This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          klCJ54kWj7KLynfGtQq9fTkr2Oc8c0Zcrm5HxaxTQXI=
Subject key identifier:   3A:E0:4F:9D:AE:0D:37:90:6E:A3:91:D5:9F:C6:E9:24:F6:96:68:8D
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       019C4322036D78D7A8A7A1D63AA6D86D0257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          1422
Signing time:             Mon 09 Feb 2026 16:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:28 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          3: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          4: krxQoQpADGwrNtF32wcvVXkDpM4.roa (hash: T/5MSZCP6XfC0z7V2YyYRpV0hTQ4s9MowyKI/yjRRPw=)
                          5: tSkM6kNefyzWcq-Fe_mE4IRCVaE.roa (hash: 2epHrxdOpaEpNiQeQg138M3TB4rHHEC4AOBSXw7Qyrk=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: DsHedWINyPIRDpd9hWZK5xyLoVOQWW7V3Vb2XvssMlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:03:6d:78:d7:a8:a7:a1:d6:3a:a6:d8:6d:02:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Feb  9 16:00:28 2026 GMT
            Not After : Feb 10 16:00:28 2026 GMT
        Subject: CN=3ae04f9dae0d37906ea391d59fc6e924f696688d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:2f:12:33:48:29:0e:83:ec:80:aa:96:cc:
                    8c:55:98:9c:c8:d7:59:fa:7d:18:d3:f7:e0:74:c3:
                    80:49:2d:7a:c9:9e:5c:e9:2f:83:f8:f2:e8:ce:e2:
                    43:5a:e9:94:94:cf:e0:cf:5d:cd:96:a5:cc:65:42:
                    05:11:c1:38:f2:20:97:cc:8a:c1:6a:69:2c:ec:b9:
                    f3:ed:23:eb:b2:ea:39:3b:05:ce:44:17:00:ab:2c:
                    84:61:88:42:90:6a:fb:95:24:bb:f1:36:90:b0:a8:
                    3a:74:34:53:4f:38:19:c3:8a:ac:0a:93:38:6f:29:
                    8a:80:eb:c6:ba:f0:24:9b:fa:e1:da:6d:d5:e4:59:
                    0e:5d:9f:42:12:a9:dd:27:32:42:1f:55:2c:e4:64:
                    15:6e:ba:da:a4:2f:7f:47:32:99:dd:80:4e:63:a8:
                    d7:63:8e:e5:12:bf:05:49:88:b5:b2:c1:72:62:0a:
                    44:28:67:47:d3:a8:42:7a:53:8d:93:86:e7:1b:f8:
                    a3:40:02:ab:00:48:56:28:f2:a5:41:b2:c7:b7:89:
                    56:6a:46:c9:0c:d4:7e:39:c8:8b:0d:8b:14:64:cd:
                    61:26:30:b2:2b:90:2a:82:b1:d1:bc:a2:a6:94:da:
                    1f:69:9e:bb:e2:b9:ba:07:51:64:97:37:1a:7c:ac:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E0:4F:9D:AE:0D:37:90:6E:A3:91:D5:9F:C6:E9:24:F6:96:68:8D
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:11:43:18:50:68:1f:8a:c3:ac:21:ab:6f:87:da:b1:f5:
         43:06:6c:99:27:b1:47:01:40:1b:6d:ed:ff:a6:95:76:43:47:
         99:4e:db:39:bd:1e:0d:2d:9c:5c:5b:67:3f:88:f6:1d:69:9d:
         37:5d:05:a3:d2:e7:f5:1b:92:e2:b0:84:66:b7:d8:9f:8c:f4:
         e9:ae:e0:cf:a9:1a:42:36:b8:67:88:f5:47:b2:8d:b0:55:4a:
         7d:db:35:28:f9:3e:f0:34:a4:92:36:ad:d4:57:58:20:9c:d9:
         95:f1:2a:44:d6:80:b1:bc:05:17:38:d8:00:61:05:c1:c6:b5:
         ae:f4:f3:eb:ab:fb:9b:57:54:fa:0f:2b:e7:d6:65:ab:0c:6f:
         f9:ee:e8:13:68:1e:2b:d2:2f:23:fb:41:1e:8c:62:5b:59:8a:
         a9:d7:76:a1:08:0f:46:60:e2:28:cd:d6:3e:3d:7d:97:7a:dd:
         f2:10:02:14:d3:1b:7c:7c:0f:6f:e4:81:68:49:dd:6a:68:29:
         6c:25:1a:88:d6:c5:94:ed:71:08:fe:6d:27:83:39:55:85:73:
         8f:da:54:95:08:44:2a:42:d4:c3:99:cf:54:14:8c:9b:a6:75:
         32:1b:b8:e2:09:c1:c6:47:a0:90:aa:b8:50:e4:4f:bd:29:bd:
         8c:61:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:29 2026 by rpki-client