This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File:                     YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier:          x+TN6jbf9U0PSc0FM/rw8i3fF1EXF1/i6HBK/tXg7eA=
Subject key identifier:   FA:35:4B:EC:BE:6F:A6:D3:58:FA:B2:03:0F:F9:BA:DD:B1:DB:4C:FE
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer:       /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial:       019C420F3ED84E2E15CF69D00E554A415FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 11:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:21 +0000
Files and hashes:         1: 5UKl7JzlrMZFxZccNwb_HEFI_xs.roa (hash: XFtwBlqsUtFdMadWz8en37s8O8O+/h2aqDNRnI5q7sE=)
                          2: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: 4kbuVmx0FOG0rdiL15QYYEjrgn61SXEV4i0tfy4Wl/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:3e:d8:4e:2e:15:cf:69:d0:0e:55:4a:41:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
        Validity
            Not Before: Feb  9 11:00:21 2026 GMT
            Not After : Feb 10 11:00:21 2026 GMT
        Subject: CN=fa354becbe6fa6d358fab2030ff9baddb1db4cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:e2:51:7c:07:be:d3:f2:07:34:f5:7d:41:
                    52:f1:b1:e0:04:3b:f8:9d:ae:87:6c:75:51:ef:c3:
                    78:23:e7:48:5b:ce:b4:a6:5f:80:c3:98:32:e7:c4:
                    2d:52:04:fd:53:86:71:fe:b6:ff:a7:37:8b:65:90:
                    05:4a:1e:69:f6:e3:aa:0e:2d:25:be:5a:62:bf:0d:
                    19:65:f5:ee:63:30:9a:83:2d:ce:17:18:ea:96:95:
                    ee:54:18:3f:c3:9e:dc:b2:89:c2:48:b6:8a:ab:0d:
                    1b:76:01:8c:ce:e7:af:5e:98:f4:06:97:81:d7:b0:
                    61:00:8c:a9:8d:bc:3e:b9:56:d6:71:b3:ca:23:54:
                    44:cf:1a:b7:78:6b:14:4e:0a:3b:ad:15:59:36:7a:
                    59:54:21:64:2b:27:dd:fc:35:28:9c:42:9e:d2:5f:
                    bd:d1:3f:cb:f7:e2:39:d8:95:14:b3:6c:b7:8d:d2:
                    f9:44:03:f2:3b:8d:2e:3a:42:91:68:9b:8b:d2:c7:
                    04:2f:19:3c:07:54:ab:73:af:86:08:b5:7a:63:ad:
                    86:1c:40:5c:ac:9d:23:40:36:ac:51:4d:04:89:df:
                    ef:f2:b0:b3:d6:06:87:ec:9f:b8:f4:a4:27:35:f3:
                    05:7b:6b:21:b7:4c:7e:17:a7:4f:60:db:a5:32:0e:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:4B:EC:BE:6F:A6:D3:58:FA:B2:03:0F:F9:BA:DD:B1:DB:4C:FE
            X509v3 Authority Key Identifier:
                keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:99:81:91:75:15:2a:13:bf:33:3e:7c:7f:2f:80:ef:8c:
         fb:b5:99:21:fa:05:2f:e6:8d:63:0c:7d:ac:e9:62:43:40:27:
         1d:45:83:2a:b1:9c:97:9c:73:65:81:f2:82:83:9e:6e:a3:fc:
         fe:87:92:17:4e:3e:0a:36:e1:2a:b1:68:be:ec:6e:69:4a:66:
         c9:f4:92:ee:b6:9c:64:99:75:c7:8e:7b:cf:4f:d9:e8:96:8e:
         56:51:2c:4e:43:d7:88:91:1e:49:e6:42:16:50:08:b1:b3:8a:
         35:cb:37:27:b9:b0:28:70:86:ea:d5:03:5d:0f:49:84:29:d6:
         2f:46:cb:2b:25:d8:37:7d:cc:bb:4c:4b:5b:80:0c:48:4c:15:
         93:3b:11:16:aa:09:42:b3:fc:00:2b:35:b0:50:94:cc:3c:bc:
         84:d9:f9:16:85:e6:a4:ae:35:e2:5f:35:93:ed:0c:25:5d:50:
         46:0d:29:c8:eb:27:95:f5:ff:2f:e4:de:c4:12:5b:24:d5:6a:
         c1:1f:6f:53:c0:49:54:29:d2:62:5d:b6:05:90:66:61:7e:12:
         cc:b9:cc:bf:08:47:8e:e6:3a:6e:a3:45:83:91:b3:67:9b:a8:
         f2:ba:ff:6b:56:80:56:47:c8:ee:42:86:71:bd:4e:6c:8b:95:
         fb:8e:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:45 2026 by rpki-client