This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File:                     Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier:          u3mAxq1tKPJTzBV5GwmrdsMSIq+L/ZCLYh3TCQPPbA8=
Subject key identifier:   8C:44:34:0C:25:91:05:79:DC:7B:69:9E:52:EF:E7:D6:40:79:EF:E7
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer:       /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial:       019C4358BF101E6E708384DEBEFBE799FF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 17:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:15 +0000
Files and hashes:         1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
                          2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: yX/TNbKnokWEKpSU7EB4dDtsTgDh/DjCX8XsMSlixJk=)
                          3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:bf:10:1e:6e:70:83:84:de:be:fb:e7:99:ff:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
        Validity
            Not Before: Feb  9 17:00:15 2026 GMT
            Not After : Feb 10 17:00:15 2026 GMT
        Subject: CN=8c44340c25910579dc7b699e52efe7d64079efe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:85:88:a2:83:84:7e:ad:32:77:8c:16:fb:
                    5b:f7:80:ad:2b:bd:97:b3:2e:22:1e:58:31:c0:fa:
                    0d:a2:e0:d3:b0:2f:5e:29:ed:1f:86:33:5d:85:7e:
                    ad:00:a0:b1:ef:69:83:cf:b5:11:9f:ca:78:94:34:
                    37:2b:a1:9f:ac:cb:63:4e:86:34:55:d2:fc:af:79:
                    69:37:e4:3a:3b:4d:cd:d6:45:8b:45:a6:37:f4:0f:
                    5d:9b:c6:56:cd:7e:bb:1b:f9:e8:d7:ef:38:da:27:
                    08:ad:e2:b1:02:d3:1a:a1:05:62:eb:9b:c2:f9:eb:
                    66:e8:b3:67:3d:93:79:58:37:cf:84:74:06:f3:64:
                    fb:cb:cf:a9:82:a7:22:b5:ae:8c:42:b1:33:cc:04:
                    e3:d5:b1:22:81:31:f6:76:aa:a9:60:be:ec:86:73:
                    ea:e1:d1:db:aa:2b:e6:d7:07:d0:e0:cb:76:3f:fb:
                    13:c8:ed:87:b1:81:dc:02:14:ce:66:78:2d:a6:95:
                    a6:73:8f:d2:8e:d1:58:32:2c:8e:7d:72:c7:86:00:
                    ba:90:43:61:c4:b4:18:1b:18:90:21:0b:78:5b:8a:
                    bd:34:c5:ff:12:3e:dd:58:6e:ec:ad:af:f1:85:7a:
                    4c:cc:ac:f1:a6:46:58:b1:ac:d7:99:94:95:a3:be:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:34:0C:25:91:05:79:DC:7B:69:9E:52:EF:E7:D6:40:79:EF:E7
            X509v3 Authority Key Identifier:
                keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:51:bf:a2:0e:b6:67:ee:36:8f:ce:97:9f:38:3c:f1:be:
         57:d5:72:a3:7d:6c:a9:0f:56:68:26:77:50:d9:92:12:e1:15:
         a4:86:c4:b2:56:5f:6d:9c:56:19:78:d7:8c:82:c4:e7:82:26:
         39:1e:36:22:02:0b:26:d5:e3:ad:bc:b2:6a:45:ab:d4:d2:13:
         0a:ed:c4:0b:e1:f8:45:f2:d4:9d:f3:a1:88:27:38:94:97:e1:
         91:30:b0:b6:37:c2:85:e8:3c:b7:53:dd:69:f4:04:19:92:38:
         fc:d6:21:a4:28:f2:f7:c5:e1:41:48:f0:3c:e2:8a:c3:16:91:
         8c:7f:6b:eb:38:fb:eb:7c:9f:56:62:83:5f:36:10:76:00:7e:
         60:a2:b7:7d:b9:00:76:07:23:22:1d:3f:b0:39:62:2a:6b:d6:
         36:a3:ed:31:bb:a5:eb:c7:bf:42:59:2b:39:71:32:4f:d9:c2:
         7f:71:b5:ad:5b:29:1d:64:ca:61:cc:25:66:8a:67:86:a1:a8:
         ae:30:33:95:e6:bf:55:17:b1:0e:b7:99:4d:f4:db:82:14:bb:
         39:fe:ca:f4:9d:89:30:42:8f:10:14:b4:5b:5d:24:29:29:e7:
         c7:fc:69:58:c5:75:4b:e6:aa:47:7b:b4:79:cb:91:5e:a1:22:
         08:38:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:21 2026 by rpki-client