This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          sFeLNkIR5RBcWhRQxhu8hb7kfaupu/pFQQn3qOOtITo=
Subject key identifier:   00:06:15:C3:A4:C3:00:4C:C4:A7:22:D4:C4:77:50:F4:CC:C6:F8:E0
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       019BFA2E699AC863844A49103806F74A1AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          15F5
Signing time:             Mon 26 Jan 2026 12:01:44 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:44 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:44 +0000
Files and hashes:         1: 23wcH8L7dVH0Qu_LmR1lf4KTI60.roa (hash: ZASstFoClWzggMDa2W+x7rdpIoMG853uqXTJ54y76xQ=)
                          2: AXFjpDXCpejxYVRyegcQY_lgsRM.roa (hash: Sa96eMd8qKDmCn/rVwKHcrgoDa7IBUJYs80RqrdQZIQ=)
                          3: Izyp9PlbDb7SEOFmf79W4IySogU.roa (hash: Gvc/OfVfbB6iQcaQfhbaTBFzazD+ndUcgMplwft/fIU=)
                          4: hxGvu-IScN-_hKbmojPRTU_qNno.roa (hash: ahzGwiWSxhQfKuYeEu+Wyoh/XK6bY7UKu+vDiNdhn8A=)
                          5: xpX8qu7gtSlTMLKM8RNsSENreoM.roa (hash: 6bwqH3IsERgfQGTI2ktBpw6N1RbIGeWD0+vqqsDzaLM=)
                          6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: lIK0hUDEtm9nV00U4dGeECHJGNNim3vsJVWi8oDm07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:69:9a:c8:63:84:4a:49:10:38:06:f7:4a:1a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Jan 26 12:01:44 2026 GMT
            Not After : Jan 27 12:01:44 2026 GMT
        Subject: CN=000615c3a4c3004cc4a722d4c47750f4ccc6f8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:45:c3:2d:d2:51:65:42:c6:b7:25:6a:50:
                    11:39:91:e5:87:e4:12:c0:84:6e:34:ce:84:ac:99:
                    8e:18:58:c0:71:39:bb:0b:a4:98:d1:2f:1f:ef:5b:
                    20:7b:9c:98:5f:2e:cc:ac:7e:7c:53:3a:8b:73:f5:
                    d1:74:e2:91:56:f3:b3:21:44:b7:f0:50:e5:75:4d:
                    34:15:6c:47:2a:24:1f:f4:59:e1:ef:45:49:41:73:
                    d5:08:32:ea:2c:e8:dd:b7:fe:ca:7f:9d:5a:a6:e9:
                    e7:5d:a4:df:e5:71:6c:19:17:7b:0f:ad:6b:29:fe:
                    f1:ba:84:9d:12:1b:93:ce:8d:7f:c9:f3:14:fe:e0:
                    77:5b:7c:69:f9:79:cb:22:a0:88:02:af:c8:75:00:
                    5d:2a:17:5f:6b:87:47:85:62:4b:ba:78:d9:bd:9f:
                    ca:b2:e1:90:25:3f:7a:c3:78:8a:a3:d9:26:c3:f9:
                    d1:4f:f6:a0:f9:c6:38:9f:13:9d:40:10:55:9a:d8:
                    a7:22:eb:91:0e:45:e6:79:50:4d:ec:ab:1a:c5:31:
                    c5:8e:10:08:03:05:df:e7:b7:5d:32:10:88:6d:0a:
                    61:3e:b9:0f:13:66:b6:95:83:b4:5f:fb:1a:47:7d:
                    fc:03:8e:e1:9f:b9:87:cf:08:77:07:b6:68:70:2d:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:15:C3:A4:C3:00:4C:C4:A7:22:D4:C4:77:50:F4:CC:C6:F8:E0
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:b1:71:72:31:90:80:02:d0:e5:f0:6f:d8:71:de:9d:52:
         d1:ef:f5:73:3c:e4:7a:bb:d5:0b:38:67:a5:81:36:1e:db:2e:
         90:2d:ff:41:5b:fd:ab:22:2a:ed:f1:cb:12:bf:26:f5:e9:bd:
         b0:32:14:4d:6e:07:9f:50:a0:4c:bc:64:2e:02:3b:db:0d:74:
         36:5d:d6:0a:24:76:65:3c:5f:db:3f:f3:69:ae:28:67:6f:e6:
         00:ab:e6:f5:e2:a4:63:b8:fc:ac:09:aa:67:ee:dc:8c:c2:01:
         df:55:56:3c:97:5b:a4:3c:c5:35:42:d4:14:0a:0a:8f:7d:58:
         14:83:d8:3c:58:34:f1:84:4a:73:b1:6d:ab:04:eb:6f:ee:c1:
         45:37:90:53:85:f7:4e:64:87:dd:8d:2f:a4:e3:14:a2:f7:aa:
         f0:84:b5:a8:54:3a:f0:10:5a:af:8a:6b:8d:01:67:eb:d5:b5:
         21:4c:a9:a3:cf:42:a1:d3:90:2e:fe:e0:a5:38:f7:20:2a:b9:
         43:e2:aa:a8:ab:dd:23:f8:5e:0c:73:00:19:a4:b8:73:1a:82:
         be:39:28:ef:47:8c:de:a0:43:47:21:4e:16:e8:39:c3:aa:39:
         39:2b:32:47:83:e0:b7:f0:32:8e:2b:00:e8:bf:f1:34:f9:6c:
         bc:10:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:26:49 2026 by rpki-client