This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          k41a5o+OJVcM7VuSfAbFEJLga1G7LhX1rhM7cg0syOA=
Subject key identifier:   B3:A5:4B:E6:7C:7F:5A:77:78:B0:15:4C:BC:DD:5F:00:D0:C9:C3:95
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       019C1CF139B48615E728DE9F682DD4767BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          17FF
Signing time:             Mon 02 Feb 2026 06:01:36 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:36 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:36 +0000
Files and hashes:         1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
                          2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: hGpG42JvoeR21+sTvTukU/s1F5v2QR9ruUXEtOllpoE=)
                          3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
                          4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:39:b4:86:15:e7:28:de:9f:68:2d:d4:76:7b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Feb  2 06:01:36 2026 GMT
            Not After : Feb  3 06:01:36 2026 GMT
        Subject: CN=b3a54be67c7f5a7778b0154cbcdd5f00d0c9c395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:7f:19:4d:c5:84:b8:d9:b0:7b:a9:86:a8:
                    de:10:19:c8:20:e2:ac:86:68:b1:63:4b:74:06:04:
                    79:64:53:89:4b:e1:34:da:00:25:8a:88:8e:6e:fb:
                    f9:bd:20:99:ca:d5:72:ce:4c:fa:cf:e2:f4:52:f9:
                    fe:47:03:00:d8:7d:cd:98:13:5b:8d:2a:b2:9c:ea:
                    5c:5f:83:2a:37:1c:4b:ca:31:b4:22:a7:80:2c:9b:
                    e6:b8:37:c1:fa:e4:84:a1:19:a7:45:0b:2f:3b:67:
                    40:2d:26:7f:3e:7a:54:f9:cf:46:59:fc:e4:79:68:
                    cb:1f:94:92:dc:8f:fd:57:0d:79:b5:ee:d7:eb:6d:
                    98:c3:f3:c1:4d:35:9d:66:62:47:d1:6f:34:b1:34:
                    28:7c:26:70:1a:7f:77:c9:5a:12:d3:30:c5:20:40:
                    18:71:dd:f8:31:1b:88:39:d8:96:3e:e0:4b:07:f5:
                    9a:12:8d:88:db:17:f5:3c:bc:03:91:df:9c:94:27:
                    32:90:a6:a8:3c:86:b4:33:e8:99:b3:b3:6d:68:bb:
                    81:e4:58:2b:eb:aa:9c:50:3a:81:d3:e9:e8:46:69:
                    d2:8f:7d:16:0d:dd:d4:cf:da:0e:a6:8c:23:61:10:
                    c6:a1:0c:d5:e2:8c:49:90:9a:1a:5c:23:b9:78:9e:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:4B:E6:7C:7F:5A:77:78:B0:15:4C:BC:DD:5F:00:D0:C9:C3:95
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:be:51:87:77:0f:09:89:88:36:84:cf:4e:c9:a8:38:bb:ac:
         0a:df:0c:39:ca:64:c8:3a:e3:ac:c9:f0:18:a4:f0:b5:33:54:
         0e:af:dd:03:5b:9e:a1:46:11:a4:3e:61:67:f1:f0:26:7b:15:
         e4:2a:93:d9:bf:63:93:1c:f1:0e:61:e0:44:3a:e7:21:ad:fa:
         2d:8d:2f:07:ce:cd:07:6b:dd:83:32:da:6f:82:d2:e6:33:f3:
         80:a5:61:8b:7b:d3:50:a8:3f:9c:73:d4:50:12:3a:7a:18:ea:
         df:29:6f:93:db:53:71:1f:17:c8:31:4b:f2:a4:47:10:84:24:
         50:9b:aa:d0:96:56:f5:a3:b6:5d:82:c3:0b:d4:b3:75:a1:60:
         55:8b:6e:91:66:a1:6a:63:cb:30:06:b7:62:e4:1a:26:89:d6:
         aa:11:8b:09:0c:ca:ad:8c:77:0e:84:d5:91:da:9b:6a:4d:dc:
         58:5e:f2:c6:81:ef:ee:00:27:56:81:d0:25:23:7c:9a:e4:b1:
         a2:7f:69:59:e9:21:a0:df:c5:da:f7:14:08:58:ab:99:92:7c:
         ab:b4:c6:6c:8d:16:74:65:b8:96:fc:01:50:09:13:5f:16:e3:
         62:64:78:35:8d:51:12:b5:95:13:cf:64:ad:37:1d:e9:59:63:
         81:c0:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:39 2026 by rpki-client