This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File:                     yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier:          64U1GsCCHhlygZTiyFULjGW/CuQqh0ClzB3b23jdxJ0=
Subject key identifier:   C8:BB:EB:57:41:AC:5D:77:84:DC:E0:2C:F9:53:99:4D:D9:CA:7A:20
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer:       /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial:       019C420FFE67412B8BF2589B3144A4836EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:10 +0000
Files and hashes:         1: 7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa (hash: ERfj8NBPhWtC0lRKzuI7aqZB4Hd5ZjiGJHFCXPuiqqo=)
                          2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: NzEYL17SAtdrIgVKWXkvTpcHTeHJ9F6jAZzFJaCgDPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:fe:67:41:2b:8b:f2:58:9b:31:44:a4:83:6e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
        Validity
            Not Before: Feb  9 11:01:10 2026 GMT
            Not After : Feb 10 11:01:10 2026 GMT
        Subject: CN=c8bbeb5741ac5d7784dce02cf953994dd9ca7a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:1d:66:2d:83:3d:eb:5c:63:40:bc:80:63:
                    05:ea:d7:cc:3c:9e:d1:2e:3e:58:95:9e:3f:3c:c2:
                    54:94:3e:c5:9c:1c:f9:93:3c:6d:92:59:16:06:e8:
                    85:98:6f:84:68:a3:00:20:c2:af:6d:7a:53:8d:81:
                    71:24:59:4d:e2:fe:f9:03:73:81:e7:90:ba:e1:35:
                    39:f8:97:f3:e3:c7:e3:55:e7:bb:9c:2f:78:2d:fc:
                    10:84:56:6a:2c:c3:82:d3:6c:bd:8d:74:d7:a4:d0:
                    48:fb:0e:3c:ae:17:b6:b4:6b:55:76:65:a6:ac:18:
                    f1:8e:f2:f7:d6:5f:63:2e:3f:79:0f:c2:98:ce:6f:
                    72:c7:30:d7:d5:ac:5b:4f:49:0e:89:e4:c0:b7:29:
                    f6:bb:7d:e6:7a:33:8e:ef:6c:2a:cc:f9:b7:8e:5a:
                    73:79:ab:eb:ef:f0:e3:21:a0:28:34:6c:75:f3:90:
                    95:d9:7c:35:6c:f8:09:37:ea:f4:7c:d5:79:18:64:
                    37:2d:57:3f:45:1f:4a:6d:3e:bd:68:45:2b:77:5f:
                    53:a7:6a:b3:11:36:72:fc:82:aa:f5:55:39:9c:39:
                    82:a3:f7:6c:04:b4:b2:a5:5b:5b:9c:b6:6d:04:89:
                    8c:df:69:49:d6:ae:50:85:85:08:57:05:83:79:cf:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BB:EB:57:41:AC:5D:77:84:DC:E0:2C:F9:53:99:4D:D9:CA:7A:20
            X509v3 Authority Key Identifier:
                keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:6d:e8:aa:53:fd:5d:06:23:22:fb:d0:3f:a4:80:4d:57:
         23:b9:5b:30:fb:77:44:3e:e9:12:45:9c:7b:7d:99:96:be:f3:
         24:d1:13:76:2a:ba:dc:70:e5:73:7f:3a:57:52:59:2a:72:d1:
         f8:b2:6b:2b:63:3b:a8:c6:3d:a5:ec:de:3c:f7:44:c7:92:dd:
         35:ff:db:f3:2a:57:6f:56:11:29:bb:b0:01:95:48:41:8f:9b:
         e2:c3:a1:b7:a0:74:67:b2:d2:48:e3:a3:69:71:e5:9d:2b:94:
         74:c2:d5:6c:84:ad:3c:60:f3:e7:94:80:38:72:de:c5:7e:c2:
         e2:b6:f3:46:0b:42:00:df:97:e9:95:7f:4a:46:6e:4b:f3:93:
         22:eb:2c:7e:81:31:6b:4d:87:eb:4f:4f:0f:93:75:a8:29:90:
         b3:7a:0b:99:e5:c8:c0:41:90:fc:fc:24:7d:c3:4f:3e:ca:76:
         ee:ba:f4:fb:be:1b:44:29:9d:55:8a:bc:83:5e:f9:28:c1:e2:
         df:3b:5f:de:4d:a3:b8:1f:01:72:47:71:3d:4f:3c:e5:7b:f9:
         8e:b1:bf:bc:a7:0f:fe:6b:35:30:51:58:17:ed:0f:da:0f:af:
         4b:08:e1:4b:9f:47:20:0c:77:f9:81:16:ed:fc:e8:d6:fd:38:
         de:0a:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:34 2026 by rpki-client