This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File:                     Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier:          GEp3jL8/P044yY4zY9cciN4KZXQl/bBokRzh5COsKk4=
Subject key identifier:   41:18:2F:6A:A8:E8:F1:60:F0:39:39:B7:9C:45:DF:10:A9:7E:AD:56
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       019B77122A2F1BED61BF65C15408BEE930B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number:          16B0
Signing time:             Thu 01 Jan 2026 01:00:37 +0000
Manifest this update:     Thu 01 Jan 2026 01:00:37 +0000
Manifest next update:     Fri 02 Jan 2026 01:00:37 +0000
Files and hashes:         1: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: R5BHd/ohPyBPKMn5fzTQ2q9dHaxWcm/PAr+zis8ohCw=)
                          2: eJSI85DZViXonf3-MCJo6Ojcq34.roa (hash: OnbHcBTMzJmbk7LCrnGr0kTpDi+PIFsqGqkYdHOPR8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 00:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:12:2a:2f:1b:ed:61:bf:65:c1:54:08:be:e9:30:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Jan  1 01:00:37 2026 GMT
            Not After : Jan  2 01:00:37 2026 GMT
        Subject: CN=41182f6aa8e8f160f03939b79c45df10a97ead56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:71:44:36:59:17:e7:4e:ac:2c:07:43:a0:
                    28:a6:58:d3:6f:a8:09:8b:70:2a:52:da:b1:24:3f:
                    ae:0b:77:ba:00:f9:80:dd:70:38:8b:bf:76:e8:16:
                    12:4d:df:1a:e9:c3:85:eb:e7:64:a0:99:e2:88:6b:
                    01:d4:07:4a:78:e1:e2:00:75:e1:56:59:e1:a1:87:
                    7e:ce:8f:0e:66:75:47:94:60:62:cc:7e:08:c3:08:
                    e6:c7:aa:a2:1c:35:82:ea:af:94:ec:78:33:60:fd:
                    f8:1c:80:01:19:5f:ad:e8:11:d3:d7:dc:ad:09:e1:
                    9d:ca:ff:03:7a:49:85:08:39:3b:7c:86:b3:5f:db:
                    db:6b:b8:a1:7b:ed:15:ce:d6:4f:b5:ee:9f:62:cd:
                    5d:5c:71:c7:90:9a:0d:74:2e:85:8c:02:01:34:b7:
                    59:83:de:d8:a4:74:3c:29:68:48:92:a1:68:08:96:
                    03:a0:29:de:75:b2:fa:e9:0a:67:81:9e:e5:03:39:
                    57:74:b3:b0:cf:99:a7:43:52:db:35:65:df:15:d5:
                    b7:bf:2a:05:3b:ef:f5:d3:b3:84:fc:3d:66:14:e7:
                    78:0e:57:87:9e:0d:2c:15:0c:15:bc:e3:55:11:05:
                    2a:80:8c:7a:ef:06:32:55:4d:a0:01:9e:d6:dd:a4:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:2F:6A:A8:E8:F1:60:F0:39:39:B7:9C:45:DF:10:A9:7E:AD:56
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:86:ac:56:33:1d:90:69:78:1b:54:ea:7f:4b:19:ab:c5:
         c4:e5:09:57:28:70:f6:20:e1:43:1c:a8:98:3a:40:11:ef:30:
         d1:1e:5a:09:c3:4c:0a:ec:7c:89:a9:9c:64:bc:0e:37:4c:e9:
         df:f6:81:ea:86:22:97:3e:14:f5:f9:07:b5:9b:97:70:96:7b:
         c2:db:be:99:1f:0a:e0:a4:eb:06:65:21:7f:06:64:4c:73:c5:
         06:83:4b:9d:b2:8c:90:7e:d6:35:81:04:b0:25:19:4f:18:c4:
         96:1c:7b:fd:dc:c8:30:9b:12:22:8f:e7:4c:13:b1:bc:62:96:
         21:5b:eb:1f:e5:a4:d4:a6:d5:0b:a3:f5:49:a6:5b:c8:0e:e5:
         fe:bc:4f:79:53:16:35:06:5d:f7:0e:fc:6f:a6:44:5d:30:ce:
         04:af:53:a5:9d:5d:43:d4:28:55:13:17:a2:a4:65:9e:1a:53:
         c2:3d:4e:0b:c5:0b:05:5f:4a:65:b7:34:89:cb:b6:b7:80:8b:
         0c:1c:52:b5:6e:a6:fe:28:2b:9c:8c:8b:3a:77:d7:81:71:0b:
         20:43:c5:90:ad:57:85:c5:1c:f3:70:a0:84:49:2c:a3:05:50:
         be:b0:df:40:d9:12:29:5e:b7:9a:d5:e1:97:05:f6:aa:95:1b:
         f6:b9:67:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt3EiovG+1hv2XBVAi+6TCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjYwMTAxMDEwMDM3WhcNMjYwMTAyMDEwMDM3WjAzMTEwLwYDVQQD
Eyg0MTE4MmY2YWE4ZThmMTYwZjAzOTM5Yjc5YzQ1ZGYxMGE5N2VhZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMJxRDZZF+dOrCwHQ6AopljTb6gJ
i3AqUtqxJD+uC3e6APmA3XA4i7926BYSTd8a6cOF6+dkoJniiGsB1AdKeOHiAHXh
VlnhoYd+zo8OZnVHlGBizH4Iwwjmx6qiHDWC6q+U7HgzYP34HIABGV+t6BHT19yt
CeGdyv8DekmFCDk7fIazX9vba7ihe+0VztZPte6fYs1dXHHHkJoNdC6FjAIBNLdZ
g97YpHQ8KWhIkqFoCJYDoCnedbL66QpngZ7lAzlXdLOwz5mnQ1LbNWXfFdW3vyoF
O+/107OE/D1mFOd4DleHng0sFQwVvONVEQUqgIx67wYyVU2gAZ7W3aRIHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEYL2qo6PFg8Dk5t5xF3xCpfq1WMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6KGrFYz
HZBpeBtU6n9LGavFxOUJVyhw9iDhQxyomDpAEe8w0R5aCcNMCux8iamcZLwON0zp
3/aB6oYilz4U9fkHtZuXcJZ7wtu+mR8K4KTrBmUhfwZkTHPFBoNLnbKMkH7WNYEE
sCUZTxjElhx7/dzIMJsSIo/nTBOxvGKWIVvrH+Wk1KbVC6P1SaZbyA7l/rxPeVMW
NQZd9w78b6ZEXTDOBK9TpZ1dQ9QoVRMXoqRlnhpTwj1OC8ULBV9KZbc0icu2t4CL
DBxStW6m/igrnIyLOnfXgXELIEPFkK1XhcUc83CghEksowVQvrDfQNkSKV63mtXh
lwX2qpUb9rlnng==
-----END CERTIFICATE-----
Generated at Thu Jan 1 03:52:39 2026 by rpki-client