This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File:                     ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier:          bR08xM5Oe+VEsbzn7mrahM29knKXwl6JPQLIJ7jAzGA=
Subject key identifier:   5D:4B:C6:C5:2B:D5:CD:45:4F:D4:E4:00:1F:AF:77:B6:25:20:7B:E0
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer:       /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial:       019B80BA8A5C8BCE0508B9402FBF0CBE8984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number:          06CD
Signing time:             Fri 02 Jan 2026 22:01:07 +0000
Manifest this update:     Fri 02 Jan 2026 22:01:07 +0000
Manifest next update:     Sat 03 Jan 2026 22:01:07 +0000
Files and hashes:         1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
                          2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
                          3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: vquxHBqKxiTmLDvDmVSjWpURCTEfFcGGyQp7OTBqlco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:80:ba:8a:5c:8b:ce:05:08:b9:40:2f:bf:0c:be:89:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
        Validity
            Not Before: Jan  2 22:01:07 2026 GMT
            Not After : Jan  3 22:01:07 2026 GMT
        Subject: CN=5d4bc6c52bd5cd454fd4e4001faf77b625207be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a4:f4:66:a4:be:a1:02:f3:43:4d:47:1d:b9:
                    63:19:54:55:2d:a7:ef:d7:4b:47:80:94:3f:0a:ff:
                    e5:e6:82:94:ff:f4:ad:af:73:2b:e9:02:ff:03:eb:
                    66:fd:b6:72:40:35:e0:04:75:44:5e:e5:30:bd:63:
                    14:a1:4f:3d:98:4f:5c:17:cf:aa:fd:bb:92:0b:89:
                    a6:7f:6a:32:fd:2a:7b:4f:17:8d:3c:d8:aa:9b:a8:
                    39:a2:dc:ca:a2:d6:7e:f0:0c:dc:51:4a:8f:97:c6:
                    d4:18:0b:ac:03:e7:04:65:d6:fd:9b:a0:bc:63:6c:
                    42:8b:95:0d:14:79:41:87:63:ea:c4:a9:ab:ac:d1:
                    0a:0b:2a:50:0f:15:0e:95:42:d7:15:f1:2d:39:33:
                    f8:fe:19:53:47:ae:0a:20:60:ed:67:8a:34:39:bb:
                    a0:ea:24:13:d9:d9:5c:39:53:fa:f0:9c:de:8f:d4:
                    cf:20:7a:e8:03:fb:79:b0:4c:d5:dd:81:bd:e4:9c:
                    9d:88:5f:d8:b5:52:24:38:5f:ae:9e:06:51:6b:87:
                    6e:1e:e2:a9:64:98:e5:b3:8c:79:be:26:a0:45:d6:
                    fa:f6:90:bc:e1:72:27:34:03:eb:98:e0:a6:af:33:
                    82:5c:64:4c:f8:ae:d2:58:76:b3:73:30:72:12:5e:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:C6:C5:2B:D5:CD:45:4F:D4:E4:00:1F:AF:77:B6:25:20:7B:E0
            X509v3 Authority Key Identifier:
                keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:2f:1c:56:c7:c9:81:ca:b5:a7:23:99:c1:17:1e:0e:27:
         0f:59:5c:1d:99:7b:d7:bc:b3:07:ed:62:9c:5c:8e:d3:0e:3c:
         4b:13:0a:ef:07:b0:0a:87:a9:3b:a1:db:6d:26:bd:3d:23:e8:
         b7:19:09:cf:36:e5:20:7a:ce:a6:4d:8f:53:0f:d7:e9:15:88:
         a4:71:5f:cb:1f:5b:a1:3d:1f:0f:5a:1f:bd:03:1a:ee:09:78:
         1b:26:f8:0e:1f:86:d3:88:d8:ef:02:f4:31:46:9a:60:4e:87:
         98:70:5c:a3:81:be:36:d5:59:fb:e0:9e:78:98:77:0e:d7:ff:
         73:f6:96:5f:c3:c4:36:14:6c:d2:1e:bf:f6:0c:04:a8:66:8d:
         9e:b0:da:a1:8a:e5:2c:b6:92:74:39:9b:2b:39:c5:4c:ce:58:
         b5:f8:12:35:74:9f:f6:23:7d:aa:f3:4d:c7:8a:0d:2d:6d:51:
         d7:22:87:42:53:75:38:55:40:60:71:72:c1:00:db:18:19:6e:
         04:b7:20:c7:b0:3d:76:5e:52:30:a6:0a:f4:52:aa:c9:8d:b7:
         ed:9d:5e:ab:47:85:e4:3e:c7:17:01:01:64:48:2d:7f:74:b3:
         c8:85:d7:47:af:b7:0f:2d:21:4b:e3:42:1f:18:54:87:71:99:
         2a:16:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:52:28 2026 by rpki-client