This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File:                     yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier:          L2xlOKLwukAzyxkEYC1WcvqlaScTcLi4qMszRi+jJgM=
Subject key identifier:   7E:E1:7F:A0:B4:5A:E5:C9:88:3F:C6:1E:50:A3:B7:67:38:77:90:FD
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer:       /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial:       019BFC52D578433D99F6D4388D168B79DD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number:          118B
Signing time:             Mon 26 Jan 2026 22:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 22:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 22:00:45 +0000
Files and hashes:         1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
                          2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
                          3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: kOHWpDHmJIFOLAqqbRQHnqoiyWAEurLP0p42EL4cYxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:52:d5:78:43:3d:99:f6:d4:38:8d:16:8b:79:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
        Validity
            Not Before: Jan 26 22:00:45 2026 GMT
            Not After : Jan 27 22:00:45 2026 GMT
        Subject: CN=7ee17fa0b45ae5c9883fc61e50a3b767387790fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:de:20:50:c1:a3:e7:46:0c:a4:e0:9c:f2:
                    3f:cb:81:8a:37:07:59:64:cf:f7:75:d8:54:8d:98:
                    5c:36:9d:35:4d:eb:16:e3:55:6f:c4:0a:80:cd:0a:
                    76:76:96:8c:89:e0:8a:af:cd:7c:af:35:ba:e7:51:
                    07:60:18:dc:a2:b3:11:b8:75:22:94:d2:c7:a8:b0:
                    b1:bc:9c:0c:78:af:41:fe:94:a3:05:03:df:45:91:
                    f0:dd:36:ea:67:2d:f2:ec:46:f1:cf:22:29:54:ac:
                    27:23:1c:fe:6b:38:84:d2:90:87:49:16:0b:64:15:
                    49:84:6b:1c:2f:94:58:18:fc:fd:06:4b:ef:51:11:
                    d3:6b:d2:20:35:eb:c1:71:ba:e5:13:ba:51:f7:a1:
                    38:c9:9d:0b:0c:d9:9f:bc:d4:99:b9:30:cf:81:0b:
                    b6:fe:cf:e9:76:40:78:26:e5:01:e7:ba:49:13:69:
                    a0:f8:eb:57:96:64:c0:ad:b9:9c:d7:46:8a:b5:ad:
                    56:0f:0f:ca:de:94:8d:f0:71:e0:70:7f:c0:e3:59:
                    c2:a3:19:7b:32:9d:e7:9c:5f:b3:8b:e0:c7:ac:0c:
                    63:ad:47:12:06:5e:ae:0d:62:68:41:71:e4:14:39:
                    5e:9e:f5:6c:99:83:b9:f8:93:9a:05:89:1a:a7:b2:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E1:7F:A0:B4:5A:E5:C9:88:3F:C6:1E:50:A3:B7:67:38:77:90:FD
            X509v3 Authority Key Identifier:
                keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:90:a6:41:19:f8:89:12:2c:2f:32:ff:04:4b:ff:3a:99:
         ee:55:55:bc:bc:f3:f5:18:3f:3d:90:ca:4c:c7:5b:44:4d:93:
         7f:58:8b:a3:45:79:5d:89:56:aa:62:52:b0:15:2c:7f:3c:3b:
         e5:9a:82:3c:7f:be:ed:73:a7:d1:9c:c2:d7:49:92:9a:61:f3:
         6e:0f:3b:15:ac:77:a3:4f:43:54:19:f5:df:61:8e:7c:41:52:
         df:84:6f:a5:c1:54:88:1d:fc:e7:1e:10:84:83:77:28:db:a5:
         fb:0b:71:5a:2a:8b:8f:a2:d9:cb:25:c0:9e:af:f2:da:1c:28:
         95:8e:59:0c:76:bb:20:41:d8:8e:59:6f:b0:62:3f:74:0f:4d:
         2a:f4:b6:26:5d:c2:0b:db:9a:3b:07:c4:e0:84:25:af:e6:77:
         50:af:43:d2:f5:90:7b:b2:3a:b2:fb:e4:6f:a3:9b:6e:62:6e:
         b7:eb:1c:65:30:45:d7:29:76:f1:d1:ad:dd:75:29:cf:d8:9b:
         6b:c7:49:8b:0b:8a:58:82:ff:e7:38:15:de:5f:91:ed:d0:8d:
         6e:dd:14:ef:4b:c9:eb:f4:d4:97:86:76:fb:9f:5a:53:50:ac:
         84:bf:0c:81:94:8a:26:be:8d:f2:6e:31:48:69:59:42:5f:cd:
         47:cc:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:07:50 2026 by rpki-client