This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File:                     YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier:          HMrCl+IFlCcoxRakcqm7AXt3JW9RZQ7N0J1GhCQENvk=
Subject key identifier:   52:AE:AC:16:5F:2A:D7:33:A1:39:C1:34:9B:65:27:C7:64:1F:B6:D1
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer:       /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial:       019C446BFD6099323E0BEFD8B08BA574A545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number:          0E27
Signing time:             Mon 09 Feb 2026 22:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:53 +0000
Files and hashes:         1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
                          2: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
                          3: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: HAJisYjk4/zuHV/eBh/B9XJM00LnXwnyZWMfM/xWPk8=)
                          4: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
                          5: v5XfI_EgEYDKfXz7O68-YeUVqdQ.roa (hash: kvZ5cVMi6mO1HeA+gU60JgsRwkpMJcWiJ8FVL2dSw7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:fd:60:99:32:3e:0b:ef:d8:b0:8b:a5:74:a5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
        Validity
            Not Before: Feb  9 22:00:53 2026 GMT
            Not After : Feb 10 22:00:53 2026 GMT
        Subject: CN=52aeac165f2ad733a139c1349b6527c7641fb6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:f7:af:7f:11:34:db:80:37:c2:f2:20:c1:
                    ca:10:11:8b:28:ea:0c:22:e8:40:38:97:36:b6:d4:
                    2b:c8:72:b3:c5:da:3c:d6:08:66:3b:6f:68:73:00:
                    a5:b0:31:9b:06:38:7c:bb:11:d7:df:9d:ba:aa:0d:
                    2a:57:a1:9d:64:b4:16:bd:84:72:c6:56:b7:1f:fe:
                    ca:ce:d6:97:a4:29:53:61:76:ac:87:1b:28:80:24:
                    a3:86:af:9b:18:74:c6:14:b4:f9:c1:5c:1c:c6:95:
                    23:5d:95:01:c3:7d:c3:1a:9a:3a:57:5c:62:1f:32:
                    84:a9:95:04:4f:0a:af:89:bb:fd:0f:ce:91:97:c8:
                    82:bd:6b:e2:1c:26:a6:55:5a:ca:cd:90:94:81:88:
                    bc:96:0e:b7:c5:c5:b6:c5:68:59:dd:04:7a:ec:bb:
                    43:26:f8:fe:03:36:68:cc:2e:1d:06:e8:da:f7:e6:
                    82:4c:93:46:2c:32:7b:38:dd:88:b7:3c:50:25:86:
                    0e:66:69:23:ca:95:21:d4:ff:a5:ab:2c:c3:3b:5d:
                    64:b0:84:ce:ad:00:48:d9:e6:b2:2a:b0:84:ad:b9:
                    c6:9f:ff:dc:74:5a:45:92:2f:39:2f:84:6e:9b:9c:
                    21:f7:f8:8d:f3:cf:1f:f0:90:a9:20:1a:b1:8f:f0:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:AC:16:5F:2A:D7:33:A1:39:C1:34:9B:65:27:C7:64:1F:B6:D1
            X509v3 Authority Key Identifier:
                keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:b3:6a:12:28:02:27:5d:2a:a2:b5:39:13:77:8f:b0:6e:
         44:20:27:79:e1:dd:a0:7f:d1:eb:bc:7d:5c:01:31:0d:26:09:
         83:c3:ef:4b:e1:4c:69:5d:38:d8:24:ce:37:6f:4f:05:f3:fd:
         e2:50:d3:bc:97:a6:c0:75:33:5f:1c:90:c8:70:0b:66:1d:16:
         82:42:21:9c:82:0e:d3:77:71:e0:2c:85:15:bb:63:57:8c:d3:
         e9:fa:8b:21:24:2b:fa:44:c1:d5:82:2f:55:b1:e6:4c:a2:05:
         86:9d:8c:f7:2f:ee:5d:bb:eb:93:01:9d:12:a4:44:2c:09:18:
         ab:94:bf:9a:d0:9f:0a:5a:d4:33:b6:c6:32:32:09:a6:9b:c1:
         f2:41:4c:e8:44:00:cc:60:38:c9:27:ae:d0:c5:80:b6:8c:f0:
         85:dc:57:63:b1:39:f8:fe:93:11:32:26:17:3e:1e:56:c1:48:
         b6:1e:67:3a:3f:97:bc:c7:8d:03:d3:b8:ee:ef:08:15:06:1f:
         cf:f5:04:4a:5d:34:3b:51:70:c3:cd:d4:ab:6c:3b:5b:c2:d6:
         fb:ee:9a:46:f7:1d:4d:ac:e6:8a:06:9f:5d:42:97:9e:b4:f5:
         73:f0:c4:0c:06:fa:d5:e5:40:14:18:47:56:23:ca:d3:2c:c5:
         46:c6:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:25 2026 by rpki-client