This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
File:                     Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft (raw, json)
Hash identifier:          uqmIzYDj5ONcQIf6GJToKUgob+QaFbgwJEyurGBtw6g=
Subject key identifier:   5B:09:5E:DC:E2:8A:2F:D2:38:48:AF:7C:28:CC:BD:0D:8F:A1:09:75
Authority key identifier: 63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4
Certificate issuer:       /CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
Certificate serial:       019C424614FA726A38A30B2E4D1C5986B381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
Manifest number:          36
Signing time:             Mon 09 Feb 2026 12:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:14 +0000
Files and hashes:         1: 2B_TjSMzG_Qyjy_a889-yEM4ZUQ.roa (hash: 0aiNkMB/Opb3pvqD1jWSeypzZe7gwQQUTXUmi/6/oKI=)
                          2: Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl (hash: zMf6wDWi/eiA99jKMIncIZfEI1eaUsH2d9iRPkLOMZ8=)
                          3: v5l5rLmhty_z4zNPYoM2CqX13sQ.roa (hash: iWmastkcHsmmH7pnaTSnEYzWRuOsX68BKyoXtSdp4wM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:14:fa:72:6a:38:a3:0b:2e:4d:1c:59:86:b3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63cbfcda1dc09d88b3af5cef90da0162fda374b4
        Validity
            Not Before: Feb  9 12:00:14 2026 GMT
            Not After : Feb 10 12:00:14 2026 GMT
        Subject: CN=5b095edce28a2fd23848af7c28ccbd0d8fa10975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:34:ab:de:6e:30:fc:7b:00:1b:e4:bb:07:
                    63:09:2c:50:79:0e:ea:37:b0:60:fb:10:88:0b:f9:
                    49:03:35:0f:03:69:af:13:23:97:be:57:56:aa:da:
                    52:05:ec:99:73:4d:94:81:76:c7:50:51:c2:f8:2f:
                    03:a5:d4:59:2d:2f:15:1b:96:ec:5d:aa:df:a4:fb:
                    ed:c1:44:d7:d6:9c:2d:02:46:40:4a:d4:8e:fa:ba:
                    0a:1e:68:da:73:93:23:82:e7:8d:6a:90:28:58:77:
                    78:6b:63:59:1d:5e:3f:1f:1e:ff:92:95:12:cc:5e:
                    70:ff:d7:2c:ef:13:95:ed:0f:f9:53:38:a4:ae:33:
                    aa:48:88:9a:fb:70:40:31:d3:d0:78:d5:0f:8c:40:
                    70:85:0a:14:e0:e6:29:f5:e5:10:4f:d9:4f:e0:c8:
                    6e:d7:48:a3:64:fb:b7:65:3a:b7:c8:f3:67:47:de:
                    51:a1:cd:9e:a8:ad:d6:ff:f9:d2:3b:c7:de:95:31:
                    00:ca:39:f9:e0:2d:47:a6:d3:a2:33:09:83:e4:ec:
                    de:45:bd:3d:cd:e4:a9:17:5b:7a:ef:9f:4f:61:ce:
                    f3:3f:81:0b:3a:25:a5:73:93:97:8d:f0:68:c0:e1:
                    35:a2:56:29:79:fe:d8:3a:83:2a:23:82:dc:8c:1a:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:5E:DC:E2:8A:2F:D2:38:48:AF:7C:28:CC:BD:0D:8F:A1:09:75
            X509v3 Authority Key Identifier:
                keyid:63:CB:FC:DA:1D:C0:9D:88:B3:AF:5C:EF:90:DA:01:62:FD:A3:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8v82h3AnYizr1zvkNoBYv2jdLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6fb7e6-04c0-4361-94c0-7331bf207f4d/1/Y8v82h3AnYizr1zvkNoBYv2jdLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:80:6a:5d:04:6a:5c:83:cd:34:28:86:2c:0f:d7:9e:a8:81:
         bc:f4:d8:d3:2f:cb:7c:c0:44:4b:6a:c8:97:58:64:c3:9d:dd:
         d9:a9:a0:a7:02:f6:dd:82:4e:6e:82:ed:42:e4:ab:cb:68:49:
         1f:65:c8:55:8f:1f:fb:cd:e2:30:bd:5f:3c:a8:f6:1f:cd:68:
         1e:78:cc:34:c2:5d:2a:cd:33:6b:76:ef:c5:51:cb:f5:91:fc:
         6a:c2:97:2b:51:45:11:b4:90:e0:39:33:04:ef:b5:d2:7f:a5:
         7c:4c:64:e4:bf:60:05:a2:d8:99:1b:7c:74:8b:ab:42:b1:86:
         3e:cc:cc:e2:e2:39:d2:4d:de:e3:96:06:71:aa:c0:39:89:8c:
         29:fe:e9:35:39:ef:00:e5:4e:a5:5f:a1:6e:4c:c1:1d:96:aa:
         20:4c:43:ed:88:80:60:32:4e:70:98:43:e5:c3:e3:06:46:8b:
         82:74:12:4d:c2:bb:dc:6c:7e:35:cb:db:2c:93:6b:65:54:42:
         8f:05:7b:fb:61:22:2c:71:9b:18:e6:75:10:6c:f7:24:81:50:
         18:46:e8:6a:8c:e0:99:65:50:a1:c5:b2:23:cd:88:3c:b5:51:
         34:2b:ff:5e:11:9e:ea:02:05:76:bd:5c:02:94:b3:10:aa:d8:
         9b:6d:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:03 2026 by rpki-client