This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File:                     mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier:          /3rYJBVSVjH1EWsyivfH6xhcEnBCy6KLv0oNQk/0IdI=
Subject key identifier:   B4:42:9D:36:02:A6:FE:53:16:53:D0:06:6A:C3:23:F6:3E:3A:A5:71
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer:       /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial:       019C42EB96B7F3DD62221B85CBACB0CEF639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number:          0B15
Signing time:             Mon 09 Feb 2026 15:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:01 +0000
Files and hashes:         1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: O91VvMIhaWmtu5YcHkR5aVNPh4qOv+5lgJPiQJA8ZVY=)
                          2: x2MM1e6RzNZDA4hLyDx2reSAtec.roa (hash: LoKZDS1lTFaAe/itPWyVaeaD97C4a8VpDh8K0DR+aq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:96:b7:f3:dd:62:22:1b:85:cb:ac:b0:ce:f6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
        Validity
            Not Before: Feb  9 15:01:01 2026 GMT
            Not After : Feb 10 15:01:01 2026 GMT
        Subject: CN=b4429d3602a6fe531653d0066ac323f63e3aa571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:ad:c2:aa:5f:c8:47:88:7b:9b:0d:4e:dc:
                    71:6f:f3:c5:0f:0d:48:eb:52:af:a8:b6:2a:d0:5a:
                    9f:67:6d:95:81:f6:ab:42:f7:2d:31:15:cc:1d:96:
                    0d:88:7b:b5:64:b2:7d:88:b5:8b:18:5b:5a:d4:85:
                    3a:6f:1e:08:e9:eb:ad:34:85:0e:9b:2b:69:78:03:
                    31:6b:97:84:e1:1d:eb:e4:bb:89:4c:09:54:e1:8a:
                    a1:54:b8:c8:25:78:94:a2:20:85:d0:bc:2e:fc:50:
                    f4:aa:b2:1e:85:3e:be:ba:ca:b1:c2:d3:20:79:fd:
                    ad:15:85:cf:4a:5c:1b:60:79:d4:f6:c1:5c:3f:ef:
                    36:82:1a:07:7e:8a:cf:ca:15:fe:93:6d:10:d8:39:
                    df:21:3d:46:9f:34:96:5e:0b:bf:db:3f:30:0b:f5:
                    fa:d0:71:9b:b8:5a:db:22:01:21:b0:22:c6:e3:54:
                    36:9b:8e:85:6f:d8:79:4b:9f:de:3b:5d:ff:05:84:
                    89:91:3d:59:9a:b9:41:6c:d5:8d:46:f1:41:b1:75:
                    d5:f2:c2:46:55:20:0e:1b:6b:d4:56:41:0b:5d:3d:
                    01:40:87:07:bc:6c:49:e5:8e:2a:4f:07:f0:33:50:
                    5d:c0:83:e3:59:10:e9:1c:93:4f:f2:1c:87:42:49:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:9D:36:02:A6:FE:53:16:53:D0:06:6A:C3:23:F6:3E:3A:A5:71
            X509v3 Authority Key Identifier:
                keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:37:5c:47:04:d0:66:fa:63:37:ce:49:94:b7:d4:7d:85:b3:
         01:d2:c1:7c:be:c2:b5:f2:09:a7:e8:0c:ed:3d:3f:a4:af:da:
         82:a3:37:70:41:a3:16:9b:5b:a6:6d:35:ee:70:d8:4c:49:06:
         98:a0:b7:65:17:0c:a3:22:4a:8d:7b:cd:47:4e:fc:7b:95:b9:
         f6:83:89:f3:89:2c:4c:ee:e0:8d:d4:74:27:53:65:bc:26:5f:
         d9:65:eb:84:ff:32:58:f4:8d:8c:2b:f1:0f:b6:a6:fc:33:6d:
         5b:f3:11:cc:78:f1:5d:51:3b:f7:d2:89:b2:b5:a7:e8:66:44:
         f0:7f:3f:64:eb:4b:9a:e5:32:5f:73:51:bc:e4:2b:f9:f6:13:
         f2:51:2c:5d:8e:c5:29:08:b1:f7:a6:18:de:3c:7b:34:67:a1:
         96:82:bc:8f:86:49:04:c2:2d:bf:3f:56:07:5e:09:c5:fd:bc:
         f6:90:6d:a1:c6:96:c1:db:fb:40:10:51:1c:6c:6c:98:b6:54:
         89:8a:1d:47:6a:48:e7:4b:1e:de:6d:97:ca:07:0f:4f:f0:ae:
         0d:45:88:9e:f4:d4:25:10:8c:fc:93:12:b5:fe:12:7d:73:34:
         4a:9e:26:4f:7d:a2:70:0f:42:b2:98:d4:0f:7d:f2:45:44:05:
         30:2e:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:37 2026 by rpki-client