This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File:                     _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier:          ++lmqV0sWg+6KivPejvwCwIu1qh3/yVzlwczHRpVkdM=
Subject key identifier:   D6:14:63:6B:1A:15:EC:75:F6:8A:D1:97:B1:E0:52:B7:15:55:BE:97
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer:       /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial:       019BFC8A4AB276CEFF999C39DFFF967A84C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number:          17F6
Signing time:             Mon 26 Jan 2026 23:01:20 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:20 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:20 +0000
Files and hashes:         1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: Mrq/CqXj0pI9/GPqqpHRJsWhnfUnhVAhfrUiUiON5uM=)
                          2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
                          3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:4a:b2:76:ce:ff:99:9c:39:df:ff:96:7a:84:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
        Validity
            Not Before: Jan 26 23:01:20 2026 GMT
            Not After : Jan 27 23:01:20 2026 GMT
        Subject: CN=d614636b1a15ec75f68ad197b1e052b71555be97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:e9:e4:61:21:49:f3:b3:d0:d8:88:54:52:
                    81:a5:82:11:ed:54:8e:97:cf:7d:80:b5:c3:2a:51:
                    bc:ed:74:d5:c0:6c:1a:43:90:eb:87:3f:d6:1c:ba:
                    db:47:e7:58:36:ce:b1:fb:74:d4:0e:77:6d:c4:19:
                    46:dd:25:21:b9:be:ab:0d:a6:b1:3a:00:a1:25:78:
                    3b:20:3c:23:ca:d5:e0:2f:10:c8:f2:61:9f:7f:85:
                    b2:0e:0c:af:b4:ad:07:75:72:95:f3:15:80:04:7f:
                    81:b3:ec:c4:1e:24:5b:ee:28:5a:0d:87:af:97:b9:
                    b8:ed:64:26:5b:96:c8:f7:13:cc:b2:4a:dc:29:c0:
                    3b:de:c2:b4:4d:d1:43:9f:c1:98:ad:38:06:33:f3:
                    4a:38:15:f7:3d:0c:c9:a7:10:c5:37:67:01:ec:55:
                    8c:28:f7:02:62:ff:68:e2:61:8e:ee:e7:79:1a:43:
                    32:64:99:1d:0c:fc:28:57:fb:99:94:2d:0c:8a:ba:
                    a2:e3:0b:53:d8:35:c7:f3:bf:bb:fb:46:f7:c2:ff:
                    99:d5:44:83:65:33:87:ab:ae:74:b9:7b:08:e9:ee:
                    37:d7:b3:b2:e8:ce:00:f9:5b:45:f1:a8:93:c7:9c:
                    89:18:56:28:a7:a5:09:d9:be:6e:00:8e:e4:74:25:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:63:6B:1A:15:EC:75:F6:8A:D1:97:B1:E0:52:B7:15:55:BE:97
            X509v3 Authority Key Identifier:
                keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f5:3c:ed:b1:a5:be:c9:35:e1:cf:7b:04:9f:4a:9b:12:c2:
         78:fa:c4:d3:f7:c1:10:b7:85:76:56:e4:16:10:76:79:64:18:
         0b:fc:f9:e2:f7:41:2c:50:28:86:11:a2:3a:e6:e7:27:f2:e2:
         a1:08:ee:d6:91:f3:64:8e:07:a8:0e:7b:4d:ad:23:b6:a0:c6:
         19:3b:cb:b2:b7:cb:45:61:b7:23:8e:96:62:57:70:b7:30:0a:
         18:24:e8:05:fb:3d:d2:2c:f5:b8:85:1a:ce:c6:7e:17:fe:b8:
         bc:f3:4d:38:56:c1:c2:bd:33:1b:20:5e:30:f8:ca:2e:29:fa:
         ea:32:46:b7:34:ee:b4:41:18:b7:6e:33:87:f6:ca:b6:40:f5:
         14:08:f2:a5:85:30:d1:4e:14:9e:71:2a:cc:11:7e:51:c1:5e:
         fa:0e:70:ba:c1:67:e8:a5:cd:43:b4:3e:45:f3:82:82:ee:f9:
         78:61:4d:1e:52:df:55:16:a5:81:6a:79:17:6c:01:d5:c2:f0:
         37:92:7e:06:95:b9:3e:8b:ef:80:2d:a6:dd:6c:99:59:75:cf:
         fa:60:3b:1d:a4:e6:03:94:df:b1:41:99:07:cd:fa:59:21:fa:
         58:6e:5a:03:fa:0b:c4:cc:4a:a7:92:3e:f8:6a:84:8c:54:45:
         76:0e:11:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8ikqyds7/mZw53/+WeoTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk
ZDE2ZWIwHhcNMjYwMTI2MjMwMTIwWhcNMjYwMTI3MjMwMTIwWjAzMTEwLwYDVQQD
EyhkNjE0NjM2YjFhMTVlYzc1ZjY4YWQxOTdiMWUwNTJiNzE1NTViZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdvp5GEhSfOz0NiIVFKBpYIR7VSO
l899gLXDKlG87XTVwGwaQ5Drhz/WHLrbR+dYNs6x+3TUDndtxBlG3SUhub6rDaax
OgChJXg7IDwjytXgLxDI8mGff4WyDgyvtK0HdXKV8xWABH+Bs+zEHiRb7ihaDYev
l7m47WQmW5bI9xPMskrcKcA73sK0TdFDn8GYrTgGM/NKOBX3PQzJpxDFN2cB7FWM
KPcCYv9o4mGO7ud5GkMyZJkdDPwoV/uZlC0Mirqi4wtT2DXH87+7+0b3wv+Z1USD
ZTOHq650uXsI6e4317Oy6M4A+VtF8aiTx5yJGFYop6UJ2b5uAI7kdCUUXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYUY2saFex19orRl7HgUrcVVb6XMB8GA1UdIwQY
MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt
YzdhYzI2YmNjMmRhLzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh
LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvU87bGl
vsk14c97BJ9KmxLCePrE0/fBELeFdlbkFhB2eWQYC/z54vdBLFAohhGiOubnJ/Li
oQju1pHzZI4HqA57Ta0jtqDGGTvLsrfLRWG3I46WYldwtzAKGCToBfs90iz1uIUa
zsZ+F/64vPNNOFbBwr0zGyBeMPjKLin66jJGtzTutEEYt24zh/bKtkD1FAjypYUw
0U4UnnEqzBF+UcFe+g5wusFn6KXNQ7Q+RfOCgu75eGFNHlLfVRalgWp5F2wB1cLw
N5J+BpW5PovvgC2m3WyZWXXP+mA7HaTmA5TfsUGZB836WSH6WG5aA/oLxMxKp5I+
+GqEjFRFdg4Rbw==
-----END CERTIFICATE-----
Generated at Tue Jan 27 01:07:34 2026 by rpki-client