This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File:                     ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier:          8WtIrlc5aytFL4XlXY58P0+2zDx6KaPSgsRsNBllor0=
Subject key identifier:   59:CE:2A:E2:72:B8:DD:35:3B:86:D8:9A:95:6F:3F:D6:97:13:91:F8
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer:       /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial:       019C43C7575F2309FF8E40162F0C29A8DBCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number:          0EFE
Signing time:             Mon 09 Feb 2026 19:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 19:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 19:01:03 +0000
Files and hashes:         1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
                          2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
                          3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: veQQmSXTEbXjgxc5Ch7L/fzs+kC2f8XYB5SG7IfnFNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:57:5f:23:09:ff:8e:40:16:2f:0c:29:a8:db:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
        Validity
            Not Before: Feb  9 19:01:03 2026 GMT
            Not After : Feb 10 19:01:03 2026 GMT
        Subject: CN=59ce2ae272b8dd353b86d89a956f3fd6971391f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:7e:95:c2:85:1a:83:fd:3d:c9:b8:c2:0f:
                    dc:0e:a2:91:f0:6c:9e:b4:ba:21:0e:a0:f7:94:30:
                    bb:a8:76:80:6a:0e:a7:1a:27:22:d5:46:36:cc:53:
                    90:b1:c5:3e:08:0f:c8:71:2e:67:49:b8:75:f5:da:
                    d6:4e:7d:80:c7:30:3d:9a:05:ef:3c:16:71:54:09:
                    56:80:15:d5:23:74:e2:15:1b:06:e5:aa:7d:6b:82:
                    69:9b:05:d4:6c:80:0b:09:86:66:c5:fc:b7:bf:5a:
                    2b:60:a3:60:f5:92:76:34:78:ac:4f:2d:47:01:bb:
                    07:00:c3:f4:38:e8:57:ff:68:61:35:43:8d:e3:3f:
                    c3:2f:cf:cf:e5:77:59:b9:d5:a5:cc:ee:4d:b2:4b:
                    e4:62:8e:f4:e1:e0:b5:61:7e:07:8f:cd:ca:68:09:
                    45:e1:83:6d:c2:6d:92:c0:8f:66:03:93:4e:16:34:
                    de:18:9c:30:08:e3:61:6a:50:21:63:e7:73:83:28:
                    a3:7e:4b:7a:b2:14:8b:1e:f0:88:89:31:4b:0a:1a:
                    63:0c:e0:5d:a5:95:2d:f4:6e:7e:8c:9b:ea:7a:78:
                    0e:6f:6f:5b:8b:8b:a7:1c:ba:22:11:d0:77:be:e9:
                    53:9b:2d:d0:3e:ae:96:2c:c0:f0:2e:22:7c:d5:b8:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:2A:E2:72:B8:DD:35:3B:86:D8:9A:95:6F:3F:D6:97:13:91:F8
            X509v3 Authority Key Identifier:
                keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dc:e6:e7:55:ae:15:d4:37:ec:04:d0:8d:91:6e:d8:d4:35:
         b3:81:7e:e8:09:17:b9:6b:87:c3:2f:68:42:af:d1:c4:52:8d:
         79:e5:e2:01:07:f3:3e:03:65:ff:53:06:64:3b:79:80:6a:7c:
         f7:c6:6a:ee:5f:c0:91:3e:01:72:ec:66:b7:91:20:94:0d:8f:
         f2:96:60:dc:48:7d:38:51:9f:ac:0a:66:b9:af:13:83:25:96:
         62:86:13:a4:da:dc:05:79:01:1a:2b:b2:46:ef:6b:a7:19:86:
         ee:23:e8:69:9d:bf:a9:b3:8d:7f:8d:3b:e5:2a:51:f3:e1:de:
         22:85:70:ee:39:1a:04:b5:30:db:a0:ca:89:b8:68:67:26:39:
         15:9a:f5:43:38:61:db:f5:a5:2f:0f:35:ff:de:3c:ee:57:ca:
         31:9e:9a:37:de:f1:29:20:04:32:6b:88:24:0e:6d:30:63:78:
         61:7f:dd:40:10:53:e0:b8:84:47:75:a4:29:56:94:ef:94:b3:
         1c:22:b7:38:f5:6a:e3:09:1b:69:e7:6b:7f:3e:ca:91:90:36:
         86:75:bc:65:3a:e5:79:f2:9e:31:c8:4c:6e:05:9f:67:1e:1a:
         b9:31:9c:aa:82:8e:bc:07:a3:ea:e1:84:9e:f1:29:b7:92:28:
         41:39:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:22 2026 by rpki-client