This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File:                     yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier:          tbe3t009hNug3NByxzkepQtgL5/3U0+Nrt0wbx/TQ3s=
Subject key identifier:   54:7C:98:A5:60:3B:82:C3:60:52:C1:9C:77:AE:36:22:01:86:A5:DC
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer:       /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial:       019C420F9C6E926604ADFF0CB3D7284CA611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number:          179E
Signing time:             Mon 09 Feb 2026 11:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:45 +0000
Files and hashes:         1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: +IJeLTZNhyF3rOSIttiOiCqQm3slWYPXUOcc7Un6hhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:9c:6e:92:66:04:ad:ff:0c:b3:d7:28:4c:a6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
        Validity
            Not Before: Feb  9 11:00:45 2026 GMT
            Not After : Feb 10 11:00:45 2026 GMT
        Subject: CN=547c98a5603b82c36052c19c77ae36220186a5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:98:17:d5:46:39:bf:82:22:88:c3:9d:65:
                    73:91:ca:9e:5d:bf:cc:6b:86:c3:4c:19:c1:63:a0:
                    67:21:0a:8f:0c:2d:37:2b:3a:f9:dd:bf:cc:f2:30:
                    a0:f3:3a:be:56:95:04:ac:a4:d2:bc:6f:7e:61:10:
                    b1:d3:b3:af:fc:b9:7c:dc:f2:4f:ce:3a:16:76:04:
                    66:c1:d5:04:74:a7:40:88:7d:06:23:93:6d:c4:35:
                    be:97:27:28:04:0a:23:8b:46:61:39:36:93:71:8a:
                    ee:d4:f4:d6:6f:c0:dd:e6:16:66:31:44:82:a6:c6:
                    61:75:9a:01:8a:46:fe:a2:e4:76:1b:e3:2d:45:fa:
                    4e:4e:68:60:74:93:11:43:0f:f9:ef:07:cd:19:c7:
                    8b:db:d4:1e:db:e1:dd:21:54:9f:16:26:f0:5c:c8:
                    af:7f:06:5b:3d:b1:93:08:56:b7:af:a9:b9:e9:dd:
                    b9:a9:b9:0f:a7:20:25:70:29:20:fa:7a:a0:dc:bf:
                    15:fb:66:24:9f:f6:70:9b:80:6c:e8:0d:f9:83:35:
                    ae:db:ca:5f:7a:1d:08:fa:14:e8:32:05:06:6a:12:
                    56:cf:cd:09:df:1c:39:4f:f6:8a:0f:48:43:e9:4e:
                    5d:7a:0d:2c:d7:13:13:09:6c:bf:ef:cd:1d:78:6f:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7C:98:A5:60:3B:82:C3:60:52:C1:9C:77:AE:36:22:01:86:A5:DC
            X509v3 Authority Key Identifier:
                keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:40:b4:be:f9:f2:31:93:e4:64:f0:bf:49:b1:84:bb:77:4e:
         d5:cd:3c:aa:d0:c6:1e:76:47:6e:1c:cb:52:6f:63:19:0e:95:
         78:ed:a7:cf:c7:5d:30:0e:c1:e8:d3:6a:e5:ef:58:0a:63:82:
         12:0c:38:9f:05:7a:0b:c2:48:17:ba:03:31:dd:6d:cb:f1:6d:
         9f:1c:17:02:28:bb:2a:65:42:98:bf:96:9d:4c:80:5f:8f:8f:
         2b:d6:ec:a1:fd:c9:47:34:85:ab:03:c2:ea:6b:20:ba:8a:15:
         4f:67:c6:0d:83:74:50:0e:e0:e6:d4:70:cd:d3:2a:a7:c6:da:
         9e:bf:42:07:7c:67:60:ec:f1:a8:95:c3:8e:95:eb:24:bb:29:
         76:8d:4d:76:41:59:66:ee:f0:5f:2f:42:26:fd:a8:bb:79:ab:
         8b:ac:8b:38:55:d6:2a:58:a4:7a:ff:11:40:ce:e0:c9:c3:1f:
         2d:8d:e4:9c:a2:ef:97:10:8a:f2:7f:92:ae:4a:fb:1f:fa:ba:
         56:c8:02:e8:4c:6d:63:33:c9:a8:48:21:cc:1f:bf:ee:bc:7d:
         c0:ce:3b:34:74:bb:2e:07:f7:73:89:ac:ad:5f:cd:1d:28:a6:
         b9:4b:fc:a0:7e:d1:1b:f9:0a:18:13:e4:d7:3c:4c:d9:58:af:
         6e:c5:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:50 2026 by rpki-client