This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
File:                     Y6wkfmJx8GSRY3K1If3IZJslTFU.mft (raw, json)
Hash identifier:          mIoTSdNkrlgLN3aY5FXtc0Q0xqTR3IJNquk7EdsgM/s=
Subject key identifier:   9E:C0:31:3C:C0:9E:42:0C:7B:D9:03:B9:79:B8:67:0C:2D:D3:4C:2A
Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
Certificate issuer:       /CN=63ac247e6271f064916372b521fdc8649b254c55
Certificate serial:       019C2284F105470D9335FB2C4A24AD101D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
Manifest number:          01EA
Signing time:             Tue 03 Feb 2026 08:01:03 +0000
Manifest this update:     Tue 03 Feb 2026 08:01:03 +0000
Manifest next update:     Wed 04 Feb 2026 08:01:03 +0000
Files and hashes:         1: 1-ExkBfmTQgTua2k7xVXZzRC2pE4.roa (hash: MyJmnfv/mIsbwbws3Sg5v913N+PhwDbGBu5SJ/qpFB0=)
                          2: Y6wkfmJx8GSRY3K1If3IZJslTFU.crl (hash: wFs5Xm1Vufid5sp71x66HrkQNFnWzMtP9O3+pG/Ju7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:22:84:f1:05:47:0d:93:35:fb:2c:4a:24:ad:10:1d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55
        Validity
            Not Before: Feb  3 08:01:03 2026 GMT
            Not After : Feb  4 08:01:03 2026 GMT
        Subject: CN=9ec0313cc09e420c7bd903b979b8670c2dd34c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:61:11:ab:89:f6:8e:4c:f1:ea:7b:38:2c:
                    f6:da:5c:1c:6d:ea:27:9b:75:d1:f8:27:b7:9f:a7:
                    a8:32:32:cd:ce:c5:ef:33:2a:45:68:6f:2f:85:55:
                    21:07:36:7e:0e:36:3e:b0:71:b0:cc:9b:65:6f:50:
                    eb:bd:88:ba:36:62:25:15:14:18:3e:15:ff:85:ce:
                    c5:c2:bb:91:a1:33:53:d0:37:d2:17:a7:44:49:cd:
                    f5:73:30:ac:9c:3f:1e:95:9c:43:77:44:ae:d6:d8:
                    ea:90:4a:70:1c:b1:93:f6:cb:8a:a6:04:74:68:70:
                    31:8b:2c:09:bb:1b:86:23:24:75:35:dc:be:f3:c3:
                    19:b5:80:ee:f4:a8:ce:93:a8:0b:ef:fa:5c:51:7f:
                    06:4f:34:3f:59:58:4e:05:14:cc:89:33:e6:3b:52:
                    44:fc:ad:37:a7:68:22:ae:be:2e:9e:b7:95:76:4b:
                    e7:d6:4a:a3:c0:b3:41:86:c1:0b:24:93:84:19:85:
                    85:e6:e5:62:88:a9:31:52:5f:84:93:e7:82:d8:5b:
                    79:27:20:4a:f0:3e:8f:5c:f6:0f:82:4d:9b:a8:62:
                    2c:80:79:d8:e3:9e:fd:b9:1b:a1:3f:08:71:20:9a:
                    05:3b:f7:04:89:77:f8:2b:a4:0f:e9:93:09:39:00:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C0:31:3C:C0:9E:42:0C:7B:D9:03:B9:79:B8:67:0C:2D:D3:4C:2A
