:45:f5:66:86:0e:0d:01:c3:a8:aa:7e:d1:1a:
                    a5:f6:27:87:13:4d:75:ac:d3:c4:3f:d9:c5:23:05:
                    62:1a:86:02:73:a1:54:56:53:f4:2e:40:9a:d5:06:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:0A:40:B2:0B:2F:45:B0:CE:43:61:49:10:1C:07:33:68:89:71
            X509v3 Authority Key Identifier:
                keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f9:26:47:62:4b:6b:31:3c:94:ba:b6:75:ed:95:fd:3b:a4:
         18:69:42:e7:2a:ee:c7:d3:b2:53:07:31:11:1b:24:0c:3e:bb:
         45:ae:ef:95:a5:ce:27:20:c6:cd:5a:c7:96:aa:aa:7b:c3:0d:
         2d:76:0d:35:69:d1:1d:0c:ba:92:c8:f1:56:55:0a:d1:43:7f:
         66:bd:71:27:f0:2c:85:7f:53:f4:1d:5c:17:06:9f:08:49:34:
         43:f7:7b:a7:77:94:14:1d:de:09:61:bb:d3:cd:f0:9d:87:97:
         07:58:d6:4b:ae:e2:47:3c:56:b0:c0:9e:3b:cc:76:17:12:44:
         ec:73:e5:96:4e:5f:40:f1:3a:fe:ad:91:76:b7:4e:37:3d:96:
         13:35:ad:b8:29:34:a1:c7:39:6a:c0:30:d4:9f:8b:25:90:ad:
         ff:49:05:6a:4d:f9:69:fe:ee:10:6a:d2:90:f7:25:81:3b:25:
         98:e4:b6:81:ce:79:b8:34:c6:41:72:7d:c2:f2:61:20:dc:85:
         49:14:df:e9:49:a6:cc:f1:64:c0:49:78:4d:f7:11:ac:ff:0f:
         08:d1:16:11:f9:1a:c0:a9:e0:04:e2:64:6f:82:35:c5:f1:56:
         b4:29:86:8e:65:bf:fa:52:a6:cc:14:8d:46:de:6f:a6:bd:2f:
         31:09:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:12:36 2026 by rpki-client