This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File:                     ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier:          +uMpl7nyWB0pXtZy0xEbFYxOiH2JnL8TEgdmOYlzPts=
Subject key identifier:   46:10:14:DB:51:F6:04:44:36:71:61:C9:58:CE:90:4F:39:96:0E:56
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer:       /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial:       019B951CC4D103BD14526B37758F18B41BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number:          17B8
Signing time:             Tue 06 Jan 2026 21:00:49 +0000
Manifest this update:     Tue 06 Jan 2026 21:00:49 +0000
Manifest next update:     Wed 07 Jan 2026 21:00:49 +0000
Files and hashes:         1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
                          2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
                          3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: rYvJ7xYhx/WfGr1Lfim8u4MB7DFERkKxHrDmrULje+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Jan 2026 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:95:1c:c4:d1:03:bd:14:52:6b:37:75:8f:18:b4:1b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
        Validity
            Not Before: Jan  6 21:00:49 2026 GMT
            Not After : Jan  7 21:00:49 2026 GMT
        Subject: CN=461014db51f60444367161c958ce904f39960e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:e3:99:30:b5:fa:86:f0:67:b5:e9:94:09:
                    65:3a:22:26:83:53:56:8f:ba:0a:70:2b:d2:70:f0:
                    a4:3f:24:9d:1a:63:80:13:82:fe:d1:f6:73:b7:02:
                    4f:cf:97:ca:85:dc:44:31:3d:b7:56:cc:7b:3d:58:
                    d1:91:16:11:19:3d:28:1c:24:6a:12:92:04:6d:83:
                    4e:ef:dc:c8:9f:2e:e9:b7:0f:01:6f:ab:1b:03:37:
                    3f:27:f2:17:f3:0c:f2:52:83:c8:60:bf:d8:c9:c9:
                    04:b3:73:49:9c:35:7c:44:ce:20:ff:1c:35:83:53:
                    c0:e1:05:72:2a:90:38:f3:60:6d:5f:5d:a4:f9:08:
                    79:02:75:9f:4d:cc:e1:48:da:01:74:71:eb:be:b0:
                    5d:18:82:e1:85:7f:ed:b6:59:7f:d5:14:6f:e7:21:
                    a3:e6:ca:80:db:bf:07:34:53:72:15:43:4f:72:7e:
                    15:6c:b9:70:49:e8:f7:3f:cd:2f:be:b0:58:b7:45:
                    03:0b:c0:47:e2:8b:a6:60:96:49:5b:61:30:06:38:
                    93:22:bb:97:57:d9:65:cf:28:7f:29:04:33:93:9a:
                    aa:4e:e9:12:42:d1:bc:e6:52:04:04:bf:8e:59:5c:
                    9c:2d:79:32:a7:fa:85:6c:c4:e3:91:95:32:23:bf:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:10:14:DB:51:F6:04:44:36:71:61:C9:58:CE:90:4F:39:96:0E:56
            X509v3 Authority Key Identifier:
                keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ec:b9:8b:a0:41:60:61:ae:f9:7a:8e:b7:a2:f5:be:3c:05:
         6a:58:f1:12:c9:4b:a5:8f:6f:e4:c9:54:a5:3b:f3:bc:16:53:
         09:20:9e:08:89:2d:b7:cf:e8:35:41:4c:82:44:c7:36:2a:85:
         f7:ae:8a:cc:cb:a7:1a:24:74:90:ee:ab:5c:6b:c5:09:3e:9c:
         11:97:23:3b:87:de:88:f2:99:52:77:ce:19:fc:ff:a2:de:19:
         5e:34:d9:99:1d:48:8f:78:a7:29:2a:d3:d0:76:fc:97:88:5a:
         1a:1a:f3:ef:f9:99:46:91:20:e6:66:df:81:ba:bf:61:45:e3:
         e6:22:bb:6b:ce:2a:d0:04:ab:39:0d:77:b2:bc:41:34:6b:a8:
         95:0b:df:de:5d:0b:b5:d5:42:f5:1e:ff:6f:c8:4e:be:9f:f8:
         4d:60:b7:7c:04:ae:49:c1:04:13:05:14:7e:66:9e:09:2e:b7:
         53:97:df:f1:13:74:28:32:96:a8:e5:ee:58:f2:69:23:bb:7e:
         80:c8:e7:c8:1c:5c:d1:eb:3e:bb:35:67:88:44:99:49:27:9e:
         e6:93:77:04:a5:c7:4c:64:19:1d:e8:f0:bb:a7:37:cd:e9:75:
         bc:b2:11:b8:db:99:e2:32:ad:6b:57:51:64:01:31:52:a0:e0:
         6c:db:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 06:37:47 2026 by rpki-client