This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
File:                     YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json)
Hash identifier:          mhoTQCzqYfkQ4hsbVd/lSMqHfVsS040uFVS6ZbW8ANY=
Subject key identifier:   0E:E7:27:95:E6:85:FF:29:20:71:59:7F:95:B3:06:7C:FE:41:3A:A6
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Certificate issuer:       /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial:       019C205F85F05125391F2245737507166607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
Manifest number:          0679
Signing time:             Mon 02 Feb 2026 22:00:56 +0000
Manifest this update:     Mon 02 Feb 2026 22:00:56 +0000
Manifest next update:     Tue 03 Feb 2026 22:00:56 +0000
Files and hashes:         1: 05dJnjX2XorGTHQfrKvjhWfsRV4.roa (hash: KiOoN3ONMmepEer9bJk46C8CXe0dkRBysfrL6UFiDg4=)
                          2: 6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa (hash: pjL7PLIGwLTNOBt+seTt/W2jPyX7Bk12lzulixeL94A=)
                          3: Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa (hash: 2K+D9bxizH0sqWU2qEMlwlkxQrgykxO7hyEi+m+gV4g=)
                          4: J9MOifVvxWkCXnbkT4Sr5P1XUQk.roa (hash: JFKzgNziUP2fsulFj18JSMHykZ0juIoG3V1HkaMBe5c=)
                          5: MjYgj5PkJtwB52FzuT0YsILbMY0.roa (hash: Indk9YkEk2hK3dLWnIDlZYz40E8hqE2V87I+wxoCcUk=)
                          6: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: 6OBmY/2Q9KoXAYjYEwezesz0W85b1jVgoEyJlxqX2z0=)
                          7: aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa (hash: yyghszcohtM5Wk9rUOZWwch/Wn48BU9LOtNcV0EZHsc=)
                          8: pExaAwfSYwr_lBTN5B-h28Hzx-Q.roa (hash: j5/WDKSKaukoZPKqhJSK8kewWRgRB7Z/9X/2kscz69Q=)
                          9: pOrqbHZi1VTPzd3E16dHigG9X_M.roa (hash: C1s5ru2cOKTgc4bOCi0g0DrVt47GvCI/PVKTkhz3xeo=)
                          10: uSGmmmaLtoe3eUHigIrN47aVHko.roa (hash: tjzYIHWpoG3yiW/4rVWqjKVzthPOwUg7TejbjmApHRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:5f:85:f0:51:25:39:1f:22:45:73:75:07:16:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
        Validity
            Not Before: Feb  2 22:00:56 2026 GMT
            Not After : Feb  3 22:00:56 2026 GMT
        Subject: CN=0ee72795e685ff292071597f95b3067cfe413aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:12:c3:f3:fa:b0:e0:3e:42:86:45:8c:34:
                    c7:4a:e9:ed:d9:80:67:db:d4:cb:3b:06:5d:17:ca:
                    31:ce:ee:8d:10:55:4f:db:09:5f:6b:69:46:33:8a:
                    c6:e6:d0:e5:92:9e:d0:8c:23:50:6b:77:e5:f0:b2:
                    2a:d6:a8:c7:6d:95:f5:3c:1c:fe:0b:a7:36:f3:d4:
                    dd:c5:16:1d:38:b0:f9:f8:cc:d1:3f:c4:76:e7:cc:
                    c6:0c:f4:ca:a5:d5:de:fc:90:92:8c:c2:b8:05:85:
                    85:f6:27:db:96:ec:7a:4b:c0:6c:e3:cc:f4:af:c9:
                    d2:09:e6:67:42:d8:d5:17:86:65:2a:c4:49:46:0f:
                    a3:0f:8e:f8:dc:0d:38:5d:31:28:22:55:40:04:d4:
                    5e:0d:a6:17:cf:0a:c8:1f:64:c2:3f:84:65:4e:b2:
                    6e:9f:92:0b:df:f3:c3:8b:59:b5:ce:b1:06:4e:67:
                    b0:c5:66:dd:9e:6e:5e:9a:52:20:92:0c:b5:3b:ad:
                    57:39:70:cf:d1:19:78:a8:54:b6:8f:ee:0c:a0:87:
                    21:ff:3a:4c:e7:e7:df:83:e3:74:b8:0f:cf:3b:73:
                    a1:ef:85:f5:c6:3f:9a:d8:16:97:f3:28:f6:ad:f0:
                    29:ba:eb:af:a4:8a:e8:fd:95:c4:5d:34:33:aa:49:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E7:27:95:E6:85:FF:29:20:71:59:7F:95:B3:06:7C:FE:41:3A:A6
            X509v3 Authority Key Identifier:
                keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:63:64:f5:23:e9:ba:f8:d5:53:bf:5b:bd:56:44:33:22:c2:
         28:25:55:7e:d1:78:9d:93:a0:ca:53:8e:61:e8:bb:6b:5e:ef:
         fe:52:77:13:76:fe:3f:92:c1:a0:1d:93:68:10:45:2d:b9:5e:
         ab:cd:1c:1a:0a:36:c5:c1:c0:ac:f5:d3:49:df:2a:c9:25:ef:
         db:53:67:48:c0:05:7b:60:5f:9c:45:5e:40:25:93:9d:5c:34:
         ed:4f:d5:6e:19:14:01:1e:cf:04:10:5f:df:11:19:1b:59:c0:
         3a:dc:af:51:32:ff:14:db:78:51:4b:b6:87:66:f3:90:5b:8a:
         2e:a0:1a:7b:79:58:87:49:4e:f0:4a:7c:8f:4c:2e:12:bb:d1:
         b3:8b:b6:88:4c:1d:88:c1:1f:b5:53:1d:7f:ef:7c:2a:16:8e:
         0f:3b:88:de:0a:4d:96:9e:36:5d:10:a9:7b:0a:7e:30:15:42:
         7d:ed:44:43:eb:6a:4f:47:d3:1e:a8:7b:ab:e3:a1:64:01:cd:
         be:7d:20:e5:bd:9c:df:27:1a:3a:b5:e1:16:1c:f2:23:1a:aa:
         4a:ac:d3:06:37:1d:30:34:e2:74:9d:bf:16:00:f9:6a:6c:6f:
         90:1e:3c:11:86:4e:59:34:df:29:72:5f:91:6c:ef:d2:c0:f1:
         ff:24:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:55:37 2026 by rpki-client