This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
File:                     yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json)
Hash identifier:          3bNVQtVZsL5HHsQHbrYiT1eB38husG3G1PiTfRXDiZM=
Subject key identifier:   E6:B8:49:BB:C6:82:E8:52:27:29:2E:0A:86:94:92:A1:B9:53:94:50
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Certificate issuer:       /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial:       019BF8769B6F86BC7442BB8D5E6FC4433F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
Manifest number:          0AE6
Signing time:             Mon 26 Jan 2026 04:01:21 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:21 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:21 +0000
Files and hashes:         1: 714jAkRfYNSFRWD00Ttnn_8kshU.roa (hash: Qwe2Q2afQjCXeJnI6CuGzTdKEtcUpiC/k2FP9kdrGD4=)
                          2: 8dEAYi52_22zUX_SiXzKUWNxBaw.roa (hash: xFQLvjgZzeqcV2os4NMEXXqLMmXWf96ISePDLbOs/n4=)
                          3: AMWGdVJy6j1Lous_3W0Dp8ga5BI.roa (hash: YHKQlEMTRKZ44Ezw9Vkv/ST4kDSY/aZ7S8Y4/+4q0FA=)
                          4: FzsVJPIrsEyHqExyGhlWZtGTTjY.roa (hash: +Pd3PneLFWSwpSYwbblYDY0Nhc65YzGQwcvoKLnitm4=)
                          5: L4LAQO4VcvKCv24QKmqbiEkYgfw.roa (hash: 1I8k1k9yQTnnGWoQ4DNv1fL4gSGoExl590fVU6xPg8Y=)
                          6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: 5lZs5HvUtweZPDkrkZK+xyooauhuV7jZgFW2blQjmFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:9b:6f:86:bc:74:42:bb:8d:5e:6f:c4:43:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
        Validity
            Not Before: Jan 26 04:01:21 2026 GMT
            Not After : Jan 27 04:01:21 2026 GMT
        Subject: CN=e6b849bbc682e85227292e0a869492a1b9539450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:70:95:10:a1:bf:12:b3:70:08:cd:2f:1a:
                    12:0a:3b:d2:db:5b:da:24:ca:89:c4:40:6b:e5:50:
                    96:7a:11:7c:a7:14:fa:4d:c9:80:2a:02:a8:67:b2:
                    b3:25:d2:9c:97:a0:dc:76:66:c2:85:65:67:9a:6e:
                    30:32:ab:40:ca:dd:fc:cb:ab:dd:7d:fd:b1:4d:dc:
                    1d:0c:bd:f7:ef:f6:b4:fe:4d:63:85:d1:34:c0:c3:
                    38:5a:d0:c4:19:f7:41:d1:f7:d9:70:b8:39:16:21:
                    23:df:da:c2:d6:18:57:e9:9a:aa:52:b3:c2:76:c3:
                    e1:fe:f0:f2:fb:1f:b2:38:2b:ea:81:ec:25:09:e8:
                    64:46:75:19:d0:48:21:15:07:ba:a4:1c:5b:b8:9e:
                    9f:8d:34:ec:29:4f:d8:23:a5:ac:48:4b:3e:e3:f4:
                    32:45:a1:06:6d:6d:db:52:3a:48:66:2b:52:83:68:
                    5c:2d:f1:bd:73:7e:3d:53:59:f2:9c:2b:8c:91:db:
                    5d:ec:f2:dd:a5:cd:82:f1:92:1b:63:4a:9e:45:de:
                    df:81:f3:3c:f1:dc:61:36:d2:da:66:29:7d:79:46:
                    40:49:2b:23:c0:8c:c6:5c:43:26:90:ad:3b:e1:2a:
                    7c:11:2f:e3:3c:e9:1e:f5:5e:9e:53:6d:23:e4:9c:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B8:49:BB:C6:82:E8:52:27:29:2E:0A:86:94:92:A1:B9:53:94:50
            X509v3 Authority Key Identifier:
                keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ff:a8:10:27:1d:36:ef:99:36:e6:73:42:d6:05:22:e9:81:
         67:13:93:12:53:6f:3d:c2:dc:b6:82:56:25:86:de:bb:1c:ca:
         82:d1:6f:1c:e6:f0:56:f8:c3:6a:16:d0:8e:94:8d:fa:9e:6f:
         5b:b9:f8:82:40:cf:f7:90:2c:41:a0:e3:8c:00:4c:98:ee:2e:
         64:06:1c:46:5d:a0:7f:c2:9e:52:28:05:b4:9e:b2:17:2d:c4:
         e4:2b:91:82:6e:e3:88:97:31:fa:0e:8b:bf:d5:76:3e:ec:00:
         ee:41:de:4b:df:34:b4:cd:d8:93:a4:58:80:7d:36:c6:dd:60:
         ae:19:96:a6:d9:69:8a:ae:68:91:c5:2a:7c:49:30:6d:d5:aa:
         7f:c7:25:8f:58:41:7e:89:a6:73:84:54:1d:0b:88:b5:92:97:
         d3:af:f4:75:10:49:bb:0f:33:ae:73:ca:49:ea:72:74:9e:e1:
         7b:2b:52:e5:3a:35:e4:a2:12:5b:32:60:47:ec:01:cf:67:fc:
         ae:53:5b:3d:34:c7:e8:ca:3f:64:14:80:61:05:d2:9f:8b:6d:
         37:07:c3:38:06:d0:3b:49:29:ae:cc:97:3e:de:9a:9e:f1:7a:
         fb:b3:f1:28:b8:0c:94:46:30:32:3c:a8:89:17:b4:39:b0:65:
         a8:4a:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:39:27 2026 by rpki-client