This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File:                     Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier:          XOH5WR7tGRQ6PyxqmfGQOM5ce2jW5pxHbkHqV5ATEzI=
Subject key identifier:   7F:CD:18:24:3C:45:6B:09:B7:B6:EC:C3:37:F0:8B:4D:7D:34:E0:EA
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer:       /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial:       019C42B467E5388A0B0B012864426C2857AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 14:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:45 +0000
Files and hashes:         1: ONNi8ovX0XgxVfjOlwG1ZZZL7KA.roa (hash: oseBqsFumaa6CAjnqsxKGT9XuEQTrrxmktu1Tv62S6I=)
                          2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: T8ziZGt244SJqW1BQR3qur7rhfpo2rDrvgvbe0j+7sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:67:e5:38:8a:0b:0b:01:28:64:42:6c:28:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
        Validity
            Not Before: Feb  9 14:00:45 2026 GMT
            Not After : Feb 10 14:00:45 2026 GMT
        Subject: CN=7fcd18243c456b09b7b6ecc337f08b4d7d34e0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:ab:1c:af:cc:32:97:73:25:5a:83:48:ab:
                    1a:be:fb:0d:fa:27:f5:93:5a:b9:6c:c9:a9:d8:dd:
                    8e:3d:d4:78:e7:a9:f4:c1:12:ea:3b:ff:32:cc:ba:
                    e4:8b:9e:7f:57:8f:bf:e9:a4:82:32:bb:17:86:d3:
                    43:22:20:23:83:d1:dd:03:6c:be:f5:b2:4c:18:dd:
                    0e:6d:65:01:03:93:fb:9e:51:9d:38:f3:0b:eb:c6:
                    53:3a:b1:f6:79:8d:44:51:96:25:2a:af:cb:83:8b:
                    b3:20:f4:aa:7c:67:bc:27:b3:d9:6c:77:6b:f5:7c:
                    3c:c8:be:2e:de:a7:e1:b5:6b:63:97:4a:dd:a1:20:
                    70:59:16:01:b2:43:48:1f:60:e8:10:9e:80:c0:3a:
                    e2:e2:ca:6f:50:b4:ed:f0:f3:1e:5a:16:dc:31:7e:
                    a4:3a:10:4d:99:09:f3:83:db:2f:d3:32:da:75:61:
                    44:b7:11:aa:76:db:d0:33:57:1c:77:db:6c:64:dd:
                    cd:42:30:3d:ea:7d:43:91:8e:eb:2c:b7:b2:fc:9a:
                    a2:24:10:b0:63:a8:c7:1c:88:b9:0e:f6:e9:c3:60:
                    14:d8:cd:24:07:e9:3d:84:c2:fd:c9:3a:c4:61:b0:
                    56:41:61:8f:8f:ef:cc:ce:37:7d:c3:ff:16:d3:01:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:18:24:3C:45:6B:09:B7:B6:EC:C3:37:F0:8B:4D:7D:34:E0:EA
            X509v3 Authority Key Identifier:
                keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:1f:0d:e5:df:99:6e:5f:cd:48:89:46:1d:7a:2d:fb:c6:
         09:33:a2:cf:e8:43:ef:48:67:e9:7b:88:99:07:85:45:e5:0a:
         0e:92:5e:49:5e:13:01:0b:7a:44:16:e3:b3:29:24:2a:a5:40:
         0f:e7:37:a4:cd:7f:8b:da:5d:b5:9c:77:db:7a:34:5f:a8:a4:
         a5:92:e8:a0:96:3a:8e:e8:20:ba:f2:18:db:74:76:63:77:a4:
         96:ff:d6:e3:bd:53:71:e9:17:cc:50:c1:29:d7:3d:ee:b9:9d:
         c1:1b:de:6b:44:31:5a:d0:da:d3:ec:c5:d7:e2:c8:d9:02:96:
         21:9b:2a:bb:66:c4:10:16:2e:cc:e2:76:5e:a9:07:8b:84:c7:
         f7:c1:6e:1d:84:aa:da:c6:14:04:62:77:83:e7:33:d9:65:69:
         0d:01:a6:35:7c:42:e2:24:df:cc:74:98:2c:e4:64:75:00:9f:
         a1:15:70:8a:3a:0e:58:12:b1:8b:a5:b7:5d:24:4b:57:71:e1:
         cb:19:7f:18:78:41:bc:0b:c8:f3:7d:fe:d5:44:42:87:49:a2:
         8f:bb:39:83:d2:5e:2e:cd:30:95:61:74:35:1f:6e:b0:2e:f3:
         03:bc:77:99:28:28:14:e3:f0:63:1d:b6:80:1d:c7:aa:ae:b9:
         e2:8d:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:40 2026 by rpki-client