This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
File:                     ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json)
Hash identifier:          DbX75/eQdWF83XnfKOKSYee8rL/cdalwIhObbyKxjQg=
Subject key identifier:   E8:EB:79:40:19:E3:BA:D2:A4:D8:0A:D0:07:75:90:1B:EC:C5:31:9D
Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Certificate issuer:       /CN=c928b63417a2e7885e33881a924aac9d40aaca60
Certificate serial:       019C43C6F1C0FDE3FB865DDE5D5EEB486BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
Manifest number:          066E
Signing time:             Mon 09 Feb 2026 19:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:37 +0000
Files and hashes:         1: weXQO5Zhks4AnxcOCqcdzSxxPsw.roa (hash: ppnHsXhOiw58x/xYY5Ym72woaS7PHjIfKEtOPYGXh1U=)
                          2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: HMqW37vuPKayv5pPPS1RacdNkoC/Ue78SLSslGQP2SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:f1:c0:fd:e3:fb:86:5d:de:5d:5e:eb:48:6b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60
        Validity
            Not Before: Feb  9 19:00:37 2026 GMT
            Not After : Feb 10 19:00:37 2026 GMT
        Subject: CN=e8eb794019e3bad2a4d80ad00775901becc5319d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:e7:1a:96:13:b5:18:b9:4a:cc:cd:a7:20:
                    69:f4:2d:a1:57:9e:1e:7c:4c:81:c7:32:c2:19:28:
                    57:50:fc:6c:d9:20:d2:98:d3:f4:40:f9:cc:1f:34:
                    3f:68:8a:b1:f7:3c:18:2d:32:85:0b:55:53:38:90:
                    31:ab:6f:80:41:48:c1:bc:a7:47:cc:26:5e:4e:78:
                    f6:a0:25:f2:b8:d0:8e:aa:21:e2:e0:54:7c:df:e5:
                    43:47:53:d0:e5:c5:36:38:31:73:04:67:09:55:ba:
                    a1:11:6b:c0:2f:63:3a:11:2e:13:4a:50:5f:09:af:
                    65:c7:7f:78:e1:b4:a4:16:2e:d0:b3:9a:4f:e6:06:
                    62:52:71:bc:62:e2:e2:45:c7:d4:88:87:1b:a0:6c:
                    64:ad:59:d0:27:db:9d:38:dc:2a:e4:4c:91:b3:79:
                    26:dd:7a:e5:33:21:99:0a:cb:cd:9e:6b:a6:95:42:
                    10:9d:b1:17:cf:ce:d5:41:cc:80:34:4d:f6:0b:40:
                    af:de:b8:d0:06:84:7e:dc:ca:34:be:84:d8:91:ac:
                    2c:db:f7:bb:6f:28:f4:c0:49:cb:fc:be:d4:13:6e:
                    3c:46:40:2e:bb:c6:13:b8:8a:a0:f1:16:e1:46:de:
                    6f:1d:9e:2b:3b:e0:1f:68:93:ca:12:73:01:e8:38:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:79:40:19:E3:BA:D2:A4:D8:0A:D0:07:75:90:1B:EC:C5:31:9D
            X509v3 Authority Key Identifier:
                keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:44:4a:ab:fc:50:5e:ea:b7:24:98:a9:98:ae:11:1d:61:29:
         e0:4d:16:62:11:a7:1a:e6:97:27:ce:f2:9d:f0:9f:17:00:30:
         db:9e:90:b7:fa:d3:ca:b4:71:0f:3b:3b:dd:f1:c3:b1:b9:10:
         ac:66:7f:51:f7:d8:55:39:e6:fe:19:05:8f:9a:57:ac:c9:9f:
         69:3b:8c:35:cc:17:72:61:37:d6:26:b2:19:d0:5c:89:49:02:
         76:e2:1f:df:79:b9:2c:8f:ac:41:cc:62:6a:0d:8b:e4:3e:08:
         fc:5d:79:29:9a:27:5d:41:69:47:fd:9e:f7:e6:35:49:07:1d:
         f9:81:eb:16:f6:d9:66:0b:99:2f:77:ca:56:4d:30:ee:95:33:
         b1:43:66:c3:8d:c4:c9:a2:b4:0e:fb:9e:af:b7:cf:cb:95:d0:
         69:ee:8e:54:4e:60:01:7e:64:9d:43:c5:0f:8d:a6:4b:ea:a0:
         db:1d:aa:d8:43:a4:99:23:70:a5:69:f7:3a:62:ac:97:9e:57:
         2c:8a:d5:09:e2:f1:a5:92:8e:55:ee:50:81:f3:c6:bd:2e:4b:
         5b:bb:20:f5:6e:f2:3c:2d:54:ff:91:c4:ed:fb:dc:d7:51:5f:
         28:55:05:d8:e4:80:c9:2c:16:d3:c1:99:91:93:07:7e:bc:50:
         82:fc:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:51:12 2026 by rpki-client