This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File:                     Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier:          8Nygut1fGCKzRVpHzW2VAyQP6fjLBUzuAd/APmFs60s=
Subject key identifier:   C8:1A:62:B0:18:90:42:E0:07:C3:47:D4:84:BE:3E:4E:BA:3D:E6:CB
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer:       /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial:       019C43230DA743704FE044B5BD8F53536D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number:          0CE3
Signing time:             Mon 09 Feb 2026 16:01:36 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:36 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:36 +0000
Files and hashes:         1: HySy1-w259OtwsCg5swN-VwOsIc.roa (hash: tvVWnwmA44Tb3dPv6zXdwof7x/dRGrZDDRwKxiajQCQ=)
                          2: Sc_1GNWpnruRCO8C0dbP_tb3_Jk.roa (hash: D32roY9At7ZQDFO2xjIH7ea8DQkPVsoFzPeqmrWzK3I=)
                          3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: s9t/pCLzOgnPYnOUses0bFjqDyOoO41ktfoU42TK0JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:23:0d:a7:43:70:4f:e0:44:b5:bd:8f:53:53:6d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
        Validity
            Not Before: Feb  9 16:01:36 2026 GMT
            Not After : Feb 10 16:01:36 2026 GMT
        Subject: CN=c81a62b0189042e007c347d484be3e4eba3de6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:4c:60:63:e9:d6:e4:30:1b:1a:ae:ac:1e:
                    a7:ae:44:af:44:ab:10:f7:49:1f:ba:95:36:0e:1f:
                    d9:31:43:cf:bc:09:0e:77:46:03:e2:20:9c:0a:ba:
                    a1:e5:5c:99:46:5a:29:8e:6c:5d:79:e6:a2:d5:46:
                    71:bb:b2:ec:9e:23:02:aa:13:67:28:69:f8:e3:54:
                    00:52:e3:20:86:f6:aa:c9:c1:7b:5c:63:8f:77:27:
                    19:5e:41:1d:d7:00:d5:fe:93:d0:1a:36:f7:27:60:
                    a0:2c:0b:fd:3a:96:4f:d5:38:97:82:25:87:73:c4:
                    37:06:86:c5:80:4a:d3:b5:a2:16:76:0d:a8:83:c3:
                    b6:ed:4c:8f:d3:ab:63:a5:09:a8:26:64:5d:37:99:
                    c5:ba:af:d6:c0:a2:e4:17:34:3d:b4:79:83:4a:ae:
                    62:21:41:3b:e5:1f:33:d5:ad:10:5b:4a:22:1b:fe:
                    37:73:df:1f:b9:f1:19:43:fb:f5:ca:69:13:b6:da:
                    25:ea:08:69:4d:86:78:85:16:c7:33:70:40:71:a4:
                    90:20:3b:dd:fe:b5:24:e2:21:dc:43:ff:83:6a:73:
                    97:b3:a8:86:51:44:ee:6f:ab:33:8d:d0:7a:8f:0a:
                    cc:8f:1a:6d:75:22:ff:f4:aa:f2:ec:db:42:26:76:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:62:B0:18:90:42:E0:07:C3:47:D4:84:BE:3E:4E:BA:3D:E6:CB
            X509v3 Authority Key Identifier:
                keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9c:d6:03:33:f3:e0:90:47:85:62:36:46:45:41:ec:bd:7b:
         4f:fd:f0:3e:2e:28:76:25:ba:21:e0:0a:22:15:ca:46:b7:d2:
         c8:9b:34:4e:70:8e:4c:f0:07:60:33:f4:35:30:ce:ee:23:bc:
         5b:54:30:fa:e5:df:b4:2d:89:d9:16:66:1d:7f:1d:07:0a:42:
         6c:e2:06:a1:fb:c6:c4:6a:f4:25:5e:72:3a:79:aa:6c:9f:28:
         1a:cf:bd:76:10:7a:39:b1:08:49:4e:d2:4e:92:77:1c:a6:8f:
         a4:84:5b:13:81:66:ae:31:04:29:8e:e2:94:65:a1:f8:dd:78:
         41:56:00:35:96:b1:59:ef:6e:28:23:fb:b7:3a:c1:8a:51:e3:
         29:7f:1e:6c:7a:09:b2:22:3c:ad:e4:f5:28:b0:7e:a3:ba:bb:
         38:51:00:52:aa:17:8a:db:28:78:ec:66:36:0f:b3:0d:51:06:
         46:6c:d6:52:47:f1:d6:ef:3d:19:9d:ef:20:a8:37:b7:ea:37:
         aa:35:63:bf:d8:99:21:7f:7c:f3:e3:58:8b:53:b7:66:55:fa:
         74:5f:dc:af:f5:94:6e:c6:b0:60:43:5d:31:68:fa:fb:d2:5f:
         dc:9a:8c:55:d1:56:f9:d4:8e:b2:c3:d8:bc:00:8f:32:a8:85:
         c3:79:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:29 2026 by rpki-client