This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
File:                     yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json)
Hash identifier:          2QYVjrEFeAxR/rSnoSkcrgVAvOOQn2HSSvVJNMaZefs=
Subject key identifier:   8E:AD:B2:35:1E:19:E6:56:C4:D8:D5:D6:3C:12:DA:47:9C:DC:21:8D
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Certificate issuer:       /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial:       019C42EB52FAE2C9AC7597DC67671CAE613F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
Manifest number:          036D
Signing time:             Mon 09 Feb 2026 15:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:44 +0000
Files and hashes:         1: wD8_-hEjASCZZpotXoShnTDKTeU.roa (hash: eQRgbUsop5I6bDoMNdewwPQSLHLClo0n6vUjAG9/Tq4=)
                          2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: nJk1dOM7Md2+fP4ilnE+Uk35clfC3weYI9HuamFu5a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:52:fa:e2:c9:ac:75:97:dc:67:67:1c:ae:61:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
        Validity
            Not Before: Feb  9 15:00:44 2026 GMT
            Not After : Feb 10 15:00:44 2026 GMT
        Subject: CN=8eadb2351e19e656c4d8d5d63c12da479cdc218d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:18:55:d4:5f:00:e0:55:1f:e2:6b:ea:b0:
                    5c:2b:38:47:d8:65:06:56:b0:af:d0:4a:5f:6c:f9:
                    a4:17:d5:5a:03:66:33:1e:33:f4:70:da:3c:2e:12:
                    cc:f2:bf:21:2c:49:64:8a:ea:90:72:8a:26:b1:96:
                    5f:d5:7d:28:eb:fb:13:57:d5:02:aa:1e:cf:2a:25:
                    94:9e:07:6f:55:18:c3:31:16:ce:b3:e6:04:bc:86:
                    1c:8c:e0:4d:e0:ad:7a:c4:b1:11:a1:dc:02:b9:3b:
                    56:db:3e:b2:f3:92:c1:b9:3a:5f:97:99:25:cf:9b:
                    a2:94:e8:db:82:e4:16:6c:7f:77:ce:30:11:32:12:
                    88:53:74:5b:c5:a1:97:c9:dd:73:06:93:9c:86:ba:
                    6e:45:88:5c:5c:33:f1:ff:a9:fe:f9:28:e6:0b:db:
                    da:ea:40:8b:8a:bd:a0:c1:6c:53:fe:cd:c6:a1:de:
                    3d:25:d9:74:6f:83:fe:51:57:62:56:30:f5:43:db:
                    0c:a3:eb:eb:f2:2a:69:d1:ad:de:d0:23:6a:ec:b4:
                    56:6c:a3:a6:bc:15:a0:57:ec:bf:95:07:df:02:53:
                    7c:8c:53:d1:9c:dc:9b:53:50:20:c4:77:ff:d1:24:
                    03:d8:c0:a8:0d:6c:7b:cb:63:71:b8:b7:28:f5:87:
                    2e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:B2:35:1E:19:E6:56:C4:D8:D5:D6:3C:12:DA:47:9C:DC:21:8D
            X509v3 Authority Key Identifier:
                keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:c8:f4:bc:32:2e:d5:14:22:4d:e1:6d:37:77:36:82:ec:
         49:77:14:40:6a:fe:3c:a8:98:bb:fe:3d:d7:05:77:9f:34:8c:
         13:2d:17:f7:f8:b2:5d:3e:2f:82:d3:36:9b:fa:04:bd:1a:b5:
         ed:9d:8a:98:45:f4:d9:bb:9b:8a:82:d0:b2:10:4b:b6:51:3a:
         e8:58:0d:39:60:53:44:94:ed:d1:0c:73:9f:8c:d6:48:b2:a6:
         15:5f:15:dd:1c:e5:ee:91:75:70:74:1c:07:d5:e7:06:02:fc:
         8f:6f:e3:32:f9:3e:56:84:07:2c:30:88:f8:1e:24:a8:00:70:
         72:04:de:b7:b6:b3:ca:f6:43:21:94:06:ec:5f:e7:72:08:84:
         7d:c6:d2:61:2d:f2:dd:88:4f:5d:5c:30:af:41:a0:d4:ff:a7:
         b3:ae:86:e6:4d:db:00:7b:b6:2b:fe:8c:e3:3a:fa:fb:4f:ed:
         3c:4a:e7:5e:fb:eb:20:e7:31:cb:bc:8d:cf:bf:8f:e2:db:86:
         a2:d1:04:56:18:ca:c0:d0:d1:cd:b7:f7:5f:c7:ca:9c:b7:f0:
         ed:c0:a8:59:6f:85:fd:0d:75:0c:0f:91:64:fa:33:15:84:97:
         de:75:5c:0f:c5:7c:a7:b5:47:7a:52:4a:fe:e2:cc:a2:02:d0:
         c7:8c:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:30 2026 by rpki-client