This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
File:                     Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json)
Hash identifier:          IxsRRpAwKYYB1VtivT1f8tBJDT9iW7Dggx8wzR2SYIA=
Subject key identifier:   76:B0:3A:5A:6A:D5:A0:5A:FB:B1:81:C7:95:08:AC:54:B6:6A:B6:CC
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Certificate issuer:       /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial:       019C4321EFD9A4FA43AE4F9023832EA65EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
Manifest number:          0D2D
Signing time:             Mon 09 Feb 2026 16:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:23 +0000
Files and hashes:         1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: PjBjVCfrJLw3W1kiP6GzdvLMbimq8QoZTNIc6m4EtLU=)
                          2: dJuawEWS8NqZGJF9uJKMoItyq7U.roa (hash: IYmTE9NklyCZqQOo3sZkgAOEmHqhiMDY4VmI2iuEFr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:ef:d9:a4:fa:43:ae:4f:90:23:83:2e:a6:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
        Validity
            Not Before: Feb  9 16:00:23 2026 GMT
            Not After : Feb 10 16:00:23 2026 GMT
        Subject: CN=76b03a5a6ad5a05afbb181c79508ac54b66ab6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:b2:f3:ee:cf:b3:53:ae:ad:ad:44:6e:20:
                    2d:97:70:87:29:64:1d:a5:4b:bd:f1:81:5b:32:97:
                    ea:0b:bd:28:50:75:22:ca:61:28:b4:63:bf:e5:cc:
                    49:f1:86:40:31:ef:cd:32:67:e5:4c:f8:4f:d6:c5:
                    a4:f6:3f:06:42:e1:c5:8d:57:d7:29:93:67:cf:f6:
                    29:09:ba:78:60:73:d0:a0:f9:a4:b7:c9:97:7a:63:
                    26:b0:32:cf:40:93:42:f1:9d:5b:d4:16:58:fc:91:
                    b6:3a:4f:93:c2:2e:25:39:01:cd:f4:7e:6d:6b:1a:
                    e3:c8:55:41:9e:55:fb:c8:d9:b6:17:62:66:5c:ad:
                    2d:8d:e9:84:5a:39:bc:5f:02:71:22:8e:2b:41:a6:
                    df:c9:8f:49:a5:86:c6:c6:df:a3:79:e8:06:ca:e7:
                    6f:2b:d6:30:c6:03:70:05:7b:ba:53:2c:a4:3a:6e:
                    c5:ea:3d:34:12:46:c8:43:9a:05:03:b7:76:77:21:
                    70:cd:23:28:ba:5c:89:d8:43:8b:90:fe:9e:4d:4e:
                    f7:3f:1e:e4:c2:03:b8:fd:ed:38:82:a3:aa:1b:3e:
                    18:5a:5e:54:9b:ee:26:84:32:7f:2c:e6:e9:05:18:
                    af:96:af:9c:90:db:8e:0c:34:81:01:39:c0:b7:3e:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B0:3A:5A:6A:D5:A0:5A:FB:B1:81:C7:95:08:AC:54:B6:6A:B6:CC
            X509v3 Authority Key Identifier:
                keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:07:93:e3:95:b6:52:9b:8c:3e:e3:97:f5:e6:78:5a:fd:
         e3:49:f7:3f:41:ca:1a:b8:bb:75:22:0c:78:32:92:f4:4a:9f:
         5a:86:60:3b:bd:80:fc:b4:ea:01:bd:7d:d2:9f:22:58:2b:5b:
         6d:25:40:16:be:24:ca:07:96:b7:9e:33:ac:30:75:07:c6:0c:
         d1:86:1d:8f:b8:9e:45:7c:81:6e:e6:e1:b3:d2:1a:a8:f0:49:
         ad:90:d9:7f:91:08:70:3d:1a:55:78:e8:b3:c1:27:6e:53:e7:
         2b:c2:d9:f8:2f:93:a4:b4:30:5d:57:8c:c5:84:ac:67:3d:5a:
         80:57:fe:06:d2:5e:9d:3f:cc:51:a5:33:01:30:60:4f:a7:37:
         90:2c:8c:03:29:a4:35:ab:50:99:35:fe:ca:4f:4a:e1:53:4e:
         35:e8:99:eb:ab:09:cc:85:bb:a2:29:c7:48:c4:7e:35:88:74:
         15:03:16:b7:95:fa:a3:77:00:8c:9c:e3:30:76:2f:00:f8:e5:
         01:2a:22:1f:39:1f:e3:2f:56:50:73:ae:15:ad:12:a1:be:cb:
         ba:53:0a:e6:f9:6a:2a:c6:40:e0:dc:0f:1d:bb:11:cb:a0:44:
         c7:5f:e8:ff:0c:a2:b9:80:67:2e:d9:10:08:26:83:b6:fe:dd:
         91:74:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:14:04 2026 by rpki-client