This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File:                     YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier:          VneouV6eWxeEzMtdoS+rM3fG7Y4QFvP9wI6EOr3WOUY=
Subject key identifier:   C9:5C:83:7E:C5:00:08:6F:D7:86:D3:86:98:C4:46:2B:ED:4F:0E:9A
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer:       /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial:       019C40FD0E84CA4BB1FF18155A150E977B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number:          054A
Signing time:             Mon 09 Feb 2026 06:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:51 +0000
Files and hashes:         1: 0i_alcfMXBsM8Yz7Pmg1_JjXkOU.roa (hash: MMsMTbsCqDU1LtCGJGBX/vBCIrKWQpXi11BOEfnfMFE=)
                          2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: Li2uv0m3vci8Lu1Ndvq4ngy1f6qnS52aaWXTznt1pHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:0e:84:ca:4b:b1:ff:18:15:5a:15:0e:97:7b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
        Validity
            Not Before: Feb  9 06:00:51 2026 GMT
            Not After : Feb 10 06:00:51 2026 GMT
        Subject: CN=c95c837ec500086fd786d38698c4462bed4f0e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:9e:4d:44:c4:61:32:3b:1a:b1:1d:4f:9b:
                    97:55:58:8a:fb:31:e4:02:b4:ae:7b:bb:fc:6e:7d:
                    61:77:5b:e5:b9:0b:87:32:41:62:d6:ce:36:20:da:
                    d3:2c:ad:7b:3f:eb:16:ca:76:65:0c:ec:b5:d4:22:
                    91:8f:c8:c6:11:90:e8:7c:23:de:6c:18:a3:d4:68:
                    f6:fc:93:b9:0d:00:9e:54:9e:8c:50:aa:dc:cd:3a:
                    a6:5a:21:76:b8:51:dd:7d:9f:99:b1:a7:30:89:82:
                    c9:f6:45:e7:99:3a:4b:57:fd:02:05:af:9e:6c:0e:
                    4a:fc:5d:74:ba:30:4e:1b:52:40:88:37:1e:90:9c:
                    c1:6a:cc:ef:4a:6b:b2:aa:b2:71:c7:07:d9:ea:ab:
                    05:1e:d5:c7:69:42:96:fd:af:be:b5:fc:54:55:35:
                    25:33:c4:6c:c7:c3:04:ad:7b:7a:5b:12:6f:09:e1:
                    8c:77:ac:ed:47:d2:e7:71:cf:dc:4f:06:ca:56:e6:
                    66:b4:f2:fb:b5:43:5d:ba:91:d0:1e:8e:bd:a6:08:
                    c6:2f:a0:79:b2:1d:87:23:e2:43:9c:b1:f4:db:fe:
                    39:20:62:0e:4d:50:8b:a6:98:2f:f6:87:00:90:21:
                    52:fc:58:04:b5:46:fe:b2:21:af:1d:f5:69:26:5d:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5C:83:7E:C5:00:08:6F:D7:86:D3:86:98:C4:46:2B:ED:4F:0E:9A
            X509v3 Authority Key Identifier:
                keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d1:78:21:a7:1c:04:a0:ea:01:95:f4:62:de:97:a0:3a:fb:
         b0:09:05:73:56:74:f6:ea:79:e6:1f:17:64:95:77:10:59:2d:
         d8:97:d0:76:5c:f8:03:10:31:57:76:71:15:1b:f3:34:37:af:
         32:97:d6:6e:62:2c:26:4d:c3:ab:e7:c1:a7:0f:c5:aa:89:24:
         a7:34:c3:25:4a:5f:f0:b0:3a:93:4f:2b:c9:7d:74:24:9b:af:
         7e:98:e9:aa:3f:ff:40:d8:d9:f3:84:2c:53:b5:93:58:7b:8f:
         6a:f7:3a:0e:bc:fb:4b:89:7c:b0:f4:b5:78:1f:87:91:07:f4:
         a0:4f:fb:c3:4e:fc:72:11:6a:3f:d7:32:ee:fc:f4:55:b6:88:
         39:37:de:b3:18:a7:5b:c3:ab:4e:09:9e:cb:d8:76:ee:97:a5:
         17:15:a5:52:31:88:fc:3b:c6:33:33:92:7e:ef:fb:61:23:b7:
         41:0c:d6:20:8d:5f:d5:a1:f4:ce:c4:77:a7:27:3b:16:a4:75:
         7a:87:a9:ce:ff:bd:86:b7:77:88:74:0c:87:e5:13:e7:e1:ca:
         b7:b0:c7:8d:08:87:ec:4e:9f:a0:a6:a1:72:d0:3f:ef:6f:ac:
         79:39:90:2e:21:b6:6a:cd:e6:ff:09:53:a6:f2:c1:4e:b6:09:
         0e:18:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:54 2026 by rpki-client