This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          yvmOUDaCEGFvEXYG3l9cluqf8pfYjkaHKh1zGMCfOE0=
Subject key identifier:   17:9E:C7:86:34:52:D5:5E:A8:D9:45:DE:6A:79:D2:64:63:AB:7D:8B
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       019C438FC460770B5F7C3EC7CE54904AFBC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          06F9
Signing time:             Mon 09 Feb 2026 18:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:21 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: 8UtGvLa1enx+RdgbmC6ido/rQlB/2ZYyp8nuhzvx7E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c4:60:77:0b:5f:7c:3e:c7:ce:54:90:4a:fb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Feb  9 18:00:21 2026 GMT
            Not After : Feb 10 18:00:21 2026 GMT
        Subject: CN=179ec7863452d55ea8d945de6a79d26463ab7d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:9c:5b:8a:a4:10:3f:18:05:80:65:df:01:
                    1a:6e:fe:83:19:68:36:3b:66:1c:1c:e9:94:1b:cb:
                    70:f9:ec:f5:31:05:7d:fc:8a:79:8d:fd:6b:e5:47:
                    f8:f2:bf:24:11:7d:2b:f1:c6:f6:26:5a:5e:f2:9e:
                    4f:f7:93:86:bc:a4:76:75:c0:45:14:44:75:ca:ee:
                    94:ce:11:6c:23:69:49:16:90:96:56:a6:93:57:3e:
                    1b:da:3d:1f:2e:d9:13:8e:26:95:4e:15:f6:6a:90:
                    97:78:40:8f:04:17:9d:f7:ce:39:e4:56:c6:96:60:
                    19:da:3e:1c:57:de:ca:cf:7a:8f:34:3e:a0:3c:46:
                    dc:02:bc:01:92:a2:e9:3c:27:d2:54:27:94:e1:aa:
                    52:50:dd:b2:56:81:b0:85:d1:23:89:6e:61:cb:d5:
                    99:4e:71:d4:1b:b4:a1:6e:90:90:23:29:ab:12:7a:
                    2c:77:cf:11:9d:a9:60:31:71:82:c6:75:fc:71:50:
                    d8:b1:5c:9c:fb:ef:7d:34:ed:ca:d2:d2:4f:da:3f:
                    a6:de:82:6f:f9:8b:47:1c:d8:ea:d3:be:2e:51:11:
                    9e:78:3c:9f:16:2f:8b:91:2d:9d:a9:41:00:2e:52:
                    af:79:79:77:77:80:6c:fc:d1:53:05:20:26:bc:31:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:C7:86:34:52:D5:5E:A8:D9:45:DE:6A:79:D2:64:63:AB:7D:8B
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:80:5d:b0:df:1a:3d:e1:30:7d:3e:a6:e8:a7:f4:b3:78:e7:
         2e:99:69:50:ec:40:0d:15:a5:66:05:8e:31:30:56:68:8f:f5:
         46:58:ee:c3:02:bc:d9:34:05:c4:95:77:d3:46:ab:c9:56:22:
         15:4d:10:98:6f:e6:d4:a9:55:c8:13:8f:f7:9b:a6:08:32:5e:
         b2:b1:7a:cb:b4:9c:10:75:67:45:fb:69:1a:d8:4d:54:1a:fe:
         a3:6e:7d:90:55:e9:23:b5:18:95:43:9b:a5:6b:6f:b4:ad:93:
         fb:d9:83:b0:9a:86:39:93:a3:5d:c6:d1:ec:ec:94:e3:27:08:
         4a:fc:fc:5e:3b:8b:e9:2e:e3:ae:91:c0:d3:4a:30:b4:a0:68:
         d9:95:0c:b2:4a:c7:27:e6:e7:e2:85:29:f4:50:93:22:f8:44:
         9a:38:ee:4a:76:a0:14:68:7a:54:0a:ff:a0:3e:3e:55:10:61:
         01:93:c8:42:e3:98:f1:e7:7e:46:e1:bf:25:0d:a4:0c:06:d2:
         7d:94:a3:85:9e:51:26:8e:2c:cf:b5:09:2d:bd:09:31:ce:a1:
         3d:d3:92:29:b1:8f:46:ef:24:92:99:fd:7e:89:c8:78:5a:11:
         eb:f8:fd:63:04:e3:28:b2:73:fa:29:c4:19:9f:d9:7d:28:d6:
         3e:dc:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:03 2026 by rpki-client