This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File:                     ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier:          nL8omB5K0hi0ia1tN8NPue7p2f9afAd7WRN1rch2ZAE=
Subject key identifier:   C4:DF:70:EA:E5:7F:83:AC:54:99:BC:7C:E0:22:6A:80:14:10:04:38
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer:       /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial:       019C420FE5B110E8350E818C0E472F979F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:03 +0000
Files and hashes:         1: NkhNpoa7Mava_QXc8cJpKFD-6x0.roa (hash: NHb2sZxdiKyxH3v4fGC8EWYo7uPMfDDnkonpIAR9yAY=)
                          2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: Gdy8dOmyK744lYqi+p/Dm+oe+AnakLZCU9qxIXRetn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:e5:b1:10:e8:35:0e:81:8c:0e:47:2f:97:9f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
        Validity
            Not Before: Feb  9 11:01:03 2026 GMT
            Not After : Feb 10 11:01:03 2026 GMT
        Subject: CN=c4df70eae57f83ac5499bc7ce0226a8014100438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:77:38:59:7b:a1:5c:1c:56:23:72:2c:f2:
                    57:c3:62:82:00:20:a5:78:ce:11:9d:d4:d9:41:aa:
                    8a:0f:37:47:d7:5c:e4:b3:bb:cd:aa:f3:f8:6d:80:
                    9a:54:aa:fd:06:f9:bf:0c:91:b7:85:73:f5:10:0a:
                    82:ec:eb:04:f2:02:d9:15:d3:6f:68:11:43:f8:b1:
                    4c:e2:9b:48:5e:58:81:d9:1a:67:0f:95:33:f8:4d:
                    0b:5b:c0:ad:f9:90:4a:36:76:04:2b:16:fc:2f:54:
                    bf:25:84:f6:3b:fb:cb:b0:fe:af:0d:09:da:dd:d5:
                    f5:a5:82:2f:d8:74:64:00:d1:ba:01:c2:60:58:07:
                    42:1a:ee:53:fa:ae:e0:e6:75:09:46:c0:19:41:bc:
                    8f:97:10:a2:25:d9:9b:16:d1:07:4d:34:9d:3d:ce:
                    1b:be:dc:4e:99:e3:0c:3d:42:b3:d3:d4:91:9b:b3:
                    71:0c:7f:36:dd:7d:42:0c:16:1e:af:5a:f5:25:66:
                    6a:c4:97:78:0a:d5:0f:be:8d:62:20:f4:8b:95:78:
                    2f:cd:bd:1b:75:a1:b6:02:80:74:78:2e:45:e4:78:
                    1c:33:3e:38:96:a0:33:24:b2:11:41:2f:b1:82:1b:
                    ca:2d:89:6a:aa:4e:d5:62:38:f7:fe:4c:5b:1f:5f:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:70:EA:E5:7F:83:AC:54:99:BC:7C:E0:22:6A:80:14:10:04:38
            X509v3 Authority Key Identifier:
                keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:68:fa:f5:c1:e1:8f:74:39:4d:3d:4d:6b:d8:f3:1f:01:
         61:f7:c5:fa:95:93:68:cd:6a:03:90:fc:f2:2b:f3:44:87:22:
         55:9c:ff:d0:10:10:a2:fa:81:db:87:62:cd:8d:dd:35:59:5a:
         31:80:ee:6e:fa:88:c3:34:21:4f:55:00:5f:ef:e5:d9:6f:53:
         d6:40:f3:63:77:b9:11:6e:5e:39:cc:06:a8:b4:97:3f:91:22:
         6c:51:2d:56:9c:3f:82:26:79:79:0b:db:47:ef:3a:57:1a:76:
         4c:3e:3d:22:ac:11:9f:2b:c9:6d:8d:91:e8:f1:e9:1d:1e:05:
         26:a6:68:2b:4b:f3:76:70:2a:a0:85:49:3d:10:b8:cd:21:8b:
         39:ed:b7:ac:cc:f5:65:9f:58:37:67:4b:81:91:d6:1d:42:27:
         c4:71:c1:f0:58:36:ad:30:de:52:49:8c:88:be:ad:b9:c6:0c:
         a7:21:05:91:f3:15:e6:51:a7:21:fc:83:58:b8:04:ea:f0:29:
         3e:23:bf:84:a2:b7:cb:af:c6:7b:8b:61:f2:8f:d9:32:78:ac:
         7f:21:28:a9:71:6d:fe:c1:1b:dd:a6:30:c4:4f:ef:ef:a0:68:
         61:8d:43:54:d4:99:36:14:35:a6:e4:a3:aa:0c:b5:c2:a7:96:
         ed:b5:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:02 2026 by rpki-client