This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File:                     YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier:          IF9S69LKrCk+Z4e5ZCV6VA4lheNs0Rj4fFKPRNhUE3g=
Subject key identifier:   EE:0E:AA:2B:C7:EC:6C:8F:3C:A5:11:42:1F:18:7B:09:D9:08:FB:48
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       019C424661118AFFF9CDFE3508D6D56F83AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number:          0FAA
Signing time:             Mon 09 Feb 2026 12:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:34 +0000
Files and hashes:         1: 0EalOX44qspmegVtsk1N4TSFVRU.roa (hash: JwbWuG88BTSL/M3LKZ7+Inf9JGSQF9i+jJ1NXUZ8/VQ=)
                          2: HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa (hash: z8ecTHraKJuJfx2Nzr6QIZs1OJQlHdMTivk8yRc4Ssw=)
                          3: PdnPH6yi9ZnmicZhFfMsL9RyZYk.roa (hash: X/n23r26eZcatz6lbggQ+x24Y1SqygjdVMpGAvxLhes=)
                          4: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: DbpvRhDWFJ6sQoTkA6Kwm6O9d0dT9uE3EenWFXq6MNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:61:11:8a:ff:f9:cd:fe:35:08:d6:d5:6f:83:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Feb  9 12:00:34 2026 GMT
            Not After : Feb 10 12:00:34 2026 GMT
        Subject: CN=ee0eaa2bc7ec6c8f3ca511421f187b09d908fb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:46:03:2d:c3:ab:62:1f:8c:9d:c8:02:de:
                    40:96:a4:7d:64:73:d2:d7:5a:db:af:18:3b:07:2f:
                    7c:ef:ee:20:71:1d:c4:41:f4:c1:ca:78:3f:bc:89:
                    1a:ce:30:3a:76:a2:a3:9d:9b:5d:38:93:2c:5f:1b:
                    83:01:f2:14:55:26:e8:7d:a3:f5:3c:58:ac:a7:f2:
                    67:7e:d2:21:b0:6a:77:b9:78:a3:6a:9e:d6:42:3f:
                    01:96:72:a0:79:a0:2f:89:7b:8e:11:20:3b:b2:04:
                    d5:b8:92:45:11:35:4f:f4:94:39:2f:3b:2b:b4:3b:
                    11:c8:77:85:29:a5:44:5e:62:59:d6:ec:42:aa:4a:
                    45:c5:83:97:e7:cf:b4:82:50:dc:46:3b:41:e8:31:
                    4a:23:f6:d7:0b:24:38:ac:86:6d:38:4a:2c:9f:28:
                    5a:59:e2:ab:16:10:65:c8:ea:24:b8:20:06:1a:4d:
                    69:23:fc:dd:78:e2:89:14:b1:f4:78:03:ff:57:a9:
                    be:31:da:31:1d:c9:25:9f:c6:75:15:f9:87:66:98:
                    dd:71:e6:8a:17:60:86:69:ad:97:98:40:31:21:93:
                    39:5b:19:ca:a4:3c:a9:81:e4:df:f2:4e:ca:ad:12:
                    54:24:13:0c:49:ff:da:d1:40:52:e8:75:10:69:59:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0E:AA:2B:C7:EC:6C:8F:3C:A5:11:42:1F:18:7B:09:D9:08:FB:48
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:08:05:0a:2a:7c:3c:98:d2:39:a3:93:ae:78:7c:1f:2e:
         0a:fd:9c:49:e3:38:6a:7d:d9:76:73:cd:5e:46:a8:8e:6b:40:
         af:0a:33:d0:a6:e7:a1:73:d7:c7:c9:1a:b7:1e:21:e8:96:c9:
         79:8f:cc:48:98:c0:58:40:dc:fe:76:b4:97:15:3d:11:cc:54:
         47:b4:4a:77:d7:dc:04:0b:69:38:ed:2f:c4:9c:35:39:a8:55:
         51:d6:03:bd:48:b0:86:66:b3:00:b2:66:d8:86:f9:2b:72:72:
         02:24:53:f0:65:bc:bf:d1:7d:06:99:c1:d5:e9:5f:bc:b4:a8:
         e3:cf:ea:11:7a:c6:2d:7e:2d:4d:c9:8c:c0:14:e7:52:71:1c:
         b0:02:25:70:ec:8c:ae:da:5b:65:81:38:42:2a:b5:8b:0c:c1:
         81:26:51:80:e8:1d:65:4e:b3:67:69:6b:d7:50:c0:10:b7:62:
         23:ba:37:f4:c3:5e:38:47:4a:2e:65:16:5f:70:5c:61:13:60:
         8a:45:5e:6e:29:c9:0c:47:77:c6:d1:0e:cf:be:6f:c9:98:7c:
         f3:00:35:44:99:41:db:49:75:ae:55:9d:ca:3c:ea:f9:c2:9e:
         21:5d:3b:8d:52:da:bd:95:51:64:af:56:e7:0b:ac:f8:47:27:
         5f:e5:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:04 2026 by rpki-client