This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File:                     YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier:          anNz+Cl4aXTLgQn+tdpL9f6OPEarP7HTO3/YEkNMXLE=
Subject key identifier:   EB:17:38:70:01:E1:7A:B0:16:5C:D2:ED:98:8A:00:2C:96:9E:FA:EB
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer:       /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial:       019C432231EE01C4E18F0A8C4A89E3823819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number:          0BD6
Signing time:             Mon 09 Feb 2026 16:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:40 +0000
Files and hashes:         1: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: nDKyyTWiwCqq2UCozFQTu7jwi6l0vJPFI2R9fRcU/HE=)
                          2: a51cXgxKSVntETY6pLsFiKPsOJo.roa (hash: o402E4LpPhqmAP+XyqCG1p/8riR3uOjtyT+/vmwZflU=)
                          3: nADULd3amnYGR0Tr5B09poIsE28.roa (hash: gJvUmAM3aJOUpRMN3qv/5KjDyZgYcOC2qsvGzHbLhP8=)
                          4: qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa (hash: O0H1y3N2wNZcfjYWRzPfGG78Vh6yNgbXWFsd+yyCqLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:31:ee:01:c4:e1:8f:0a:8c:4a:89:e3:82:38:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
        Validity
            Not Before: Feb  9 16:00:40 2026 GMT
            Not After : Feb 10 16:00:40 2026 GMT
        Subject: CN=eb17387001e17ab0165cd2ed988a002c969efaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:5b:ec:75:e8:39:40:c6:c9:16:8c:ac:82:
                    d7:f3:4c:df:bd:b4:5c:0e:c2:86:e4:6a:d3:b3:f2:
                    a0:76:57:c7:24:a2:b3:1e:49:27:c1:f0:66:3d:f4:
                    65:43:14:ee:c3:ac:84:66:bc:00:cc:35:13:16:67:
                    1d:d6:b5:25:01:27:c6:cf:0f:43:16:c4:df:c4:0d:
                    50:fa:23:39:8c:a0:c1:c7:9b:1c:c5:95:85:fd:c4:
                    3e:e9:79:a4:dd:3d:bd:c0:73:8b:1f:fc:c4:a8:21:
                    b1:c4:c2:60:49:93:30:19:c0:af:49:d3:c0:1d:5a:
                    88:8a:5f:fc:61:32:ae:cb:25:6b:b4:cc:96:4a:f2:
                    d0:8e:33:f1:3d:e7:9d:68:36:42:c5:3d:61:54:22:
                    92:6d:be:ab:d8:dd:ab:f5:9d:a9:83:fc:a0:25:ab:
                    33:33:b9:6d:68:fa:04:7b:ec:85:62:65:3f:03:7e:
                    e1:48:e5:55:70:fb:db:2d:b4:25:0d:35:58:a7:8c:
                    dd:40:52:47:8e:a0:e4:43:3d:87:4f:4b:ba:b9:e1:
                    d4:03:23:79:aa:b1:94:27:c3:df:f3:54:c1:4a:f8:
                    6b:2a:08:4d:a6:f4:62:51:5f:20:89:b1:90:93:12:
                    3a:28:16:c1:da:20:cf:a8:78:4c:32:d7:e7:c3:7a:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:17:38:70:01:E1:7A:B0:16:5C:D2:ED:98:8A:00:2C:96:9E:FA:EB
            X509v3 Authority Key Identifier:
                keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:9a:e5:84:ad:bd:91:ad:3b:c9:79:2a:bc:16:1b:85:62:
         bd:ef:5b:f7:04:fe:22:09:5b:1f:5e:3c:43:26:56:09:f3:a5:
         ac:bb:1e:7b:ce:3d:92:a0:e7:57:44:1c:7d:aa:46:e9:5e:d0:
         61:33:c9:37:b4:3d:99:1c:b6:74:3c:0c:66:ed:dc:20:b6:c5:
         72:19:33:cd:71:33:61:30:da:16:74:d9:18:db:1e:fa:b3:82:
         b6:91:f0:76:84:3b:d5:ec:ff:c7:dd:c7:2a:94:1c:ae:ee:2e:
         b6:f7:e5:59:8e:28:53:b6:fa:d0:bd:3c:a9:d2:07:db:d9:ae:
         7b:a6:8a:3b:4b:73:c9:fb:9b:fb:a3:35:5c:73:06:bd:9f:8d:
         3d:75:2f:ea:a8:2c:fb:f5:99:e9:86:72:59:31:af:c8:d8:e4:
         aa:12:6b:57:d7:0a:9b:06:6a:86:85:a3:c1:84:15:df:26:7d:
         c4:c4:73:e7:51:95:c2:53:3c:c6:51:db:8d:b9:61:ea:84:f8:
         0a:c2:a7:69:c9:c5:43:f0:fd:76:bb:b2:55:e5:4b:90:f6:71:
         a6:cb:37:5c:ae:53:a6:22:85:9d:81:ef:39:20:a8:54:76:cb:
         56:e1:2d:93:fa:8a:b2:59:f3:81:ad:bb:fd:da:fb:81:1c:5b:
         58:be:21:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:59 2026 by rpki-client