This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File:                     Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier:          GNdOYw9n95LmE5+9ST8Ulehk7P3YicXmrt8N3H4lKwE=
Subject key identifier:   68:00:A5:54:02:28:E7:25:55:13:37:E0:78:79:61:9E:03:30:86:8C
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       019C4434D1F346B6563B7CEBF02024FFB1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number:          0FDB
Signing time:             Mon 09 Feb 2026 21:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:37 +0000
Files and hashes:         1: 1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa (hash: PKDin6Um4bSNTv37OWWtMgZ7JZ9EcI4/Ix0ai+0uf0w=)
                          2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: zo1XyrKPt6DGYCUa8tlGaf6O6ySyvgPbQbueNtu1t88=)
                          3: xFnp4xhF4j51ZyapByot5v2VVNM.roa (hash: nHijCQmyGonC7rxNnLaWT4q1K25yNVP8EcOiDNsgLp4=)
                          4: xrTDRH7W_ATocCsWo-qnqpB60jc.roa (hash: rcqIWslEK1fTssayqywxJbPZu5Bp13nM9n6B2zco1Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:d1:f3:46:b6:56:3b:7c:eb:f0:20:24:ff:b1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: Feb  9 21:00:37 2026 GMT
            Not After : Feb 10 21:00:37 2026 GMT
        Subject: CN=6800a5540228e725551337e07879619e0330868c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:df:38:cb:28:a4:71:b6:35:7a:91:95:58:
                    70:42:88:3b:10:d1:66:2a:0e:22:68:e1:20:d6:dd:
                    d1:04:9e:92:d8:b5:44:4c:9c:ab:8f:d1:46:06:6e:
                    6b:ea:8c:21:4d:11:5a:11:52:f3:91:7e:bb:ae:19:
                    ae:d0:c8:50:c9:fb:b0:9f:0d:15:db:b1:6c:00:da:
                    c7:94:0a:e3:92:de:92:ad:07:ff:1d:9d:08:ac:d1:
                    0f:0a:fb:92:a6:17:77:43:a9:fc:ef:bc:2d:a3:6a:
                    66:29:60:de:8a:42:de:b5:26:46:8e:38:04:2e:c4:
                    7d:c0:fd:71:4a:f0:12:44:6a:ba:1b:8e:88:a7:91:
                    74:d5:61:1d:c0:17:dc:6f:bb:47:27:e8:75:af:37:
                    ec:cd:a8:de:c2:e3:eb:12:47:44:98:d9:24:02:f2:
                    82:a3:f5:4d:c5:04:fc:54:be:c7:fe:4c:e3:20:ab:
                    a0:44:a8:68:15:86:a1:4c:81:3f:c5:75:f9:83:33:
                    02:ff:80:18:b2:81:d8:a9:dd:5f:db:1f:a1:99:93:
                    3f:14:e9:64:d0:bf:3f:05:1f:c9:1e:60:c9:7b:1e:
                    81:b4:a7:d4:eb:95:98:be:ee:c5:75:98:a3:af:1b:
                    56:5c:fc:6a:aa:39:ac:bc:11:8b:96:d2:f1:36:aa:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:00:A5:54:02:28:E7:25:55:13:37:E0:78:79:61:9E:03:30:86:8C
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:97:d6:d2:b4:30:02:c0:a1:f6:9f:5e:e7:7a:9d:1f:42:d0:
         36:06:24:9d:98:a5:3f:7a:e8:18:fa:81:7e:3d:ed:dc:32:95:
         f5:0f:b4:6c:54:b8:61:35:d3:5d:0d:a1:8c:9e:0b:b7:c5:eb:
         cb:d7:86:de:9e:db:3b:bf:4e:ac:bc:54:07:e6:5e:4b:1e:cf:
         9f:4b:24:3f:c8:f8:0c:aa:f3:ab:67:7b:6b:2c:cf:79:4e:6a:
         26:6a:fb:5f:4c:c0:e4:a2:15:d6:43:17:40:45:29:86:3c:45:
         23:93:f4:c7:2f:63:08:2a:6a:c5:72:0a:d9:86:a1:73:b9:bb:
         dc:00:2b:79:fd:fc:1e:05:f0:61:6d:23:9a:ea:57:14:d5:ce:
         53:a3:9e:89:0b:60:8c:f2:a3:cf:a4:5f:5e:9b:17:a8:a2:3a:
         f4:60:13:b9:ae:72:5f:76:0f:cf:a4:41:5e:37:dd:75:30:3f:
         68:42:3b:81:b9:35:0b:67:4d:1b:21:f4:7d:47:aa:f6:a7:3e:
         35:b5:19:f5:ad:06:45:5b:27:d6:fb:c2:46:e2:80:2a:78:76:
         97:2c:ec:6a:1d:68:4b:7a:0e:fd:ae:0f:28:dc:b9:b7:7d:10:
         00:18:09:99:2a:e3:88:27:8b:63:ba:65:17:a9:ce:3b:84:56:
         d3:e2:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:40:51 2026 by rpki-client