This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
File:                     YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json)
Hash identifier:          JcmVXqIky53xFHtNTVagh1RPaAIFkTbU7Gs1LnIJdeM=
Subject key identifier:   DD:4C:55:67:96:BF:37:23:E0:21:7E:0A:F2:93:B3:0E:4D:C9:06:4B
Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
Certificate issuer:       /CN=61c5ed0ded8625b32b6533207229f2c467259848
Certificate serial:       019C41D8FF7247EED0E5B6514167EA6290D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 10:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:06 +0000
Files and hashes:         1: QdSCp7V6SXB6kY3MDm-0dxcIQJY.roa (hash: j90AwqYuVEioYPkOABNDsET8wy4V7UafpGuH2RPQHeg=)
                          2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: /r9PhCqzwaEOuWfXcSwUoPzd/8DLDxC4REUewaxOVJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:ff:72:47:ee:d0:e5:b6:51:41:67:ea:62:90:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848
        Validity
            Not Before: Feb  9 10:01:06 2026 GMT
            Not After : Feb 10 10:01:06 2026 GMT
        Subject: CN=dd4c556796bf3723e0217e0af293b30e4dc9064b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:5e:a8:7d:1d:1f:64:65:e2:28:50:d8:e4:
                    ad:6a:15:9b:01:cc:f7:c0:69:0f:2b:07:28:54:cf:
                    60:51:95:25:22:d7:2c:2c:39:5e:9c:82:24:62:3d:
                    ba:79:99:74:21:8a:f9:31:48:fd:ac:ba:8d:cc:39:
                    f1:04:bc:b4:aa:9e:e5:1e:39:04:45:24:53:42:48:
                    63:6e:ca:4f:67:50:ae:78:a0:24:b5:13:f0:cf:19:
                    39:17:ac:49:b7:fb:37:3e:e6:9d:91:a9:c4:f4:35:
                    4d:1b:b4:bf:ed:47:64:91:9e:21:1d:80:47:95:04:
                    b1:19:0d:47:55:ed:e1:06:f0:9c:5e:c9:ea:3b:59:
                    cf:5b:9c:0b:36:08:68:af:35:31:bc:4d:d1:a4:16:
                    26:f8:f6:77:44:5f:45:a5:18:ae:59:1e:bc:be:3b:
                    c9:eb:59:21:09:f9:2e:0d:5d:72:d8:17:3a:6d:5f:
                    ab:22:70:64:c9:93:82:73:a9:e2:48:b7:ad:53:4e:
                    1f:31:90:85:50:67:0e:da:0e:a2:2b:21:cb:22:1f:
                    96:37:4a:e0:92:8f:60:4b:12:54:df:47:bb:4f:b9:
                    94:f2:bc:b7:cf:96:5b:72:91:60:0f:0f:7e:c4:1b:
                    76:89:e9:3e:7e:d9:1a:70:6b:20:2b:69:39:0d:1c:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4C:55:67:96:BF:37:23:E0:21:7E:0A:F2:93:B3:0E:4D:C9:06:4B
            X509v3 Authority Key Identifier:
                keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:5a:fd:07:d1:b7:bc:aa:bf:90:17:0d:7b:84:fa:98:38:
         24:29:99:f0:85:c8:8d:b7:9a:05:5b:39:64:7b:75:62:23:1b:
         24:8d:eb:ce:87:75:fa:7c:11:58:2f:d4:27:d0:6c:e1:c9:14:
         01:1a:12:e9:83:5f:fd:de:b6:db:fb:5d:0c:c0:39:de:0d:a4:
         29:07:9e:7d:89:f3:a8:f4:40:67:fd:7c:7e:d4:00:c6:d3:03:
         d9:4d:da:0d:a1:4b:1d:98:ef:03:77:16:92:b4:d3:51:64:26:
         d5:14:4b:99:a8:fa:c8:4e:c3:16:2f:b9:91:b1:55:3a:95:61:
         5c:8d:c5:5c:92:a6:09:16:10:1b:37:0f:65:f8:aa:4f:be:cf:
         03:aa:89:9a:6b:9f:82:2d:79:98:6f:06:94:20:cb:d2:e1:46:
         0f:16:30:57:40:55:0f:7c:84:f0:e6:87:7d:8d:97:1a:53:61:
         da:cc:2d:59:76:ca:27:a3:2f:cd:c7:ea:71:bf:d1:58:0e:1f:
         39:82:a7:cc:cd:9a:6c:18:da:78:67:7f:85:95:b6:77:1b:67:
         69:d7:11:0a:6b:d3:c3:aa:14:a7:3a:f7:fa:ae:4d:95:cf:61:
         73:80:a4:14:eb:02:9b:ae:aa:69:f4:6c:0f:d7:db:6a:21:30:
         55:c2:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:45 2026 by rpki-client