This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File:                     yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier:          kppxsm/HWdWYsUj2gle8Q4mA1AGoaFMGhobRLjzs5rQ=
Subject key identifier:   A4:DB:E6:84:95:93:16:53:3C:9C:67:B6:6F:E7:79:7C:AC:C3:7D:9D
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer:       /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial:       019C43C6A15E994E4FF6842083AE46EAB4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number:          0795
Signing time:             Mon 09 Feb 2026 19:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:16 +0000
Files and hashes:         1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
                          2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
                          3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: +Vzt+jkmSyI3c3Mkak8LW07qpZtYch8I8ZsNtbg5rWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a1:5e:99:4e:4f:f6:84:20:83:ae:46:ea:b4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
        Validity
            Not Before: Feb  9 19:00:16 2026 GMT
            Not After : Feb 10 19:00:16 2026 GMT
        Subject: CN=a4dbe684959316533c9c67b66fe7797cacc37d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:4c:79:dc:1b:c9:4a:4b:25:3e:eb:c1:43:
                    dd:51:b7:48:4f:e7:3a:2b:a8:87:54:af:d0:c8:6a:
                    74:b9:a0:55:c3:f2:52:5d:53:40:6d:46:cb:d7:bc:
                    32:13:ca:b3:08:68:96:22:ab:e5:0a:62:79:cb:c8:
                    09:57:6f:49:ad:10:72:1e:23:ce:96:63:59:e0:09:
                    63:17:2f:18:90:df:d8:1a:a3:19:2c:ff:5e:62:ba:
                    5e:61:31:36:fb:ff:38:53:14:f8:bd:29:76:71:92:
                    47:d0:37:c4:f3:a1:32:e2:21:b2:5c:6b:35:5a:78:
                    cc:77:37:21:82:c3:45:33:63:cf:7b:e4:5d:ab:02:
                    97:4f:49:2c:a8:75:91:3e:f9:1a:ed:4c:38:50:f1:
                    3a:5c:46:a2:13:18:a0:b2:c6:45:80:45:99:0b:d7:
                    df:76:a0:26:65:18:42:fa:5d:7c:ea:cd:28:b0:52:
                    7c:5e:9e:d2:b6:6a:a9:15:70:e5:55:df:87:15:7d:
                    6a:fa:02:05:43:42:e5:f8:8a:af:ad:41:86:b8:78:
                    32:61:fd:04:c2:b0:ba:4f:d7:45:cb:50:04:02:c1:
                    4d:3a:34:dc:f3:96:f5:f6:6f:94:2d:0a:c1:03:b2:
                    fb:20:61:01:40:dd:c9:d7:53:e5:d8:c7:ec:4f:bd:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DB:E6:84:95:93:16:53:3C:9C:67:B6:6F:E7:79:7C:AC:C3:7D:9D
            X509v3 Authority Key Identifier:
                keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:25:f8:eb:ff:6a:1b:8e:01:88:0e:b8:33:53:05:83:9f:ff:
         03:10:1d:c2:24:7b:8d:78:98:82:e7:ba:75:c2:8c:cb:d2:29:
         66:d6:44:33:69:03:2b:4b:23:34:44:ef:8d:4f:78:77:43:e6:
         e9:b5:fb:4e:bb:d3:a3:24:0b:d3:29:5c:69:69:bd:af:e1:09:
         03:e9:ed:e5:5b:01:0d:2e:ff:65:75:2f:5f:74:a6:75:02:64:
         76:32:67:41:d1:a2:c9:2b:33:4f:df:2e:30:d5:be:ed:71:19:
         b1:90:f0:f7:9f:9d:4a:1a:da:1a:59:63:03:21:b3:76:66:b1:
         fd:fc:b4:30:84:83:58:c4:db:b2:f3:2b:8d:fb:fa:98:50:53:
         e1:5a:86:69:62:e0:3d:96:2d:7e:6b:36:05:72:c6:a2:41:c1:
         c7:87:1a:3b:5c:c8:92:aa:69:19:4b:80:44:91:f1:e3:d1:76:
         cb:4b:0a:53:18:6a:a5:73:c2:f1:8f:04:30:ac:52:d2:59:5b:
         4c:d4:b6:23:37:56:0c:85:ee:c7:ec:6c:0c:8c:7e:5a:1d:ca:
         6e:cd:ee:f6:88:db:e9:16:87:0a:d4:b0:c1:6e:82:af:b2:55:
         06:c5:0e:50:8e:ed:32:ea:a7:fc:7f:5e:1b:37:3e:42:cd:f7:
         73:74:b6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxqFemU5P9oQgg65G6rTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2M4YmRhMGM2M2U3ZDJkNjVjMTllZDcwNDNiNWEyZDc5
MWMxZjEwHhcNMjYwMjA5MTkwMDE2WhcNMjYwMjEwMTkwMDE2WjAzMTEwLwYDVQQD
EyhhNGRiZTY4NDk1OTMxNjUzM2M5YzY3YjY2ZmU3Nzk3Y2FjYzM3ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4RMedwbyUpLJT7rwUPdUbdIT+c6
K6iHVK/QyGp0uaBVw/JSXVNAbUbL17wyE8qzCGiWIqvlCmJ5y8gJV29JrRByHiPO
lmNZ4AljFy8YkN/YGqMZLP9eYrpeYTE2+/84UxT4vSl2cZJH0DfE86Ey4iGyXGs1
WnjMdzchgsNFM2PPe+RdqwKXT0ksqHWRPvka7Uw4UPE6XEaiExigssZFgEWZC9ff
dqAmZRhC+l186s0osFJ8Xp7StmqpFXDlVd+HFX1q+gIFQ0Ll+IqvrUGGuHgyYf0E
wrC6T9dFy1AEAsFNOjTc85b19m+ULQrBA7L7IGEBQN3J11Pl2MfsT721/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTb5oSVkxZTPJxntm/neXysw32dMB8GA1UdIwQY
MBaAFMjMi9oMY+fS1lwZ7XBDtaLXkcHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQt
ZTMwMzg3YjNmMjExLzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNzQxN2MtNGNhYi00ZDUxLWI1YWQtZTMwMzg3YjNmMjEx
LzEveU15TDJneGo1OUxXWEJudGNFTzFvdGVSd2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACX46/9q
G44BiA64M1MFg5//AxAdwiR7jXiYgue6dcKMy9IpZtZEM2kDK0sjNETvjU94d0Pm
6bX7TrvToyQL0ylcaWm9r+EJA+nt5VsBDS7/ZXUvX3SmdQJkdjJnQdGiySszT98u
MNW+7XEZsZDw95+dShraGlljAyGzdmax/fy0MISDWMTbsvMrjfv6mFBT4VqGaWLg
PZYtfms2BXLGokHBx4caO1zIkqppGUuARJHx49F2y0sKUxhqpXPC8Y8EMKxS0llb
TNS2IzdWDIXux+xsDIx+Wh3Kbs3u9ojb6RaHCtSwwW6Cr7JVBsUOUI7tMuqn/H9e
Gzc+Qs33c3S2MA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:56 2026 by rpki-client