This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File:                     YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier:          QBefBjorv6QGsAHH+WX9AHczkm56kkRCfQDPrYDc9HE=
Subject key identifier:   D4:57:01:F7:E5:86:FB:6F:A1:87:16:2C:60:F2:11:65:A2:1F:1D:59
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer:       /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial:       019C44D9D05D2E5439BA029A713DB96987D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number:          1032
Signing time:             Tue 10 Feb 2026 00:00:50 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:50 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:50 +0000
Files and hashes:         1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: bWlHXvsXfsrgXeiAoNdknOeDPFEn4paZ6h/Qosa4fWg=)
                          2: buEP_tZTxcCY5cv35wHnd5QJtA4.roa (hash: kDd7vjY1Gmajtb+yM1iA4kXpv1+b295rNuhM3eEotP4=)
                          3: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (hash: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c=)
                          4: iwCms-jh7sNOnDjyiQ87SCaskPM.roa (hash: F9m0OaxudVEa/uHDWRuOEKekT6jQQYP93RpjR2bYjX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:d0:5d:2e:54:39:ba:02:9a:71:3d:b9:69:87:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
        Validity
            Not Before: Feb 10 00:00:50 2026 GMT
            Not After : Feb 11 00:00:50 2026 GMT
        Subject: CN=d45701f7e586fb6fa187162c60f21165a21f1d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:e6:a2:38:81:19:98:a8:4a:73:56:37:d5:
                    6c:f6:b7:6c:2a:92:5d:60:e2:b8:a5:d3:e6:11:40:
                    2c:ac:54:e1:b6:34:c0:32:d4:52:44:af:a0:8d:f1:
                    76:a5:00:e9:a1:4c:06:f9:39:f7:8b:8e:b0:6e:f9:
                    aa:09:69:8f:49:a0:10:fb:4e:b4:83:05:52:48:b6:
                    c4:71:d3:0b:71:3a:40:72:e0:9d:62:1c:f2:e8:fd:
                    0b:3a:df:46:91:40:fa:9f:fd:95:d8:ac:09:f3:10:
                    6e:f1:aa:33:2c:a5:70:84:60:33:aa:c3:b2:cb:47:
                    36:88:1b:88:47:22:8b:1b:c1:d3:be:6a:af:5e:d5:
                    c4:e2:e8:65:0e:f2:de:48:64:c5:be:26:57:c4:dd:
                    c5:d0:a2:13:90:c8:00:6f:51:66:d6:a2:bf:e9:f7:
                    05:67:c3:67:0a:83:1d:e3:38:44:c1:37:1b:87:2a:
                    09:18:41:fd:f7:c0:9b:a0:b9:f5:e1:b6:23:71:19:
                    e6:67:0a:16:88:60:56:1b:ea:29:e0:c1:cd:37:4b:
                    68:cd:ad:be:19:e2:61:58:2e:7a:a3:bd:6e:e1:e1:
                    f3:b4:1d:b9:bd:19:37:37:28:09:43:26:b8:65:e8:
                    27:a9:98:88:bf:50:60:fb:e3:5a:e0:d0:50:25:09:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:57:01:F7:E5:86:FB:6F:A1:87:16:2C:60:F2:11:65:A2:1F:1D:59
            X509v3 Authority Key Identifier:
                keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b9:40:ac:0b:ab:2f:1e:7a:5c:87:4d:34:96:35:c1:f1:1c:
         c1:ca:38:1b:1d:3b:b4:ae:c3:c7:c2:39:6a:69:e0:36:13:14:
         d8:f2:7e:43:f5:8d:9d:33:24:91:1f:93:33:2c:58:1c:fe:c1:
         55:1b:71:18:5f:3d:0c:ae:ff:79:b8:73:37:a6:79:31:93:b7:
         98:e8:14:96:49:27:78:7c:4f:76:d8:e6:e5:6a:63:72:ef:50:
         65:90:04:a8:d4:5c:9d:0e:bb:43:f0:0a:27:1b:44:16:95:3c:
         66:27:3d:e2:4e:87:87:ed:c1:51:59:cf:f5:e7:a5:bb:d0:0d:
         0d:1f:d4:da:09:fb:34:59:d5:29:dc:81:52:9c:3a:4c:82:af:
         d1:42:5e:83:5d:1b:70:83:ae:0c:a2:2b:73:b9:f8:4d:43:2c:
         82:e7:41:c6:44:9c:87:b4:b5:46:92:b7:9a:9b:c0:3f:44:7c:
         aa:cd:34:63:d3:94:01:49:d3:c8:41:ad:58:5f:20:80:c1:82:
         6e:43:0d:42:e6:f0:72:dc:f3:58:48:39:38:6e:c7:ca:17:7b:
         dc:35:1f:96:7d:63:75:ce:d9:7b:d2:b1:46:6a:a1:f0:44:8b:
         82:77:44:09:aa:94:d4:13:75:92:5b:36:4c:de:dd:3f:c5:a3:
         b2:ae:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:30:22 2026 by rpki-client