This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File:                     yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier:          BosDjOs8adT8/2H3Kj7NtbZvDgNO8WC1Tdg0ma7OLp4=
Subject key identifier:   28:C6:1F:10:22:77:12:43:10:59:FE:FA:EE:FD:90:4C:83:74:7C:8E
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer:       /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial:       019C43222EC809C26C171110D9A3DD51CF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 16:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:39 +0000
Files and hashes:         1: Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa (hash: E0krvPCL+AC9YfaXQIlTvkeNOsHIRhUhj8ZYv72osZM=)
                          2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: xjpyl6aLjo9IuabqspbsMd31IAtICVeDOYKEuQOZXBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:2e:c8:09:c2:6c:17:11:10:d9:a3:dd:51:cf:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
        Validity
            Not Before: Feb  9 16:00:39 2026 GMT
            Not After : Feb 10 16:00:39 2026 GMT
        Subject: CN=28c61f10227712431059fefaeefd904c83747c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:17:9e:cd:8c:47:92:d5:4e:b2:20:eb:82:
                    f2:bb:ea:21:46:e5:aa:80:c7:17:c7:be:19:aa:18:
                    a6:06:5b:b3:1f:51:21:08:2e:4e:27:59:94:fc:e9:
                    0d:b2:df:04:7d:e5:88:85:42:1d:ab:5f:b6:78:85:
                    2f:40:fb:fa:1b:09:4f:68:48:64:4c:83:7c:4d:7d:
                    7b:42:1a:8f:27:6e:1f:ab:bf:e6:d7:7f:c5:6b:9d:
                    f8:46:5b:31:c3:b7:2c:a2:cc:fe:ec:95:9d:49:48:
                    ce:85:61:15:92:af:d9:4f:4f:b0:98:8b:7b:5c:8f:
                    6d:de:bb:cf:6d:69:8a:d2:9b:e1:e9:7b:93:e9:ac:
                    4b:64:e9:5a:ec:f2:7b:a8:72:f1:7a:86:20:28:61:
                    b6:e1:3c:b3:25:6c:bf:19:ad:22:e6:91:ee:e2:44:
                    3e:ae:03:08:8e:33:6e:36:2a:dc:b9:52:74:ad:f2:
                    ed:a6:e2:05:8a:d0:c4:e2:51:07:af:25:95:4f:ea:
                    98:dc:ae:30:c1:95:bc:ab:a1:7e:d9:e2:ae:fc:a1:
                    ba:ca:0b:a1:e5:b5:6e:5d:fd:b0:39:df:5c:d0:e8:
                    5a:77:a6:62:41:14:80:dd:25:83:49:2d:60:ad:28:
                    4f:69:2c:2d:86:f4:7a:9a:97:84:bc:b0:1e:6e:ff:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C6:1F:10:22:77:12:43:10:59:FE:FA:EE:FD:90:4C:83:74:7C:8E
            X509v3 Authority Key Identifier:
                keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:43:30:29:d8:a7:31:6c:40:68:26:9b:e9:d4:60:c8:60:b9:
         40:1f:57:d0:05:86:e6:a1:65:56:cc:3f:4e:8b:89:70:c7:4d:
         95:f6:84:12:55:2c:e1:c4:46:64:8b:1a:ff:05:bd:06:af:91:
         8e:62:d4:b8:d0:59:a6:a0:12:f1:d8:bc:2b:c2:c7:9f:04:24:
         54:d2:12:af:a7:aa:ba:4d:4b:82:43:4d:68:e0:5e:7d:20:d9:
         4a:97:a7:59:49:fb:14:83:aa:75:6c:71:9d:21:0f:ef:71:6f:
         4d:86:02:38:9b:58:f7:56:2b:ea:3d:67:fc:41:1a:c1:9f:d7:
         16:9e:4e:b2:a5:62:aa:6f:1c:cd:80:ce:6a:5b:a7:13:ae:70:
         4c:a1:c5:78:5f:08:1a:1e:c1:75:d7:09:a9:c2:fd:fb:89:0e:
         9d:e5:ff:59:3e:b9:25:e2:eb:1d:a0:cf:74:14:83:f9:a6:ed:
         e7:8b:3c:33:48:38:46:de:50:9b:1f:58:f6:d0:c3:b2:dc:b3:
         61:e2:39:e1:2c:e4:4e:8f:b7:04:58:34:78:0e:7e:17:87:c8:
         0a:c5:81:11:d0:e7:f7:0d:60:7b:0a:15:7a:fa:19:85:85:78:
         07:6b:df:4e:e1:46:2f:7f:f6:30:96:7c:51:bf:26:4c:4b:9c:
         b9:cd:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:29 2026 by rpki-client