This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          fCFYlx23Xtucsle6RX8fbaFm4GD0FrtSGWXqhh8UJmg=
Subject key identifier:   8A:4D:69:72:4D:4A:AF:CC:FC:60:77:0B:73:A5:92:B2:C3:53:AC:37
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019C070D72C2E242FD8D49AD6D15C550AF2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          07DA
Signing time:             Thu 29 Jan 2026 00:00:47 +0000
Manifest this update:     Thu 29 Jan 2026 00:00:47 +0000
Manifest next update:     Fri 30 Jan 2026 00:00:47 +0000
Files and hashes:         1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
                          2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
                          3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: CfDVCZoWtytJDKfAhKKzz6Jufc/ESnPHjinp040TMbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:07:0d:72:c2:e2:42:fd:8d:49:ad:6d:15:c5:50:af:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Jan 29 00:00:47 2026 GMT
            Not After : Jan 30 00:00:47 2026 GMT
        Subject: CN=8a4d69724d4aafccfc60770b73a592b2c353ac37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:ce:2b:f0:56:88:7a:e7:b0:97:b1:4d:45:
                    7b:56:99:bc:07:af:87:e4:88:f5:55:7e:06:2a:4c:
                    f3:c7:df:21:52:eb:6e:ac:a5:d8:c6:e8:c5:06:29:
                    d7:be:1d:98:60:24:3b:58:a2:06:4f:42:16:21:7e:
                    16:1b:bd:e9:8e:48:20:52:80:a9:77:e4:bc:54:f9:
                    aa:74:7a:ff:46:9e:72:93:da:0d:49:9a:76:4c:a9:
                    19:ca:7c:6a:c5:e6:f5:41:c1:df:ff:b3:04:4f:f2:
                    13:a1:22:f4:a2:77:13:ad:55:61:10:39:4e:a7:6a:
                    58:87:72:eb:35:32:ef:8b:fe:5c:63:4a:0b:8c:56:
                    f2:6b:e7:8e:bd:cd:7f:ca:7b:cd:55:99:e9:d7:47:
                    01:74:9f:26:47:6d:61:ab:15:37:8a:4d:56:a1:48:
                    ec:98:d4:44:c7:ed:1d:0e:2c:54:5e:dd:34:dd:fa:
                    c5:a1:0c:20:e4:51:74:7c:35:b8:ce:ef:0f:2b:82:
                    a5:8d:d5:de:f8:be:52:ca:42:a4:e5:03:b8:16:2c:
                    52:98:3d:19:bb:28:90:cf:2b:2a:cc:82:e7:6d:ec:
                    e7:7f:5c:9b:ed:59:eb:34:e5:56:a9:94:6e:3c:43:
                    36:16:91:7e:1e:a9:b7:81:d1:9c:68:96:a8:2b:d3:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4D:69:72:4D:4A:AF:CC:FC:60:77:0B:73:A5:92:B2:C3:53:AC:37
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e4:2f:bf:d2:be:00:43:18:74:55:de:18:fe:33:a6:51:0b:
         68:08:92:ae:53:0e:77:7d:23:d4:06:e7:7a:19:3f:d8:1f:71:
         7e:a4:75:a6:4f:61:88:7d:9c:42:82:a1:96:5f:0f:ea:72:7e:
         d8:e2:ba:60:ca:eb:9d:f1:0c:69:a8:6d:63:9c:d8:cd:09:58:
         4e:a1:f0:6c:ae:78:70:69:d9:be:46:d2:11:d7:be:1b:6f:cf:
         a9:ed:5b:e3:8d:99:bd:97:fe:97:4e:3f:58:be:31:2a:f4:1e:
         24:e5:54:47:6d:b7:28:6e:f4:24:c8:d3:23:af:2f:ca:94:a4:
         04:7e:58:4a:28:89:f8:4e:c0:ba:81:e8:e3:10:2f:70:55:28:
         c4:fa:5e:fb:a3:3f:95:a1:e1:ff:b2:15:e3:ca:d3:1c:e4:1b:
         54:ba:b6:4e:30:15:30:a5:09:3c:ae:fc:75:c0:d2:9d:a7:26:
         df:f5:d8:5c:d9:c4:48:c8:eb:d8:20:c8:4f:b7:e5:02:c0:0b:
         bf:ed:bc:4e:93:9d:89:36:0f:e5:63:ad:45:37:a0:03:31:59:
         a2:94:93:9e:98:b5:d9:3b:5f:d0:d8:76:e2:45:b0:c1:a4:6a:
         84:4e:b7:02:bb:ab:01:09:ba:55:7b:cd:60:b0:8a:3b:03:2a:
         8b:ea:82:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwHDXLC4kL9jUmtbRXFUK8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjA1MWU4ZTY4MTQ5YjY2MDQ0ZTdkZTRhZTU5ZDczNmU1
MzdhYWEwHhcNMjYwMTI5MDAwMDQ3WhcNMjYwMTMwMDAwMDQ3WjAzMTEwLwYDVQQD
Eyg4YTRkNjk3MjRkNGFhZmNjZmM2MDc3MGI3M2E1OTJiMmMzNTNhYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZzOK/BWiHrnsJexTUV7Vpm8B6+H
5Ij1VX4GKkzzx98hUuturKXYxujFBinXvh2YYCQ7WKIGT0IWIX4WG73pjkggUoCp
d+S8VPmqdHr/Rp5yk9oNSZp2TKkZynxqxeb1QcHf/7MET/IToSL0oncTrVVhEDlO
p2pYh3LrNTLvi/5cY0oLjFbya+eOvc1/ynvNVZnp10cBdJ8mR21hqxU3ik1WoUjs
mNREx+0dDixUXt003frFoQwg5FF0fDW4zu8PK4KljdXe+L5SykKk5QO4FixSmD0Z
uyiQzysqzILnbeznf1yb7VnrNOVWqZRuPEM2FpF+Hqm3gdGcaJaoK9NDuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpNaXJNSq/M/GB3C3OlkrLDU6w3MB8GA1UdIwQY
MBaAFMmwUejmgUm2YETn3krlnXNuU3qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDkt
YmI0ZDI0MmVkMmNkLzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDktYmI0ZDI0MmVkMmNk
LzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuQvv9K+
AEMYdFXeGP4zplELaAiSrlMOd30j1Abnehk/2B9xfqR1pk9hiH2cQoKhll8P6nJ+
2OK6YMrrnfEMaahtY5zYzQlYTqHwbK54cGnZvkbSEde+G2/Pqe1b442ZvZf+l04/
WL4xKvQeJOVUR223KG70JMjTI68vypSkBH5YSiiJ+E7AuoHo4xAvcFUoxPpe+6M/
laHh/7IV48rTHOQbVLq2TjAVMKUJPK78dcDSnacm3/XYXNnESMjr2CDIT7flAsAL
v+28TpOdiTYP5WOtRTegAzFZopSTnpi12Ttf0Nh24kWwwaRqhE63ArurAQm6VXvN
YLCKOwMqi+qCxg==
-----END CERTIFICATE-----
Generated at Thu Jan 29 07:39:51 2026 by rpki-client