This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
File:                     YbcgLJIwwolFDtWmKxc2mgZZvGs.mft (raw, json)
Hash identifier:          gXHwM6MDJBrKf2vJyJNAwvAZGeJzjcIDA6FpJGRlOWM=
Subject key identifier:   D0:D8:8C:59:E4:8B:C5:56:FA:E1:99:AD:59:01:56:20:F8:93:71:53
Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
Certificate issuer:       /CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Certificate serial:       019C43902D10DFE178C705CA1F38197B1CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
Manifest number:          0AB6
Signing time:             Mon 09 Feb 2026 18:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:47 +0000
Files and hashes:         1: H8_4w92WXuGkctjlJERZEe-5K34.roa (hash: WmS53pHwBk98gkS34NpilrfE1ZVelLUsA8l48EKHH6c=)
                          2: YbcgLJIwwolFDtWmKxc2mgZZvGs.crl (hash: FmF0rfkZOKPo5QbY/rEffyy8k7Wo2+FPHOvr+TeZp+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:2d:10:df:e1:78:c7:05:ca:1f:38:19:7b:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b
        Validity
            Not Before: Feb  9 18:00:47 2026 GMT
            Not After : Feb 10 18:00:47 2026 GMT
        Subject: CN=d0d88c59e48bc556fae199ad59015620f8937153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:4d:54:9b:23:9b:52:21:4e:f3:13:0d:88:
                    ce:0a:36:7d:75:77:26:fe:be:f2:9b:a7:6b:7d:74:
                    35:3b:bf:07:8a:e7:d4:3c:20:49:ea:5f:55:02:2a:
                    66:0f:1c:bc:96:44:04:0c:e0:9e:0a:2c:5c:69:1b:
                    bb:bc:5b:74:6d:b3:57:c2:01:10:e2:73:ba:37:ff:
                    52:29:48:0d:9f:13:77:7a:85:2b:bd:36:1d:46:93:
                    b5:70:3e:15:4d:1c:1a:ef:8e:18:af:75:05:7b:f6:
                    11:f4:73:11:0b:2a:cb:93:c1:bc:3b:0a:f5:dc:d0:
                    d5:72:1c:b6:ce:33:af:c7:3d:79:d3:8a:88:29:a4:
                    b3:40:9b:49:3e:8c:ad:bd:8c:da:ff:42:73:06:2b:
                    75:52:3b:6c:75:80:b1:6a:a3:a7:82:13:66:ce:09:
                    c2:9b:41:d6:39:7e:59:ec:06:b3:b4:b5:c8:35:cb:
                    2c:a1:0f:14:2b:ce:af:4c:bb:34:95:2d:e9:49:59:
                    a8:f6:6f:80:72:ae:bd:fa:53:8d:00:1d:a4:c0:b1:
                    61:ee:6b:25:95:b1:95:ed:ab:f9:0c:99:f4:fc:0e:
                    89:55:d8:b3:3e:91:07:d9:fa:e0:5f:e4:62:c8:c9:
                    99:ca:e1:c8:87:66:6d:89:27:02:be:2f:45:38:f8:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D8:8C:59:E4:8B:C5:56:FA:E1:99:AD:59:01:56:20:F8:93:71:53
            X509v3 Authority Key Identifier:
                keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:9d:a4:8f:74:5e:2f:9e:c1:5c:b5:d8:17:d7:53:31:6d:
         65:71:6e:f4:be:fb:66:7d:9c:1b:77:c2:9a:02:01:37:f0:60:
         11:96:b2:ea:df:ab:9e:04:0e:db:a6:fa:34:98:0f:90:a1:06:
         53:cc:05:40:8a:b6:56:69:05:1f:f3:c3:79:fc:66:04:5c:d3:
         98:93:d4:87:a9:f6:44:44:d6:e0:94:30:5c:f3:c9:27:89:4c:
         8b:d1:11:27:ce:0b:52:c4:0f:10:44:65:64:44:fa:b1:60:4c:
         34:3c:54:84:b7:08:bc:35:17:05:6d:45:f7:45:0d:dc:f9:27:
         60:3e:13:ce:cf:5a:d0:cb:f7:7b:2a:9a:f5:b7:ee:7f:d6:4e:
         c3:4e:6f:c5:5a:fa:57:b1:b8:13:f4:50:5b:41:5e:55:11:db:
         ba:89:b1:57:0a:fd:ab:86:3f:f7:90:3c:07:30:8d:91:b0:d6:
         f8:08:8c:19:d3:58:45:84:1c:77:5b:04:09:03:fb:e5:4f:ee:
         3e:92:5e:e3:19:a7:57:dc:c4:26:fd:ab:66:b7:88:65:04:1c:
         6b:19:f0:6f:74:84:4c:37:40:64:30:29:4c:a3:13:26:67:49:
         da:83:05:82:b9:01:3a:6a:72:ce:01:e2:3c:93:96:03:5a:5d:
         70:84:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:18 2026 by rpki-client