This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File:                     s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier:          Rk+qc1/3ZrIIbTFXuvf1gkP8z3UWWClVJs7QvuEr0uY=
Subject key identifier:   26:E0:33:6B:13:EA:4F:FF:49:DE:60:4A:76:04:37:A9:B0:12:91:B2
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer:       /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial:       019C427D8CBC8BDE96A68DB4A53375D998AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number:          0AEF
Signing time:             Mon 09 Feb 2026 13:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:49 +0000
Files and hashes:         1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
                          2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
                          3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: McLx4noHV2qZCDoNpuzJggVHFMhY7STo9v0pHZWc22o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:8c:bc:8b:de:96:a6:8d:b4:a5:33:75:d9:98:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
        Validity
            Not Before: Feb  9 13:00:49 2026 GMT
            Not After : Feb 10 13:00:49 2026 GMT
        Subject: CN=26e0336b13ea4fff49de604a760437a9b01291b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:5b:c1:de:ab:ee:c7:c2:df:b4:d9:72:38:
                    7b:56:6d:cc:ea:db:06:0e:f0:c5:13:b5:8d:07:b6:
                    2b:8f:48:fa:44:67:c6:24:98:eb:e1:be:16:91:a5:
                    2b:85:70:79:1a:cc:a3:b0:79:1d:a8:4b:51:ba:fc:
                    84:b8:5a:77:f5:24:87:d5:d2:1c:16:5d:27:d8:f7:
                    33:85:8c:4f:9f:81:b0:a9:25:81:75:33:be:83:d0:
                    a5:1b:43:fc:c2:3d:94:ae:5c:e0:84:75:1d:de:f1:
                    80:77:19:6a:38:e9:7b:6a:ac:61:a4:91:16:c5:45:
                    95:4a:20:cc:17:0c:00:ea:8a:f8:1e:16:5c:e7:65:
                    b8:17:67:f8:eb:9e:32:b4:ff:05:5e:d9:5f:21:e2:
                    0a:19:ae:35:bb:e4:5b:fe:d0:16:94:6c:c0:a5:ec:
                    69:fb:49:f7:03:cb:3a:76:01:80:1f:ef:ba:d2:93:
                    88:25:5b:94:c0:77:15:58:45:35:71:a0:37:cd:f0:
                    3e:69:a0:ca:30:35:59:75:4d:49:2d:f1:9a:08:88:
                    58:b3:82:46:5b:6f:dd:5c:2e:b9:13:07:6a:31:35:
                    f5:6c:d6:b6:0e:ab:7a:84:63:ab:e5:a7:67:8b:4f:
                    f2:7d:fa:9f:cb:dc:25:c6:aa:f8:60:bd:2c:aa:b1:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E0:33:6B:13:EA:4F:FF:49:DE:60:4A:76:04:37:A9:B0:12:91:B2
            X509v3 Authority Key Identifier:
                keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:ed:ca:fd:e9:0c:23:5d:ad:c4:31:f3:26:e3:d5:ab:ca:
         26:f2:43:0f:78:62:1b:b6:d0:b8:3d:55:26:ed:4a:25:44:27:
         97:09:a0:cd:4c:79:71:4c:da:ab:68:24:e7:a8:cb:27:77:cd:
         bb:94:39:db:b9:d7:05:17:83:41:9d:c0:84:32:26:68:1a:e0:
         1f:e0:b5:2c:5f:ff:b9:e3:ca:3d:e0:6c:31:ba:26:de:4a:09:
         8b:be:9c:c4:da:e3:88:09:56:52:74:cf:bb:46:44:db:83:16:
         ce:53:f6:cb:ba:23:d4:0d:f3:a9:6d:59:76:bc:9f:a8:63:eb:
         92:fa:cd:f8:db:49:fe:e1:43:29:91:21:be:d7:10:e7:65:d8:
         3a:c5:84:2c:75:5c:48:63:a6:32:58:12:55:d7:7c:e3:e8:eb:
         32:e3:33:fa:5d:56:b3:21:34:9f:db:48:73:42:5c:f3:f9:05:
         46:fc:f2:f2:27:c0:dd:a1:0c:f0:f8:17:ec:81:e6:c9:c2:c4:
         78:87:13:a9:42:4f:3c:98:fa:62:16:4e:95:08:86:7f:8f:65:
         09:88:da:c5:c9:df:d7:f4:17:cb:59:2a:91:30:37:c7:25:dc:
         16:75:de:33:2b:40:49:05:0d:05:ce:88:76:e8:3d:6b:cc:5e:
         e7:8a:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:34 2026 by rpki-client