This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File:                     7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier:          c+qpiDDWCIypY/KvFnYNUvz06dkx5a7I73vEYaT7Aq4=
Subject key identifier:   12:40:51:68:DB:A6:52:DC:56:AC:86:04:7A:49:C1:2C:59:7E:E8:06
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       019BF8E42E49CDD7157B5B94FD09662BB153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number:          6C
Signing time:             Mon 26 Jan 2026 06:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 06:01:02 +0000
Manifest next update:     Tue 27 Jan 2026 06:01:02 +0000
Files and hashes:         1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: 00rKqZ83/j2gkE0cNr8cW7LaohvxzT8szrRDeItGMbQ=)
                          2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e4:2e:49:cd:d7:15:7b:5b:94:fd:09:66:2b:b1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Jan 26 06:01:02 2026 GMT
            Not After : Jan 27 06:01:02 2026 GMT
        Subject: CN=12405168dba652dc56ac86047a49c12c597ee806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:65:2a:96:ab:3f:7b:b0:40:96:bf:0e:de:
                    f3:70:74:2b:18:08:dc:a5:0c:ba:3e:07:ff:2b:ba:
                    6d:67:a9:24:e1:60:32:99:ab:0c:f0:6d:c4:74:6b:
                    52:9f:2e:6b:5f:eb:cb:56:b0:cf:70:fa:9f:83:ca:
                    73:d1:9e:7c:82:c2:c8:dc:98:2c:43:fc:f9:f8:3e:
                    65:26:31:a8:0e:b3:6a:27:1b:08:12:51:75:55:0f:
                    95:4a:79:fe:c6:a1:90:97:87:df:1d:46:b2:83:5d:
                    0c:e1:6d:a0:95:a8:0b:12:21:83:02:cb:2a:e3:f8:
                    ac:af:b7:c4:0e:2b:e7:78:b6:3a:78:6a:4e:df:56:
                    1e:ed:19:00:d6:f1:ca:fa:10:bd:f3:b6:a4:17:db:
                    6d:47:c1:33:23:5b:2a:d2:19:dd:41:e3:95:7a:8d:
                    ac:dd:af:91:62:f6:13:da:aa:e5:96:96:98:8d:9f:
                    02:25:c8:cd:d0:c3:65:48:c4:7a:96:bd:de:1a:29:
                    dc:ff:9f:91:5f:eb:c5:9f:9e:ba:3f:e7:c1:82:f0:
                    a3:4c:80:9f:6f:a3:d4:04:a3:02:3c:40:7a:13:79:
                    9d:72:39:95:9e:b7:7f:03:e9:01:0e:c7:d9:84:44:
                    04:5b:5e:f0:03:f5:0a:3b:2e:eb:82:c3:d7:d4:78:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:40:51:68:DB:A6:52:DC:56:AC:86:04:7A:49:C1:2C:59:7E:E8:06
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:a0:a4:41:4a:b2:56:5b:a8:26:72:28:99:ad:a8:7f:68:
         80:43:00:04:0e:a9:6d:a9:22:44:d8:ba:f0:ee:ac:c3:b0:a3:
         00:2c:3d:fb:de:d7:cb:7d:76:1c:38:fe:76:13:65:3d:7c:19:
         ef:61:59:35:1e:8f:30:b4:ca:42:4d:92:2b:55:63:f6:d7:95:
         56:b3:a6:79:6f:be:15:ea:d5:86:64:da:5a:f0:4d:e5:78:6c:
         b2:81:47:be:96:20:8d:7f:5e:3f:a6:81:26:b2:df:0f:6d:4f:
         c6:53:5f:9f:d3:e8:d2:c3:d0:f7:26:eb:78:f7:bc:4e:6e:60:
         a7:7d:30:2b:80:9d:b3:7e:1a:df:b3:45:6d:60:bf:bb:90:c3:
         e9:f9:b0:53:bc:d2:e8:97:cc:c2:f1:1e:c1:30:61:06:d5:1c:
         a0:1f:0d:0a:9b:fc:60:59:64:3d:7f:85:79:13:08:34:9d:c9:
         a4:f6:2a:ee:76:b5:72:02:49:89:f2:43:7e:8b:12:e4:a5:16:
         27:2b:6e:3b:a2:d6:ad:1c:b6:86:7f:98:03:d6:91:f5:2d:c0:
         ee:1d:64:86:1b:10:5f:b4:ba:fd:39:cd:c5:c8:79:64:cb:05:
         e6:77:85:8e:17:c6:9d:03:b5:42:a3:a8:f9:f9:15:42:2c:db:
         2a:75:14:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:23:09 2026 by rpki-client