This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File:                     2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier:          qdXuVOGF1r06dLpZljDNUmyvkEdvIAOCazcgdksNe1s=
Subject key identifier:   3C:7E:C6:1B:62:BA:C7:E2:F3:B7:DA:94:03:8A:0E:A6:14:D9:E8:7D
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer:       /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial:       019C44A26454F27D035B52000C21991D44A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number:          113B
Signing time:             Mon 09 Feb 2026 23:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:19 +0000
Files and hashes:         1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: BcMmzoDbX0B1nHHr+NUrkTx/D8L0V6c8q0rmpSlt47M=)
                          2: 3_erjLvBR9ChA8-FV4FDl1_qWOo.roa (hash: ODC0IK0RSmBwgajSFs0H62MxGdt/m1+W1l/+zS2FxXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:64:54:f2:7d:03:5b:52:00:0c:21:99:1d:44:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
        Validity
            Not Before: Feb  9 23:00:19 2026 GMT
            Not After : Feb 10 23:00:19 2026 GMT
        Subject: CN=3c7ec61b62bac7e2f3b7da94038a0ea614d9e87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:38:e3:63:62:ed:71:5d:c5:c6:d9:27:f3:
                    10:68:86:26:5c:8e:f4:87:74:d4:12:4b:93:a7:b1:
                    38:62:42:13:90:95:c4:64:fd:26:2c:29:aa:71:24:
                    50:10:3b:59:df:03:97:df:7e:b0:95:2d:a6:5e:b9:
                    8d:33:d6:6b:0a:8c:69:3b:51:ef:3b:e4:af:fa:8c:
                    93:bc:90:a8:37:20:8d:55:8a:2c:ad:62:3f:57:35:
                    50:9e:ad:fa:ad:2d:c5:88:0e:b0:59:3d:dd:cc:b3:
                    71:1e:25:10:29:9e:1a:c7:13:e3:50:9e:40:70:6d:
                    d1:fb:91:62:59:e8:b9:c8:e6:04:22:af:4f:a8:cd:
                    0c:6e:ba:60:69:c5:4d:4a:43:12:09:ed:49:04:44:
                    3f:83:da:77:11:45:44:a2:1b:3f:81:8f:27:72:7b:
                    3b:30:5f:40:85:ff:dd:5a:03:84:94:67:9d:74:68:
                    ab:47:d6:da:41:d2:c4:82:b6:d2:aa:4c:da:1c:4b:
                    f3:e3:24:b5:e8:51:8e:cf:7e:ed:99:76:2e:5c:9a:
                    14:2a:c1:29:1a:74:db:26:19:dd:92:41:c4:bc:45:
                    27:10:77:ce:98:7e:fc:3a:01:42:b9:06:15:63:b3:
                    a5:66:9b:8a:18:55:ad:2b:11:82:02:6c:5b:32:1e:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7E:C6:1B:62:BA:C7:E2:F3:B7:DA:94:03:8A:0E:A6:14:D9:E8:7D
            X509v3 Authority Key Identifier:
                keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:42:b8:2d:62:bf:fe:e3:93:18:1d:b2:07:6c:f0:7b:27:fc:
         e7:e6:ac:3e:12:66:2e:ef:df:13:b2:f9:53:3e:e0:5a:bc:cc:
         0c:f5:07:c8:0c:30:9a:80:cc:09:f8:9e:cd:8c:41:b1:e4:3e:
         c8:fe:45:84:cd:7b:68:48:41:17:02:19:60:08:c8:59:b6:69:
         a2:e0:c2:b9:98:4a:85:2e:c0:41:e0:60:18:6c:00:b0:7c:1c:
         e0:3f:84:fb:36:e4:1f:be:b7:ab:80:91:60:d5:ab:e8:78:2b:
         cd:c2:09:16:f7:93:a7:0e:93:98:82:7d:ca:e3:58:42:b3:56:
         3c:fc:6a:9e:29:02:80:47:d7:64:43:a9:73:13:df:85:8c:88:
         c9:9f:5c:f6:77:7a:09:1a:4a:2d:76:6e:dc:68:d9:4d:64:97:
         46:e6:cd:6d:d8:da:c1:9b:89:39:07:0b:4c:99:ff:42:18:09:
         1d:7d:31:04:73:c8:30:30:7a:87:a2:da:8d:28:f2:c8:d4:37:
         4f:2b:a3:29:bb:7e:92:c3:9e:96:54:e0:97:86:9d:93:17:fc:
         dc:18:54:3e:b0:5c:7b:11:f2:23:57:e6:5c:0e:23:fa:00:60:
         03:f0:6a:10:e6:51:e0:32:c9:90:b2:14:61:e4:ef:ed:91:85:
         a5:0d:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:44 2026 by rpki-client