This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File:                     yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier:          bh/OCGOwSHQUz8OdJuqKygaEv47VbhIrstg5dbpA6N0=
Subject key identifier:   2D:B8:C5:59:8B:FA:FC:19:06:06:5A:05:CE:B9:48:37:07:65:00:C9
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer:       /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial:       019C41A16E0F5E9FE9B694C5578497F346F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number:          11CF
Signing time:             Mon 09 Feb 2026 09:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:24 +0000
Files and hashes:         1: hhB0IeJBwNyXofg4mPvSau-d9JU.roa (hash: rSR4VGaBwGTXWCnhcTMFNg3NGbcBK7CKNCSrlO5fp2g=)
                          2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: NctV2spnxHO/bicu6hl9dw4nYE2o6ZzciNRhAFXMJoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:6e:0f:5e:9f:e9:b6:94:c5:57:84:97:f3:46:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
        Validity
            Not Before: Feb  9 09:00:24 2026 GMT
            Not After : Feb 10 09:00:24 2026 GMT
        Subject: CN=2db8c5598bfafc1906065a05ceb94837076500c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:25:ac:a6:77:9c:94:71:4f:69:aa:8d:c2:
                    49:79:69:9f:f4:20:0f:e2:c5:1f:b5:89:47:53:09:
                    2c:7e:98:29:12:fd:77:14:28:26:51:23:9b:bc:6c:
                    0b:79:07:9a:1d:e2:9f:dc:a7:28:e6:c7:75:e8:11:
                    c5:3f:df:79:87:df:7d:84:de:2f:84:f4:4c:c0:aa:
                    6d:03:dd:d7:2b:52:26:a8:39:da:1b:d4:ae:68:6d:
                    dc:e2:1a:d3:fa:9f:f2:e3:e5:2c:46:d0:7c:e7:15:
                    e2:20:3c:ee:4d:8e:ac:cd:e4:4f:81:58:35:aa:f0:
                    75:52:f8:14:13:b5:c3:44:70:87:8a:2c:a6:84:1b:
                    76:b0:d7:2e:c0:e3:ad:b6:6f:53:58:9b:91:6d:78:
                    09:65:58:9e:83:12:33:12:bb:e1:2c:aa:03:f3:d3:
                    49:44:6f:96:28:87:76:84:d0:1c:cb:c2:c0:65:68:
                    49:74:9c:ac:7d:cd:1b:80:e9:ed:47:28:e0:e7:fc:
                    18:a9:df:b1:b7:7d:7a:69:46:3b:34:5d:73:5d:6a:
                    17:90:21:9b:a0:ff:d2:7c:89:77:d7:b7:fd:4f:a2:
                    dc:49:04:72:4d:f3:39:ee:ea:0d:b9:09:a0:61:33:
                    94:43:f4:c2:07:78:40:49:23:41:16:84:43:9a:44:
                    44:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B8:C5:59:8B:FA:FC:19:06:06:5A:05:CE:B9:48:37:07:65:00:C9
            X509v3 Authority Key Identifier:
                keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:cc:6e:4a:92:fc:82:36:05:fc:6c:6b:07:9b:4e:b9:a5:
         45:d7:d5:d7:46:57:4c:21:33:61:54:b6:88:1a:f2:29:6a:04:
         01:42:10:17:a4:7f:01:16:c3:72:86:e5:d0:1c:44:a2:c9:43:
         cf:6b:30:2b:04:ca:0b:1d:d1:a2:6c:c0:cd:5e:03:21:f4:c3:
         06:6d:57:35:6e:d8:d0:04:02:3a:a3:aa:b2:b6:2c:a0:89:02:
         67:cc:e3:eb:bb:ff:d2:a9:f5:b0:16:9c:67:be:f6:63:40:10:
         60:93:e2:96:c6:21:1e:e4:57:93:0e:9a:b3:df:37:4c:39:5f:
         cd:b3:6e:a1:83:f0:5f:cc:78:82:2d:ba:e2:3a:0c:da:e4:37:
         75:62:72:13:78:75:41:20:1f:75:93:de:a6:78:3d:e1:5a:f0:
         ca:68:0c:82:2f:46:a0:94:8b:d4:72:db:dd:e6:da:27:0d:4e:
         bb:27:b5:21:54:18:1f:47:60:92:31:cb:e1:76:84:26:5c:a1:
         3c:0c:1e:f6:c0:d6:d8:c4:5e:02:0f:57:e4:f0:2d:a9:20:29:
         73:1e:c3:8e:1d:f4:69:57:cf:e8:a2:1c:0f:1e:c6:f5:dc:1d:
         df:a9:4e:cb:cd:b4:a2:b5:de:a5:54:a7:30:9f:b7:68:6f:6d:
         f8:68:a8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:49 2026 by rpki-client