This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
File:                     Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft (raw, json)
Hash identifier:          iVueRsniuhykScvQr9B8PAjR32dn4O14mzAD0McQNNc=
Subject key identifier:   65:FF:3A:DE:98:8D:A9:15:75:9B:28:E3:7C:A7:FA:F0:90:6D:93:43
Authority key identifier: 62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
Certificate issuer:       /CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Certificate serial:       019C420F7BE5D0C8B7E15E68A701117D14EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
Manifest number:          019D
Signing time:             Mon 09 Feb 2026 11:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:36 +0000
Files and hashes:         1: Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl (hash: 2MejtH23RWGQeMaBNRwTA+t3XQuLqeTLYRH9S5cJDtg=)
                          2: _e_Zokrtlt_aju5Wh034zgAkl8I.roa (hash: +uQejsCjn3rFp2s+ELCiuSbZ+f8sp3uWgsCAiuje2M0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:7b:e5:d0:c8:b7:e1:5e:68:a7:01:11:7d:14:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
        Validity
            Not Before: Feb  9 11:00:36 2026 GMT
            Not After : Feb 10 11:00:36 2026 GMT
        Subject: CN=65ff3ade988da915759b28e37ca7faf0906d9343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:0e:bf:64:20:bb:fb:de:b6:42:87:2b:bb:dc:
                    ab:db:23:f3:2d:20:f8:12:9b:04:68:bd:e2:43:7c:
                    56:82:63:42:5d:5b:09:3e:78:52:ef:0c:3c:b3:6f:
                    06:e9:7d:d6:ba:90:a6:f6:69:e5:cd:55:f9:56:3d:
                    f4:f9:c2:14:12:c3:40:19:1f:f1:0f:37:00:be:db:
                    cb:e1:62:24:56:eb:73:6f:2b:28:59:9c:bb:60:00:
                    65:b7:84:0f:a3:1e:e7:b0:59:99:b1:e2:8f:67:a4:
                    45:05:e2:8e:2b:2a:60:06:64:46:f2:76:75:48:92:
                    4c:f0:fc:e9:85:e9:da:2e:0a:30:a8:8c:be:d3:5a:
                    1b:d3:96:ef:b1:5a:7a:35:29:d7:16:db:c4:99:dc:
                    ed:52:17:95:91:ad:ff:5e:c2:4e:6e:7d:e5:18:dc:
                    b8:9c:5f:dd:c4:b1:d6:f1:84:51:4a:13:47:ca:5e:
                    83:f2:37:06:42:59:3a:73:52:5b:e8:17:c0:82:fe:
                    de:a6:7e:b5:cd:47:3a:dc:92:a1:05:5b:e3:07:a5:
                    06:5b:0f:c8:45:0e:68:73:cb:0e:23:db:16:b8:e7:
                    3d:19:86:5d:be:76:81:e2:38:9f:2d:e0:e2:6c:f4:
                    e8:5d:d1:66:de:59:cb:5a:26:6d:44:e7:55:e8:74:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:3A:DE:98:8D:A9:15:75:9B:28:E3:7C:A7:FA:F0:90:6D:93:43
            X509v3 Authority Key Identifier:
                keyid:62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:7f:fd:29:94:e0:8c:f1:93:0c:90:c7:2c:af:78:9e:f8:
         68:93:08:ce:d3:2e:e3:6a:9d:02:39:fc:82:71:3d:5c:54:a8:
         18:82:e7:df:56:7e:17:f3:eb:d8:55:9a:d9:7e:1e:3a:d3:0a:
         94:03:68:a1:8d:64:d8:77:ad:6c:35:6a:55:18:f2:89:14:5d:
         86:98:01:05:52:71:81:12:9e:70:89:a1:5d:ff:27:36:78:35:
         0c:e5:d2:d2:13:85:b9:a5:ee:88:c7:5b:c9:e1:31:5d:54:08:
         71:fc:1b:2e:53:69:3a:6b:a0:4f:37:72:ec:50:dd:56:4e:f3:
         70:a5:85:bc:45:c5:31:40:d7:7c:c6:e6:2c:40:4a:bf:0c:b2:
         c2:83:bb:5d:d6:48:9b:94:23:5d:1e:67:82:15:45:d3:a1:fb:
         65:ec:af:c0:1e:6d:f3:be:7c:1b:83:92:fc:0f:d8:23:b7:e8:
         fc:b6:97:da:24:96:ce:8a:3e:b2:69:47:3d:87:c0:32:01:88:
         50:43:76:5c:f0:6d:d9:0d:d1:2e:50:15:67:1d:fc:81:a3:13:
         e4:af:a7:61:64:25:75:40:5c:7a:02:e4:e2:d6:b4:ad:d8:38:
         5d:ad:f0:8b:63:29:70:43:37:d5:95:04:cf:9e:64:7a:92:b8:
         9f:a7:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:28 2026 by rpki-client