This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File:                     YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier:          dJDQ2nadyi3NHtxL0fJpGaQ1A3CPC3QwpORkhIjH3uU=
Subject key identifier:   45:DB:1C:6F:3D:22:0D:A0:E7:40:5C:EC:69:D7:9E:5B:C7:7F:C0:13
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer:       /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial:       019BE0006ED635BA0E47E94285A2B667DDD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number:          17E2
Signing time:             Wed 21 Jan 2026 10:01:23 +0000
Manifest this update:     Wed 21 Jan 2026 10:01:23 +0000
Manifest next update:     Thu 22 Jan 2026 10:01:23 +0000
Files and hashes:         1: VHsD8aL1vap6NAd4VLOWJjjdFBw.roa (hash: Agb4+5pAbO8W2wpY0iP++EYhU8rZOrnE7m9i9w0XK+o=)
                          2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: t+mVbLfqNe5re9K4V4dzujv+TcBntgFh/olaV3ASLC4=)
                          3: pz20R0jrFVQ1yZBzm3bRqNP5cw0.roa (hash: IH7FpqZHwFM0JUZGv3kglgPf6fO/pFT+0CvShFXfFHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:00:6e:d6:35:ba:0e:47:e9:42:85:a2:b6:67:dd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
        Validity
            Not Before: Jan 21 10:01:23 2026 GMT
            Not After : Jan 22 10:01:23 2026 GMT
        Subject: CN=45db1c6f3d220da0e7405cec69d79e5bc77fc013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:35:e5:5f:b1:07:5f:40:4b:8b:17:2d:47:
                    1d:ba:db:3c:5f:cc:71:c7:6d:2e:9f:2b:bf:35:64:
                    80:dc:6a:c3:7f:2c:0c:91:28:cf:8c:90:24:22:43:
                    0d:98:7a:9f:05:e8:47:db:5b:a6:1e:e8:22:33:f7:
                    76:29:3a:f4:0e:71:0e:68:43:84:18:9c:0f:4b:0a:
                    20:ba:f7:93:f0:5d:87:e8:5e:77:3b:fd:96:f4:e5:
                    ab:45:1a:fc:8c:1e:eb:a6:b4:51:91:b6:8e:3c:6e:
                    f6:df:09:a1:f0:a6:9e:7f:3b:6f:70:4a:78:11:e1:
                    ff:9e:2e:be:9e:51:bd:83:46:1d:4c:cb:59:61:f3:
                    f3:04:7b:fe:ff:e0:32:b8:d5:d9:a6:a9:86:d4:05:
                    58:c7:3b:dc:f1:30:29:75:47:bd:8d:35:cb:66:13:
                    60:2e:33:4d:58:59:6c:f7:db:cd:5e:60:78:bd:54:
                    21:37:48:7c:60:e9:69:c3:15:ce:a5:1e:2b:a5:c8:
                    59:52:79:07:f4:1e:97:79:72:42:68:4b:4b:3d:88:
                    9e:75:e8:cf:20:af:c9:2e:05:9c:64:d6:cb:f7:29:
                    7e:2d:0f:9c:40:46:d2:e6:fa:d4:27:65:3c:df:6d:
                    be:e4:32:3c:52:ca:df:64:78:11:4a:44:af:7c:c8:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:1C:6F:3D:22:0D:A0:E7:40:5C:EC:69:D7:9E:5B:C7:7F:C0:13
            X509v3 Authority Key Identifier:
                keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:53:20:67:1d:9a:60:b0:7b:93:4d:3a:93:3a:6a:91:48:31:
         87:8b:28:79:cf:7c:a3:c3:34:f2:65:85:e1:14:9e:5f:8d:fd:
         26:77:1c:70:b7:9b:9c:b1:75:58:ab:c2:f3:69:74:1c:2b:3c:
         25:c2:af:27:5b:15:81:7d:75:c3:68:bb:ac:a7:3b:35:19:a0:
         be:7d:15:0c:81:0a:68:e9:a9:04:e2:f9:8e:14:11:d9:0f:aa:
         87:2e:16:14:4d:2e:bb:40:fd:3a:97:67:2a:af:9c:f3:60:d2:
         f7:d4:0d:a2:e2:58:d0:33:be:72:a9:14:cb:4c:fb:a5:c5:ad:
         87:fd:b8:24:95:e9:f2:d3:06:99:b1:28:db:dd:3c:92:77:84:
         46:87:57:84:a1:c8:51:3e:85:4b:30:98:d8:d7:2b:c6:5b:8f:
         b2:60:b8:87:fe:2b:03:15:b6:e5:43:ca:95:e7:d5:71:c4:e1:
         4a:07:1f:0a:2f:2a:44:7e:74:87:b0:7b:9b:08:42:96:e3:a2:
         1b:af:55:d2:55:25:e8:b7:37:51:a1:e4:af:9f:c1:83:dc:d7:
         a3:51:01:d9:f0:58:16:99:7b:bd:fa:81:23:d6:0e:ab:82:b3:
         a1:af:84:d7:e0:bc:37:9a:f4:b4:12:1a:4a:2f:46:d9:18:0e:
         d7:6d:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:48:43 2026 by rpki-client