This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File:                     yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier:          nBrZuIzfI1U1LwzcxmC5txBmMq8WIXiD16hQqbfLffQ=
Subject key identifier:   87:9F:E6:F5:E5:2D:AB:82:80:76:BA:A5:D8:1C:F2:DD:5B:A5:5A:8B
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer:       /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial:       019C439007F93AF34AAED92F21B428C4369D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 18:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:38 +0000
Files and hashes:         1: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (hash: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM=)
                          2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: gIY2fCuEUrsR2/zhtOZyhJvy3wR3yAsb52UKCpJ0Ly8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:07:f9:3a:f3:4a:ae:d9:2f:21:b4:28:c4:36:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
        Validity
            Not Before: Feb  9 18:00:38 2026 GMT
            Not After : Feb 10 18:00:38 2026 GMT
        Subject: CN=879fe6f5e52dab828076baa5d81cf2dd5ba55a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:45:f0:3f:9e:ba:09:99:fb:d1:f1:2f:91:
                    40:8e:c1:fa:8e:b3:5c:21:15:8b:d2:54:4a:37:37:
                    3d:35:2b:eb:9a:45:24:6c:67:3a:05:ae:d5:9e:a1:
                    48:bb:d0:2a:e3:2f:0e:1d:8c:69:5e:9e:b9:1b:7c:
                    ac:bd:32:98:ff:bf:87:29:60:eb:cc:b7:eb:92:d1:
                    fa:2a:f2:26:cb:b9:db:89:a8:56:a9:61:5e:a5:fa:
                    bb:96:28:ca:83:99:5c:92:82:fc:2f:0e:fe:be:db:
                    7b:bb:7e:50:29:01:7e:84:d0:26:91:b2:4d:18:f2:
                    7f:7c:c2:45:1b:84:42:81:ab:69:40:b4:2c:b5:4d:
                    08:08:c2:81:0c:e2:fa:50:14:9a:13:64:c7:e4:c7:
                    9d:48:89:06:4e:59:d5:f0:c3:fe:83:db:1a:3a:b8:
                    e5:cd:49:71:26:95:3e:ee:30:77:ed:34:73:c9:9b:
                    04:0b:d3:fc:90:f7:22:83:72:19:05:ab:35:32:4d:
                    bc:cd:56:0e:20:fa:f2:7c:81:97:7a:ad:eb:82:05:
                    5c:25:f4:44:b1:90:da:55:7e:4c:56:96:dd:b7:65:
                    49:53:92:85:c9:38:4b:2b:4e:2a:65:e8:7f:e1:25:
                    b5:ae:90:f9:97:58:f1:5b:13:93:80:4c:35:8b:31:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9F:E6:F5:E5:2D:AB:82:80:76:BA:A5:D8:1C:F2:DD:5B:A5:5A:8B
            X509v3 Authority Key Identifier:
                keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:47:f8:db:66:82:4b:8f:56:61:c8:95:17:76:98:d0:df:b8:
         d1:0d:40:c2:fd:1c:bf:dd:f6:5a:4a:ae:c8:86:6a:f3:1d:33:
         17:25:d4:fb:04:4d:55:99:3f:f7:42:48:df:2d:2d:9a:5b:c2:
         62:81:84:b0:5a:74:ac:f0:f7:4e:e1:2e:5c:53:44:60:3d:a2:
         cc:6f:15:dd:86:ca:8e:40:0f:01:6d:3c:a1:76:64:ed:cd:c1:
         7b:e6:ce:52:1a:4e:99:1a:c1:f9:6b:ed:2e:01:41:4e:0b:65:
         33:1e:9a:a2:e3:46:5a:50:91:c2:72:fa:7b:86:bb:da:45:1d:
         1b:5e:18:6f:67:23:7c:e0:72:ef:b2:ef:cd:4b:ab:3e:c5:4b:
         60:dc:fc:98:13:6f:bd:ff:8d:2e:0b:00:87:7d:4c:6c:11:6f:
         f9:1b:0d:e8:e8:f6:ab:26:53:37:44:c8:34:eb:8e:02:a0:3b:
         9c:ee:69:82:d9:d5:09:b1:44:a9:da:a3:cb:ea:a0:9f:df:28:
         ac:06:be:ee:85:03:1f:78:83:51:2f:c2:a2:ff:25:fd:04:1c:
         9f:67:b9:1f:95:69:7a:b1:65:0e:c2:36:b3:5e:25:74:5e:8a:
         fe:d1:08:32:ad:5f:69:a9:48:60:b5:1a:cd:11:a2:d0:84:86:
         29:1f:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:41 2026 by rpki-client