This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File:                     YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier:          UmUSDVGZABuhFVvmSKS9iUEWJoLjo44FGwmuBqEGMhM=
Subject key identifier:   A3:EF:C2:A3:28:F1:FC:D6:C5:50:10:EA:DE:A3:A5:88:56:6E:94:E1
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       019BFA2E6B11259C034DCC8EAAE9E433FA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number:          06F4
Signing time:             Mon 26 Jan 2026 12:01:44 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:44 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:44 +0000
Files and hashes:         1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
                          2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
                          3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: f4qmMMTvQ20APIpQBi9RjkGQM8k0j3dh02MAiwKTQA8=)
                          4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:6b:11:25:9c:03:4d:cc:8e:aa:e9:e4:33:fa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Jan 26 12:01:44 2026 GMT
            Not After : Jan 27 12:01:44 2026 GMT
        Subject: CN=a3efc2a328f1fcd6c55010eadea3a588566e94e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:4f:97:35:1d:a3:16:c4:66:3a:4e:76:65:
                    ec:0f:94:9c:c0:49:b6:e3:eb:bd:81:59:e2:a4:50:
                    15:fe:ec:c5:37:8e:50:c2:28:6b:ca:ea:35:f8:c2:
                    0b:76:55:ee:c2:11:af:e6:12:1a:5d:d2:c4:84:ad:
                    f2:06:a3:d3:e3:26:c5:6c:03:e9:10:5e:a0:f9:a3:
                    a2:a6:90:25:f1:04:e4:4e:fd:b3:d0:bf:d2:23:88:
                    2f:3f:17:e7:0b:62:ec:bd:09:71:3a:6d:9a:aa:29:
                    d8:b3:62:3d:a3:61:57:54:ff:09:38:ca:f4:bc:57:
                    ac:12:f1:a9:be:8c:28:48:66:bd:11:c0:a5:a0:4a:
                    59:5c:cd:36:4d:24:42:50:33:22:42:00:dd:67:68:
                    13:0b:0e:40:74:b9:82:2b:bd:4a:6e:a7:3e:6b:b7:
                    b4:0a:5f:13:99:9a:99:82:32:bf:86:bc:1c:f2:cc:
                    41:46:1b:be:ec:91:5e:8a:d6:2c:e5:1f:d2:33:d8:
                    47:e4:1e:30:e8:2e:03:cd:64:b5:8b:a2:e3:b7:69:
                    01:54:13:a5:1d:b0:51:61:55:38:be:6c:9b:eb:22:
                    20:d8:8b:de:a9:0f:2b:63:b9:bb:60:a5:69:02:77:
                    a0:a8:60:e7:fe:80:30:8e:94:b2:b8:d6:ce:2f:b5:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EF:C2:A3:28:F1:FC:D6:C5:50:10:EA:DE:A3:A5:88:56:6E:94:E1
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:54:d5:e5:14:de:e1:cf:5c:ea:b3:48:e5:94:c0:d9:dd:91:
         c4:da:fd:d6:05:45:b2:aa:cb:31:5b:a7:ca:6c:6a:04:cf:b4:
         53:ac:43:37:05:d2:7e:af:b7:b4:09:a1:f8:7a:fa:55:5a:c7:
         62:cc:ec:e9:7b:fb:9d:fa:e9:25:80:29:83:3a:d5:40:f6:89:
         5c:29:0a:85:5d:4a:a7:be:eb:c8:df:2c:1c:25:18:98:25:15:
         7a:86:02:eb:0d:c8:b8:2a:6a:dd:b5:2d:85:78:51:78:5e:f8:
         62:e1:ce:9e:0b:16:01:56:34:3f:c3:c9:f9:f3:84:f5:47:ec:
         68:21:b4:6e:d5:f8:2b:d3:db:52:2f:55:2b:63:1a:ee:7a:dc:
         f5:1e:78:f7:06:27:b5:f8:e9:82:e9:71:1c:cd:5b:b5:83:d0:
         dd:4d:1f:b7:04:cf:82:c0:37:4d:38:8e:f8:a3:25:e5:7d:10:
         31:a2:93:59:64:0d:d6:a1:21:dc:fa:0b:97:c4:34:c0:a3:18:
         d7:ed:c5:e1:cd:29:eb:fb:eb:2d:06:b5:d6:fc:3e:96:a3:38:
         d5:3e:79:2d:a2:2b:c9:0e:7a:07:11:fa:bf:12:6d:bb:ae:51:
         d2:f1:43:6d:a7:a1:fe:8c:97:18:b3:c6:8a:26:c5:7d:bc:48:
         fd:c4:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:05:17 2026 by rpki-client