This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File:                     YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier:          v2dBexIi0lxXodlgaTtT96x1Lyob9NK3z1EO3OJe1S4=
Subject key identifier:   AF:EE:8F:F1:AC:04:2E:18:22:E9:00:71:F9:55:8E:13:DC:B6:34:FF
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer:       /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial:       019B80BA813DD99B454AD0911E1161EBD916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number:          13A0
Signing time:             Fri 02 Jan 2026 22:01:04 +0000
Manifest this update:     Fri 02 Jan 2026 22:01:04 +0000
Manifest next update:     Sat 03 Jan 2026 22:01:04 +0000
Files and hashes:         1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
                          2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
                          3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
                          4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: Gy3sUmzVtpqb6kEY0+WXItnkIipkWTBYdeV6c5gQ6/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:80:ba:81:3d:d9:9b:45:4a:d0:91:1e:11:61:eb:d9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
        Validity
            Not Before: Jan  2 22:01:04 2026 GMT
            Not After : Jan  3 22:01:04 2026 GMT
        Subject: CN=afee8ff1ac042e1822e90071f9558e13dcb634ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:bc:d4:43:3a:f6:05:09:37:b3:31:82:cc:
                    94:d3:60:ba:e1:41:1e:0c:d5:35:c9:2c:7a:73:34:
                    98:12:67:64:99:fc:1e:89:c2:18:2d:af:4a:ce:3e:
                    51:cf:c7:da:e8:5c:e6:01:26:6c:67:2a:82:27:1e:
                    c3:bd:80:20:6c:ad:2f:5e:2c:fe:86:cb:18:d4:eb:
                    5d:a9:1e:e9:08:b1:5b:4d:c1:96:30:41:77:4d:1f:
                    17:13:ea:b6:3b:9f:28:c9:23:ee:58:b6:65:e5:fa:
                    3b:9d:b8:3b:7a:8a:f5:93:d6:3b:09:18:b6:93:00:
                    48:f7:7c:83:d2:1e:16:05:ec:00:6d:47:f5:03:96:
                    45:8b:78:8b:ea:26:79:ec:cc:a8:f4:1e:7b:0d:36:
                    71:c9:e8:0f:61:5d:4b:72:a4:2f:b4:d7:71:e4:0d:
                    3d:b1:dd:46:94:c5:46:81:2f:ad:ad:8a:4b:08:2b:
                    f4:b4:34:b9:75:f5:5c:21:c0:b1:72:51:ac:f1:51:
                    35:43:53:00:ac:05:a2:6b:fa:24:6b:3c:00:8d:48:
                    6a:f6:29:31:d1:74:4c:d6:31:35:26:e0:f0:08:66:
                    bc:1f:96:44:96:5b:98:8e:98:99:8a:f3:39:2c:20:
                    d3:5d:94:9a:01:f3:5f:22:67:b8:15:de:f4:e9:9c:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EE:8F:F1:AC:04:2E:18:22:E9:00:71:F9:55:8E:13:DC:B6:34:FF
            X509v3 Authority Key Identifier:
                keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:28:fc:a1:dd:84:62:07:cd:6a:17:98:d8:75:32:a3:cf:28:
         85:f1:c8:6f:72:81:86:f4:72:8d:a0:dd:7a:c8:90:e8:f2:41:
         5c:c2:e9:47:2f:fe:96:c0:c6:40:f6:82:50:cf:47:2e:e3:fd:
         31:92:89:f7:3e:e1:5a:94:f1:ea:07:13:72:ff:2c:de:e1:30:
         47:af:80:7b:b2:a8:fe:b7:cd:c0:92:63:07:d0:cd:4d:13:49:
         00:b0:46:88:da:ab:82:c5:97:03:3d:8d:52:7b:8f:7b:c8:b0:
         4b:d2:17:18:2e:ab:ac:dd:22:df:8d:0a:cc:6d:4b:90:bb:4a:
         5a:e0:64:61:59:2c:5e:3c:94:4a:14:ef:47:e8:69:5d:89:e9:
         9d:1f:5e:86:05:ae:d4:60:0f:c9:a3:8d:33:04:f7:b0:23:27:
         7b:59:af:01:f6:ca:d3:bb:38:09:69:fd:e3:c9:fd:13:d7:9c:
         91:12:a5:02:d7:b0:44:bb:2c:fc:71:dd:b3:cb:f8:4b:17:f1:
         b6:dc:8e:b0:59:c1:3a:d6:ee:89:0f:45:3c:f6:05:7b:a7:bc:
         58:f8:b1:45:7f:a5:42:a2:26:28:ad:ec:00:f5:dd:a2:a0:a8:
         6f:87:a4:81:5a:4f:ff:14:4d:1c:a1:eb:3e:b2:f5:d1:1b:89:
         bc:80:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:52:27 2026 by rpki-client