This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File:                     YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier:          w1qBVHT+YrBZH2ZEoaDGJbioalSK+AvOJyxkwhy4xbg=
Subject key identifier:   D0:02:98:2C:29:1E:E0:4B:A1:72:EB:1F:84:46:8B:2B:22:9A:94:A5
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       019C427DE3DF1619273572BBFA7F38B5D174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number:          13BE
Signing time:             Mon 09 Feb 2026 13:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:12 +0000
Files and hashes:         1: 0FXE-aMYDoHsJWIgYZ6p4cTAvIc.asa (hash: m9vFjKk2IkfNxMT1oBT/EqvBwRhxlH++eft+dvmvzfI=)
                          2: B1xlxtkgltJzqbUtpT-T2k7OjtI.roa (hash: qZlWNzGPdE+IKxAZlX53rTWx5ECKk+OZ5/kaPPhGDH4=)
                          3: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: NDlldAIzBNSy/tgVIvCaEqpYB/BJncU95+J/OXENakE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:e3:df:16:19:27:35:72:bb:fa:7f:38:b5:d1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: Feb  9 13:01:12 2026 GMT
            Not After : Feb 10 13:01:12 2026 GMT
        Subject: CN=d002982c291ee04ba172eb1f84468b2b229a94a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:40:33:07:58:b3:81:27:41:ba:ed:d1:59:
                    fb:84:25:82:70:52:4e:ce:a8:7e:29:17:2f:0f:bd:
                    fd:3b:91:67:22:cb:56:44:fc:32:93:09:5b:93:4c:
                    17:37:f6:bb:b6:df:b0:d9:86:84:a3:8f:cf:a2:fd:
                    7d:fb:6e:7e:b3:30:e9:94:06:d9:4c:87:c5:78:db:
                    26:72:3d:dd:16:07:4e:ca:1d:a4:d3:4d:d3:15:a6:
                    cd:ac:b5:89:e5:0a:5e:fb:68:13:82:95:d7:f4:72:
                    91:cc:e0:9b:9f:0b:9d:0a:58:f3:5f:e5:c6:cc:37:
                    0f:ce:8b:19:d7:ef:2c:15:19:62:00:85:09:85:1c:
                    a8:4b:e5:b0:bf:ca:7b:29:60:c1:f3:b6:e9:25:fb:
                    5c:95:44:44:43:7b:10:93:cd:7f:e6:b2:19:c3:e6:
                    72:78:6f:1f:8c:89:e4:fb:b6:18:75:62:54:b4:46:
                    bb:bf:dd:42:1a:d3:e6:18:a8:45:fa:d8:67:08:7d:
                    52:4c:98:8a:38:6b:f9:89:9b:3b:ed:62:27:ac:4c:
                    31:19:5e:26:dd:9c:8e:ad:6b:3e:bc:47:1a:87:dd:
                    0f:6a:1d:82:28:2d:35:64:da:e8:1b:7d:2c:fd:e7:
                    92:32:bb:36:cb:f7:57:2a:6b:d5:8d:de:d0:87:df:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:02:98:2C:29:1E:E0:4B:A1:72:EB:1F:84:46:8B:2B:22:9A:94:A5
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:68:51:96:d8:0e:e9:ff:67:e1:9c:17:d3:9d:bb:67:c2:ea:
         34:82:77:03:f8:82:08:9d:30:af:dc:9b:80:5e:ba:1e:10:f1:
         0f:d5:6e:01:06:95:ed:85:39:11:ae:8f:26:cc:e1:cb:28:bd:
         b9:37:25:7f:ae:3e:0e:f9:07:29:b5:7b:4f:19:f2:5b:a1:4b:
         48:41:a5:66:23:24:39:14:f4:63:2e:bc:ee:85:64:03:ca:58:
         99:1a:f0:ee:7c:9f:09:d0:15:1e:a5:b7:a9:83:30:d1:8a:02:
         ae:4a:6b:4b:7c:8e:71:ec:59:aa:e4:13:10:ec:ee:08:cf:b7:
         f3:03:0d:a2:d9:72:4c:ee:ff:c0:8e:95:67:9d:c7:40:d3:e5:
         ea:92:52:cd:6e:1a:ba:1f:53:0f:9b:8e:6d:a6:13:1d:58:94:
         96:93:b0:6d:a0:5a:61:36:02:35:da:0e:80:4a:60:64:af:54:
         7f:3e:f8:79:4e:4a:a1:79:89:c6:b7:9a:2e:48:0c:98:53:b5:
         b7:47:a2:c9:b6:40:95:6d:c6:3d:4f:c3:c3:05:35:e2:96:d3:
         a3:97:c0:16:7e:42:5b:be:e0:b2:d4:ba:f0:18:07:0e:9e:ed:
         5e:c3:b6:61:69:23:97:5e:73:ef:33:09:2e:b0:85:b4:e8:9b:
         d8:e3:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:34 2026 by rpki-client