This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File:                     p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier:          Vy4Qqljh7ockXaph92Cmvn6ot2WCjMnHieiGPl/cRdM=
Subject key identifier:   54:05:0C:1E:F6:B4:EC:30:04:08:7D:B4:13:5F:78:A2:5D:45:C6:0E
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer:       /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial:       019C424654FF215935088BF00FB62A70A578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number:          0909
Signing time:             Mon 09 Feb 2026 12:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:31 +0000
Files and hashes:         1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: V+BIekqR+mlcW+PMFbxgq2oDpC6zRywso5THfFNXIm8=)
                          2: zIBznsYExuvGAYxMF0vlek62MTA.roa (hash: HZnWy7k6mRkdORmyH/fBqEuQQJtdSt6XxYg73qEplO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:54:ff:21:59:35:08:8b:f0:0f:b6:2a:70:a5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
        Validity
            Not Before: Feb  9 12:00:31 2026 GMT
            Not After : Feb 10 12:00:31 2026 GMT
        Subject: CN=54050c1ef6b4ec3004087db4135f78a25d45c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:0e:20:b8:60:61:45:c0:85:e7:4c:a9:48:
                    3b:43:4c:70:1c:e5:95:3a:a0:86:89:69:ea:03:0d:
                    96:ca:fb:d8:c8:40:3f:09:40:e4:28:e3:31:6b:34:
                    af:58:a7:a6:6b:69:33:20:6d:fe:ca:d8:6b:89:21:
                    26:13:6d:c0:01:f6:62:e6:96:a5:a7:5f:a7:fc:53:
                    8e:c8:0b:d0:2d:d8:36:7d:57:67:4a:4d:63:ec:54:
                    36:d9:68:27:c7:6f:1d:5c:f0:fa:f4:12:95:27:97:
                    53:dd:25:ce:c5:6b:5b:83:56:6e:99:d5:50:98:ab:
                    4d:cd:66:56:40:3b:24:65:88:2d:c8:25:34:0e:67:
                    93:9e:ba:e3:26:08:13:f8:d1:0d:7f:6a:6a:53:8d:
                    1f:c4:73:e6:99:20:23:3f:23:e9:f2:44:45:c4:46:
                    9d:96:07:6d:92:a0:ab:ac:cf:3d:84:68:1b:01:e4:
                    2a:e6:54:02:8f:a4:37:f7:eb:28:f7:cb:f1:c2:1a:
                    56:21:5c:1e:67:3b:16:06:7b:87:8e:63:ca:81:c9:
                    9d:7e:c2:13:ee:3b:a5:d4:eb:01:2d:3d:9b:9e:c0:
                    f1:37:ba:a6:e9:e6:5e:32:b9:44:cf:00:b1:47:fb:
                    04:9b:4b:26:5b:50:09:00:73:3f:ee:87:2c:07:99:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:05:0C:1E:F6:B4:EC:30:04:08:7D:B4:13:5F:78:A2:5D:45:C6:0E
            X509v3 Authority Key Identifier:
                keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:4c:a2:fe:d7:04:35:06:a0:56:f5:5b:4c:1c:24:72:01:
         b0:97:86:0a:1f:cc:22:28:2c:46:01:21:60:1e:f8:af:25:7b:
         38:a5:62:4d:cd:5c:85:a8:e2:86:9e:58:0e:b3:8c:d8:92:89:
         44:de:b7:8e:c5:58:49:bb:7e:d8:c2:70:46:34:fe:8f:1b:00:
         66:f4:32:c7:39:56:37:be:d8:34:c4:20:3b:47:e9:ef:3d:53:
         36:27:2c:d4:3e:49:df:3d:55:b3:f9:cc:45:73:b7:0a:74:d2:
         d6:5b:ed:30:a8:3b:82:15:24:b0:db:7f:73:79:a5:6b:b5:ad:
         24:bb:2e:7e:9d:5d:a9:ce:cd:ad:a8:c4:34:1c:42:aa:12:13:
         f5:f1:79:79:9f:93:d1:db:bd:15:d3:01:cb:e7:31:87:10:26:
         30:aa:16:d7:6f:7e:37:b5:6f:4e:72:01:72:7e:1c:80:dc:a7:
         07:ac:48:90:11:37:23:7e:52:e7:a7:4e:6c:b1:e2:af:61:c2:
         1d:94:9d:05:00:9e:39:24:2e:cc:6d:ea:40:a7:55:52:a5:4a:
         9d:c1:e9:26:8b:cf:58:8f:7c:44:8a:bb:e5:d1:9e:6a:00:28:
         67:13:bc:96:20:0b:7f:83:20:83:6d:d5:e4:8c:38:77:19:7e:
         4d:4d:15:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRlT/IVk1CIvwD7YqcKV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjYyOTE2MTk3Zjc3OTZjZWM1NzhlYTQzNTJmYWU0ZWY4
OWFlYzIwHhcNMjYwMjA5MTIwMDMxWhcNMjYwMjEwMTIwMDMxWjAzMTEwLwYDVQQD
Eyg1NDA1MGMxZWY2YjRlYzMwMDQwODdkYjQxMzVmNzhhMjVkNDVjNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrMOILhgYUXAhedMqUg7Q0xwHOWV
OqCGiWnqAw2WyvvYyEA/CUDkKOMxazSvWKema2kzIG3+ythriSEmE23AAfZi5pal
p1+n/FOOyAvQLdg2fVdnSk1j7FQ22Wgnx28dXPD69BKVJ5dT3SXOxWtbg1ZumdVQ
mKtNzWZWQDskZYgtyCU0DmeTnrrjJggT+NENf2pqU40fxHPmmSAjPyPp8kRFxEad
lgdtkqCrrM89hGgbAeQq5lQCj6Q39+so98vxwhpWIVweZzsWBnuHjmPKgcmdfsIT
7jul1OsBLT2bnsDxN7qm6eZeMrlEzwCxR/sEm0smW1AJAHM/7ocsB5nABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQFDB72tOwwBAh9tBNfeKJdRcYOMB8GA1UdIwQY
MBaAFKf2KRYZf3eWzsV46kNS+uTvia7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQt
ZWM5N2YxOGE3OTRhLzEvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQtZWM5N2YxOGE3OTRh
LzEvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu9Mov7X
BDUGoFb1W0wcJHIBsJeGCh/MIigsRgEhYB74ryV7OKViTc1chajihp5YDrOM2JKJ
RN63jsVYSbt+2MJwRjT+jxsAZvQyxzlWN77YNMQgO0fp7z1TNics1D5J3z1Vs/nM
RXO3CnTS1lvtMKg7ghUksNt/c3mla7WtJLsufp1dqc7NrajENBxCqhIT9fF5eZ+T
0du9FdMBy+cxhxAmMKoW129+N7VvTnIBcn4cgNynB6xIkBE3I35S56dObLHir2HC
HZSdBQCeOSQuzG3qQKdVUqVKncHpJovPWI98RIq75dGeagAoZxO8liALf4Mgg23V
5Iw4dxl+TU0Vcw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:43 2026 by rpki-client