This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          pSqHruSQTYVArGiB+2c2E2A5F+5Y7aWYqwPUaV/j0aQ=
Subject key identifier:   08:75:EA:3A:05:19:73:75:77:3A:49:B4:DD:70:F0:35:53:58:7E:8D
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       019BFD9C7D0404E386957E465A5892FC61D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          177E
Signing time:             Tue 27 Jan 2026 04:00:49 +0000
Manifest this update:     Tue 27 Jan 2026 04:00:49 +0000
Manifest next update:     Wed 28 Jan 2026 04:00:49 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: Xw2o532jlawwuUU40Evaqvctbbr9DotTzLhAK5mUBTM=)
                          2: uUWVa1294AWFSpDUYVKBN-fvYMc.roa (hash: axEGfOzW4g5Z2ybzJ+kEQtiDgU2ikyT0bamMhlhBt2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:9c:7d:04:04:e3:86:95:7e:46:5a:58:92:fc:61:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: Jan 27 04:00:49 2026 GMT
            Not After : Jan 28 04:00:49 2026 GMT
        Subject: CN=0875ea3a05197375773a49b4dd70f03553587e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:31:25:d5:a3:f9:85:2e:be:a6:ef:67:b0:
                    a5:55:e5:cb:0a:6a:90:3b:de:a4:95:04:20:bb:be:
                    9f:cf:bf:bc:81:79:f3:ee:6b:26:f0:ae:bb:75:0a:
                    41:ca:e1:70:b1:1a:96:5f:61:3b:81:92:a5:07:6f:
                    e5:63:00:f4:43:03:f5:22:76:33:84:d7:9b:dd:23:
                    e5:04:cd:9d:77:82:59:67:4d:32:4c:67:87:02:ed:
                    99:a7:dd:02:f2:a2:8e:74:d8:5d:b9:35:13:80:e1:
                    2f:37:fc:27:ce:84:1c:bf:d2:2a:ff:63:18:e5:78:
                    42:59:13:bc:f4:4c:5d:00:11:60:ac:e3:f0:49:74:
                    7c:e3:93:ba:70:66:59:42:87:0f:ac:fc:3d:3b:82:
                    05:dc:c0:61:53:c2:f1:d4:c7:38:da:26:7a:d8:5a:
                    2f:70:2b:f8:98:6d:9d:b4:60:de:10:99:45:54:af:
                    60:0a:0e:06:c5:f8:a4:e9:e4:42:e2:e0:14:92:b4:
                    5c:45:29:ba:a7:a3:52:66:30:08:42:f2:ce:47:50:
                    5f:26:f1:35:7d:d6:db:83:6a:23:9e:6e:2f:23:db:
                    e9:6a:0d:e6:05:c5:f5:c3:7b:c2:7a:de:7f:d6:9f:
                    9a:e0:bc:b1:4a:4d:9b:8c:6e:87:4b:dc:02:96:a5:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:75:EA:3A:05:19:73:75:77:3A:49:B4:DD:70:F0:35:53:58:7E:8D
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:13:12:18:a8:11:03:14:4f:ce:d2:f5:1c:a1:32:3b:8c:
         b4:6e:b1:62:8e:88:6c:de:06:4b:62:8a:1c:e4:3f:45:e4:a1:
         65:6e:81:6b:94:9e:c3:88:87:5b:e6:7b:4b:6f:04:e9:cf:12:
         80:96:96:2a:b5:6c:98:84:00:98:77:07:0d:94:5e:94:37:8c:
         4c:45:ce:1f:19:99:ea:57:85:b7:20:d8:9d:a9:fd:37:f0:70:
         ac:fe:f1:43:c5:90:9f:af:94:e9:22:94:5b:83:9e:88:d1:18:
         bf:85:42:68:4a:f2:83:7d:91:b3:2a:6b:76:d5:d2:43:f6:93:
         8a:66:81:2a:06:94:11:56:75:1a:a6:5a:6f:70:27:0f:c2:38:
         d7:b9:7f:3a:bd:be:28:0d:15:49:74:46:41:83:f7:c1:f2:d4:
         5f:2f:28:c4:c3:eb:62:1e:91:e0:ea:3d:7e:15:25:ac:5d:66:
         ff:df:54:26:c4:93:9f:91:9c:cb:3a:f4:73:b0:db:89:80:9a:
         97:9a:62:ca:cf:3c:b6:cb:33:1c:74:d0:1e:77:8c:c6:d8:2e:
         fa:4a:34:3e:8a:76:be:b8:5a:8a:bb:11:07:c5:6c:77:c3:a1:
         6a:6a:40:3e:de:48:cc:bf:ea:96:7e:13:a3:13:90:c0:42:e8:
         37:e7:02:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv9nH0EBOOGlX5GWliS/GHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzFiOWZmZTk4NjcyYmY2MmY0ODdmNDdkYWZlYTMwZjVi
ZWYwOWMwHhcNMjYwMTI3MDQwMDQ5WhcNMjYwMTI4MDQwMDQ5WjAzMTEwLwYDVQQD
EygwODc1ZWEzYTA1MTk3Mzc1NzczYTQ5YjRkZDcwZjAzNTUzNTg3ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzroxJdWj+YUuvqbvZ7ClVeXLCmqQ
O96klQQgu76fz7+8gXnz7msm8K67dQpByuFwsRqWX2E7gZKlB2/lYwD0QwP1InYz
hNeb3SPlBM2dd4JZZ00yTGeHAu2Zp90C8qKOdNhduTUTgOEvN/wnzoQcv9Iq/2MY
5XhCWRO89ExdABFgrOPwSXR845O6cGZZQocPrPw9O4IF3MBhU8Lx1Mc42iZ62Fov
cCv4mG2dtGDeEJlFVK9gCg4Gxfik6eRC4uAUkrRcRSm6p6NSZjAIQvLOR1BfJvE1
fdbbg2ojnm4vI9vpag3mBcX1w3vCet5/1p+a4LyxSk2bjG6HS9wClqWzaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh16joFGXN1dzpJtN1w8DVTWH6NMB8GA1UdIwQY
MBaAFGPBuf/phnK/YvSH9H2v6jD1vvCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThHNV8tbUdjcjlpOUlmMGZhX3FNUFctOEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82M2UzMDUtNDZlNi00MzYzLTg3MzMt
N2Q5NDhkYmE1ZTNjLzEvWThHNV8tbUdjcjlpOUlmMGZhX3FNUFctOEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC82M2UzMDUtNDZlNi00MzYzLTg3MzMtN2Q5NDhkYmE1ZTNj
LzEvWThHNV8tbUdjcjlpOUlmMGZhX3FNUFctOEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjETEhio
EQMUT87S9RyhMjuMtG6xYo6IbN4GS2KKHOQ/ReShZW6Ba5Sew4iHW+Z7S28E6c8S
gJaWKrVsmIQAmHcHDZRelDeMTEXOHxmZ6leFtyDYnan9N/BwrP7xQ8WQn6+U6SKU
W4OeiNEYv4VCaEryg32RsyprdtXSQ/aTimaBKgaUEVZ1GqZab3AnD8I417l/Or2+
KA0VSXRGQYP3wfLUXy8oxMPrYh6R4Oo9fhUlrF1m/99UJsSTn5Gcyzr0c7DbiYCa
l5piys88tsszHHTQHneMxtgu+ko0Pop2vrhairsRB8Vsd8OhampAPt5IzL/qln4T
oxOQwELoN+cCug==
-----END CERTIFICATE-----
Generated at Tue Jan 27 14:28:16 2026 by rpki-client