            X509v3 Authority Key Identifier:
                keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:85:fc:a5:99:7e:a3:2e:07:6e:99:1b:fa:06:29:4b:28:
         f7:d5:14:42:9c:64:ec:71:c7:d6:8d:ee:95:0b:f3:75:6e:4a:
         a9:d0:45:8b:54:8a:c4:dc:dd:fc:70:c8:32:7c:a2:4a:2b:61:
         ab:f6:ec:34:62:99:57:19:5e:1e:f6:e1:f6:53:8a:42:ab:c3:
         c4:34:99:04:c4:4a:e1:fe:91:19:dd:b9:ca:a9:e5:be:78:95:
         02:89:df:d1:92:d8:c7:e8:93:69:c0:85:1c:5f:07:10:d0:38:
         b8:74:cc:5c:33:52:ac:a9:54:06:02:f1:41:ee:88:0a:97:51:
         3d:07:5d:ca:56:de:21:bf:09:15:03:a5:1b:41:9e:d1:68:1e:
         43:60:06:76:eb:50:30:06:d7:e1:1b:d2:32:ee:86:91:bd:aa:
         37:b0:29:36:7d:a9:35:3e:0a:25:ee:c2:ed:1e:85:3d:6a:fe:
         87:6d:d1:5e:ce:ff:a9:98:24:f0:dd:0d:9e:27:d9:bf:fb:fc:
         da:7f:3f:97:d6:e1:f4:05:b4:54:41:71:48:58:cb:cf:53:f8:
         d0:83:a5:c5:f9:bb:ca:4c:19:4e:73:dc:78:f6:7b:64:44:06:
         8c:50:d5:dd:84:74:e4:48:a4:07:7e:1d:14:fd:a2:a5:0f:a7:
         0e:f6:06:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwihPEFRw2TNfssSiStEB1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYWMyNDdlNjI3MWYwNjQ5MTYzNzJiNTIxZmRjODY0OWIy
NTRjNTUwHhcNMjYwMjAzMDgwMTAzWhcNMjYwMjA0MDgwMTAzWjAzMTEwLwYDVQQD
Eyg5ZWMwMzEzY2MwOWU0MjBjN2JkOTAzYjk3OWI4NjcwYzJkZDM0YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWphEauJ9o5M8ep7OCz22lwcbeon
m3XR+Ce3n6eoMjLNzsXvMypFaG8vhVUhBzZ+DjY+sHGwzJtlb1DrvYi6NmIlFRQY
PhX/hc7FwruRoTNT0DfSF6dESc31czCsnD8elZxDd0Su1tjqkEpwHLGT9suKpgR0
aHAxiywJuxuGIyR1Ndy+88MZtYDu9KjOk6gL7/pcUX8GTzQ/WVhOBRTMiTPmO1JE
/K03p2girr4unreVdkvn1kqjwLNBhsELJJOEGYWF5uViiKkxUl+Ek+eC2Ft5JyBK
8D6PXPYPgk2bqGIsgHnY4579uRuhPwhxIJoFO/cEiXf4K6QP6ZMJOQCUaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7AMTzAnkIMe9kDuXm4Zwwt00wqMB8GA1UdIwQY
MBaAFGOsJH5icfBkkWNytSH9yGSbJUxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWIt
NmZiNjdkOWI4NjA5LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zYWQ1ZTYtNDQwYi00NTNjLWEyOWItNmZiNjdkOWI4NjA5
LzEvWTZ3a2ZtSng4R1NSWTNLMUlmM0laSnNsVEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOv6F/KWZ
fqMuB26ZG/oGKUso99UUQpxk7HHH1o3ulQvzdW5KqdBFi1SKxNzd/HDIMnyiSith
q/bsNGKZVxleHvbh9lOKQqvDxDSZBMRK4f6RGd25yqnlvniVAonf0ZLYx+iTacCF
HF8HENA4uHTMXDNSrKlUBgLxQe6ICpdRPQddylbeIb8JFQOlG0Ge0WgeQ2AGdutQ
MAbX4RvSMu6Gkb2qN7ApNn2pNT4KJe7C7R6FPWr+h23RXs7/qZgk8N0NnifZv/v8
2n8/l9bh9AW0VEFxSFjLz1P40IOlxfm7ykwZTnPcePZ7ZEQGjFDV3YR05EikB34d
FP2ipQ+nDvYG5A==
-----END CERTIFICATE-----
Generated at Tue Feb 3 14:41:30 2026 by rpki-client