This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          6T8ju9wtab3VJve1oDUilm4MAhb5UBZWgIm4mzZsePU=
Subject key identifier:   F3:F1:D9:C3:FF:73:16:EA:B3:A8:52:F3:0B:D5:45:F4:F5:A9:09:AA
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       019B9FD85DC98FA4B6490153BC5D6795BB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          0FEC
Signing time:             Thu 08 Jan 2026 23:01:55 +0000
Manifest this update:     Thu 08 Jan 2026 23:01:55 +0000
Manifest next update:     Fri 09 Jan 2026 23:01:55 +0000
Files and hashes:         1: EOjWQSQb7ZQ10u-ZgMDwYKKu1o4.roa (hash: hrdH4gBWBAuOWZkBtg5Qonx+V+TKKgAG0J50XIArrgE=)
                          2: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
                          3: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: SY52lPQfSS2A5BuVUK1egHy+xWgCLge2W/nO8owlBGM=)
                          4: arRXEDQu4ezQScl8N1kwDYWEUTA.roa (hash: ubPgNFBnWZXISvamvl80AgMPXYqGnpjauqbO6JMCTVc=)
                          5: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
                          6: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 23:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:d8:5d:c9:8f:a4:b6:49:01:53:bc:5d:67:95:bb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jan  8 23:01:55 2026 GMT
            Not After : Jan  9 23:01:55 2026 GMT
        Subject: CN=f3f1d9c3ff7316eab3a852f30bd545f4f5a909aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:38:d1:75:d7:f8:93:99:56:6a:c4:1f:cc:
                    ff:b5:af:5d:c2:29:af:ed:88:da:4b:10:37:98:57:
                    95:e3:63:a2:95:71:69:41:35:0f:69:ba:04:5f:66:
                    f9:2f:6e:6e:e2:2c:ee:22:6b:fc:14:f1:b4:0d:e1:
                    04:46:a5:04:28:c2:71:c2:91:bb:d1:65:f3:f5:0b:
                    bd:68:a1:a0:cb:76:b9:fe:07:a8:1b:1a:17:61:1c:
                    76:b7:5f:23:f2:bd:f7:58:34:ce:78:5f:41:60:0d:
                    28:7a:8c:83:28:ef:3b:88:69:35:61:69:77:59:a6:
                    83:f7:7b:88:52:e7:c3:a6:09:2b:ee:2d:09:1d:66:
                    0a:d8:f7:57:3f:b4:42:37:ea:40:1c:27:0e:c1:00:
                    84:d0:75:c4:8c:69:5c:28:f0:fd:74:1a:75:3d:9c:
                    fb:01:c6:08:39:c3:cc:18:c0:ec:c4:e1:dc:18:38:
                    53:b3:cc:8e:42:97:61:df:be:1c:1f:4f:6d:e8:70:
                    9f:d9:3d:3d:bc:73:93:ca:92:a4:53:24:63:2f:fb:
                    7c:2f:f8:0f:d5:13:97:61:9c:fe:23:b9:6d:e7:13:
                    21:67:74:97:86:3b:f9:bc:43:bc:be:f1:a6:fe:bd:
                    f3:c0:0a:42:5d:02:0e:a9:90:81:87:30:ed:38:75:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:D9:C3:FF:73:16:EA:B3:A8:52:F3:0B:D5:45:F4:F5:A9:09:AA
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:8c:f7:b4:36:df:a4:d0:5e:4e:58:bd:b6:26:3e:f2:b2:
         e7:77:81:8a:41:e5:fe:18:46:c9:c0:8f:96:b4:f7:df:15:36:
         ed:9b:83:1b:e2:79:3e:9e:7b:a9:96:83:05:2d:8e:a8:eb:0c:
         bd:34:f6:c9:4c:6f:88:66:c3:f0:0c:b7:6e:f3:55:1c:93:30:
         c0:22:ed:e4:89:c2:66:d1:5e:44:a9:ce:ad:76:1a:4d:e3:92:
         eb:dc:e2:a7:b6:00:c9:3d:19:af:d4:cf:9e:05:c6:57:21:d6:
         af:9f:b7:9e:4e:e0:35:d2:ab:1e:e1:83:41:3d:a2:ad:cf:ed:
         eb:b3:ff:32:6a:28:c3:b7:39:5c:d1:cc:91:46:57:f8:66:f7:
         1c:2c:6f:94:2a:7a:23:77:c7:df:57:de:7b:0e:19:73:0f:ca:
         c7:90:89:a6:81:0c:8c:c9:2c:d0:d1:e4:f5:a9:3d:e9:5b:6d:
         3d:fc:c2:d0:42:71:b4:63:09:a7:4b:a5:e7:4e:19:89:c8:6a:
         18:5b:c6:d8:b6:34:89:9b:8d:ea:8b:13:a3:77:40:b5:b1:eb:
         fd:d9:60:f2:32:04:36:b8:5c:0d:ca:56:8b:98:9d:db:fb:57:
         54:0e:00:7f:63:8c:a4:9a:62:32:d2:b0:95:13:a4:b5:70:a9:
         f8:ad:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 09:16:17 2026 by rpki-client