This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File:                     YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier:          1+fdHE1F64DqgcEwsNAdhsemskYDgF0CmiTUiUrrREM=
Subject key identifier:   28:62:D4:BF:6B:19:5A:24:0A:1D:0E:CF:19:B8:04:B6:4A:85:E9:BB
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       019C1BA72D4121879C82D00C9BB6C23E5352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number:          1806
Signing time:             Mon 02 Feb 2026 00:01:06 +0000
Manifest this update:     Mon 02 Feb 2026 00:01:06 +0000
Manifest next update:     Tue 03 Feb 2026 00:01:06 +0000
Files and hashes:         1: 1-CQYobvcQG21mAnMiaW7vyH7CXY.roa (hash: F30Qwwm1mnG4O3FtxSySy1RIR2PJUKOcNn6fyL1ZO8E=)
                          2: Q8ZPUdn-YmcTmBwAi_7GVX9YQUw.roa (hash: kBU03x/ocDiC2CPd5HE27yOrt08fP6gCbdih5TdOqEQ=)
                          3: Sy7wu7HbvDyeRA19AagewX8X6a8.roa (hash: 3GBSbUmpYJlg9KE6xgU1mWhmKjjwIsWji4O9OpkK8H8=)
                          4: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: Q5xNKP2DlCCPD7xBhv/GzOdtJ9XpqDiGmrGvolyrF0A=)
                          5: bdnGFt0hHzKvmqEY93Eh959DQNM.roa (hash: Uc8DaiaZyUQDwe1ODSCGoQeREP5FCzxxss2vrZnDmR0=)
                          6: lqsLALggP8BPfl8pdq3Xpv8eVgg.roa (hash: bdexZFMhJLX7gjQGkdBbU8UkKwrPdu12kMoaVc9RB3s=)
                          7: ruyO6zUfbaRsGVkfFZtSsnxMh1s.roa (hash: zoSCjiMf6V8kppFFwtfWmMhnEG6ujkudnMTWLbB1XSc=)
                          8: xkh0_qQROZrSh7wQT28dLg374SY.roa (hash: DYUAA1oa5//rqv0OvMnn2Z1Gp+Lzbo3Hx+khO/MXiMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a7:2d:41:21:87:9c:82:d0:0c:9b:b6:c2:3e:53:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Feb  2 00:01:06 2026 GMT
            Not After : Feb  3 00:01:06 2026 GMT
        Subject: CN=2862d4bf6b195a240a1d0ecf19b804b64a85e9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:1f:0e:38:f3:62:72:92:43:05:29:56:5f:
                    89:dc:5d:56:a9:e5:02:52:11:98:8c:fb:5e:81:e1:
                    fc:c7:73:4c:f3:f0:04:5e:e6:a0:ed:85:56:b6:b3:
                    3b:08:c6:fc:b5:b7:5d:64:a8:01:b5:12:17:6a:01:
                    a5:7a:6d:a2:f2:8e:8a:83:d5:22:0c:aa:a2:8e:e0:
                    47:74:58:39:59:4b:8e:0d:5c:5b:36:39:db:2c:b0:
                    a2:7c:f5:19:5e:0b:7b:a3:76:5f:4f:96:a9:b2:4c:
                    d6:2b:cb:00:9e:55:dd:23:08:d5:e3:ce:c2:9f:2f:
                    d8:cb:22:2b:16:48:b0:41:0c:47:6d:a9:40:34:1b:
                    ed:72:90:94:40:06:86:6e:7b:aa:5e:55:3a:2e:80:
                    06:7d:ac:96:a0:bc:88:45:4f:13:b3:bd:c3:5a:62:
                    22:8e:da:bf:5a:a9:67:88:f7:0b:91:d3:8d:36:e8:
                    41:e4:b6:17:51:b5:c3:1c:90:bb:e4:0f:1b:fa:92:
                    d0:17:c3:ea:ef:24:19:76:ab:a3:2a:96:d3:ee:8e:
                    7b:8d:6d:55:f7:83:08:ea:59:5b:4f:5c:47:27:ad:
                    3b:eb:33:16:73:4d:de:da:b4:e7:63:7d:1e:11:87:
                    e7:b0:02:32:c8:8c:94:9e:63:a3:43:e9:8b:23:03:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:62:D4:BF:6B:19:5A:24:0A:1D:0E:CF:19:B8:04:B6:4A:85:E9:BB
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e4:db:c9:a1:5a:83:f1:ed:b7:65:52:a3:60:42:88:26:e0:
         e9:0b:48:fd:53:d8:3a:b4:ee:eb:0a:bc:9b:0b:f9:a2:78:6d:
         97:04:1e:81:b4:95:68:da:26:b6:26:2c:26:05:c0:52:40:0c:
         27:4d:03:9d:64:94:5b:73:7c:9a:2d:de:91:72:8c:38:48:35:
         02:bd:21:15:e2:43:bf:3a:c8:e4:cf:1c:c8:0d:32:c9:5e:de:
         86:25:7e:c2:3c:59:54:40:cd:75:2c:10:c3:75:d6:f0:89:e5:
         89:df:b6:bd:24:29:24:ac:16:0a:eb:82:1f:a1:df:e7:d5:15:
         0f:a8:72:16:c5:80:c1:03:6f:48:85:12:14:a2:0a:17:5b:2f:
         63:0c:51:47:48:eb:51:5e:5a:e4:9c:68:86:4e:dd:c3:51:fc:
         48:e6:93:29:70:b5:95:d8:52:c0:72:22:67:71:7f:dc:c8:ac:
         5b:42:10:00:19:8a:93:da:5d:a0:1e:d6:82:f6:5e:58:01:b7:
         62:8a:4e:f3:4a:5c:8c:12:35:8d:9c:18:b5:79:79:f5:9d:de:
         50:03:ea:e0:fc:b6:36:77:d7:d9:ae:85:3f:9b:13:67:f1:a1:
         56:bc:5a:af:2c:6f:6a:11:fe:18:d4:43:5b:c5:d8:3d:03:91:
         a7:ac:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:24 2026 by rpki-client