This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File:                     yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier:          HVXnOd/9xIMewSzL12de+863P34/an4pdE7EA98T0uM=
Subject key identifier:   2D:B5:4E:9A:23:7F:B1:7C:0C:A5:5D:11:26:E2:9D:87:08:31:15:94
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer:       /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial:       019C05C471D12A26BA8F177675A666F07914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number:          0702
Signing time:             Wed 28 Jan 2026 18:01:26 +0000
Manifest this update:     Wed 28 Jan 2026 18:01:26 +0000
Manifest next update:     Thu 29 Jan 2026 18:01:26 +0000
Files and hashes:         1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
                          2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
                          3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: rv4K0j8n9df34DYT6nCY/aqSpl0UqxV88CBzeKk0sy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 17:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:05:c4:71:d1:2a:26:ba:8f:17:76:75:a6:66:f0:79:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
        Validity
            Not Before: Jan 28 18:01:26 2026 GMT
            Not After : Jan 29 18:01:26 2026 GMT
        Subject: CN=2db54e9a237fb17c0ca55d1126e29d8708311594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:84:14:c3:9e:27:20:e7:41:94:d1:cc:18:
                    10:c1:42:cf:85:d3:c7:59:2e:00:8e:a4:9b:94:a0:
                    f2:7c:33:d4:6e:37:6a:7c:b4:e9:ba:cc:41:c3:19:
                    76:b7:ea:61:0b:1b:a2:c6:fe:6a:1e:80:95:a9:8e:
                    ce:7a:3c:8f:37:99:73:90:3d:a7:d8:23:a2:ca:09:
                    46:cf:17:ae:91:37:d9:12:dc:44:0c:53:d7:f3:36:
                    f8:c6:b9:53:2c:cf:a5:63:e0:d2:93:f5:fd:db:a0:
                    eb:02:ba:6c:96:12:1f:63:a2:a7:26:77:d5:a6:b0:
                    51:49:f0:3d:d3:38:a5:f8:e9:dd:a0:72:ba:73:8e:
                    c6:50:59:e0:58:8c:29:0c:bc:51:e0:46:f7:cb:45:
                    2f:00:da:c8:4b:af:74:c1:32:4e:75:dc:c0:e9:7e:
                    ef:53:65:63:6b:de:3b:f0:40:e5:0a:ab:2b:aa:5b:
                    b9:3d:24:e6:8f:b1:64:fd:4e:8d:b7:2d:bb:bf:d2:
                    37:ef:57:a8:b1:34:17:d1:6a:a5:07:13:c5:34:5b:
                    c4:e7:f1:04:a8:ab:f3:e0:c5:70:53:53:8d:ee:32:
                    49:26:25:89:09:a9:c6:73:f2:41:be:13:16:1b:43:
                    ac:07:37:bd:67:b1:55:a1:c1:04:86:b5:5f:cb:77:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B5:4E:9A:23:7F:B1:7C:0C:A5:5D:11:26:E2:9D:87:08:31:15:94
            X509v3 Authority Key Identifier:
                keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:38:14:f0:d4:df:e3:52:e6:94:d4:0a:3b:55:be:d8:d4:
         19:4f:64:c4:ff:9e:44:e6:9a:02:81:aa:23:b2:63:6d:b7:a6:
         da:0e:ce:06:5f:4d:ae:dc:65:b6:cf:98:c6:9b:be:09:c8:71:
         38:8d:4b:48:b8:f1:1d:a4:3d:bc:e8:b2:ef:50:41:e7:b2:f4:
         32:17:20:ae:8c:4b:a1:bd:96:d5:5a:66:30:41:53:5a:3a:00:
         bf:28:7f:60:6e:36:c0:dd:02:80:3b:4d:0b:cf:77:62:9e:bb:
         f9:82:d7:a2:48:95:f7:c7:51:c8:75:d6:53:f6:8d:fc:48:04:
         82:9a:20:45:0d:20:d9:fd:d4:db:94:3b:08:a7:74:92:4b:a2:
         15:ae:d6:44:4a:63:de:2e:b6:1f:9a:3a:64:67:7c:35:c3:94:
         40:3d:35:be:67:e5:48:e8:dc:d3:7a:d7:8d:2c:7c:43:0f:76:
         0f:c8:51:a8:b7:bb:94:e1:ab:6d:dc:ed:84:7f:97:69:4c:a1:
         29:3d:5e:76:f3:01:2d:b5:8f:e2:64:48:2e:26:be:7a:ba:79:
         11:9a:2d:42:38:4c:66:bc:2b:c2:f6:aa:5b:f0:c9:b8:bd:df:
         fd:79:f6:7c:5f:f7:bf:68:2e:66:79:14:c7:eb:6e:7a:84:a5:
         79:c7:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 21:04:37 2026 by rpki-client