This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File:                     yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier:          ipuZnBJhoCEulgKNsrNSIFCZ86oEPUrvOSVF4YYLTGQ=
Subject key identifier:   67:6C:59:96:07:2B:E2:FC:5D:E1:BC:A8:28:CD:D8:3C:DF:02:DE:93
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer:       /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial:       019C44D9DFF99853CCC9DC000A96F7191AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number:          03B7
Signing time:             Tue 10 Feb 2026 00:00:55 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:55 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:55 +0000
Files and hashes:         1: 1-tZEy19BYfVf-5wZ51FQXwuOEhw.roa (hash: /nAeBMYlXnQjZhhvuAHNLWLzGOzbbDnBysJXkWN1VRY=)
                          2: fhE6sPigjHqQymOx_07DpW-kE1A.roa (hash: nhb6C1pl90rN5e/RFq9dkJcLPr8IuI/iDY7Kr68b/2U=)
                          3: q4uZxE3KkC0inDgHTmM59wbNnqY.roa (hash: w6RhV4LCKX7pRPd2Vmf4e6OYIboTowPiLjjbc9D8/Z4=)
                          4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: ZVGsM6qUKRYsULKSYmmObyA0vatcBaY/xniyB2T1p6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:df:f9:98:53:cc:c9:dc:00:0a:96:f7:19:1a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
        Validity
            Not Before: Feb 10 00:00:55 2026 GMT
            Not After : Feb 11 00:00:55 2026 GMT
        Subject: CN=676c5996072be2fc5de1bca828cdd83cdf02de93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:10:20:be:27:dd:36:ca:12:ac:f3:21:e9:
                    67:21:6a:bc:bb:44:af:46:7a:6a:e8:38:25:55:03:
                    c9:52:52:5b:36:b3:72:dc:21:25:1e:d0:b4:c0:1f:
                    b3:db:78:e3:79:79:3c:47:98:9c:ac:99:b5:d5:05:
                    08:7d:6e:5a:d9:78:fd:50:67:e1:c0:1b:6c:34:3f:
                    32:ea:5a:c4:6a:92:2c:c5:6c:37:93:37:d4:b3:cf:
                    93:6b:26:b9:2c:25:4a:3c:ac:7c:6d:77:eb:46:2f:
                    a7:47:15:87:5c:90:e2:61:0f:a5:29:6b:10:2a:c5:
                    45:38:40:98:ce:87:35:ac:2c:84:ba:82:06:c0:e8:
                    d4:6c:8b:6d:cd:c9:fd:c9:4f:a3:d1:64:ca:22:97:
                    8e:cd:13:c0:b3:04:b2:7e:14:cf:d8:a1:d4:67:b5:
                    cd:2e:30:58:7e:78:89:95:98:bd:df:2f:5a:a3:2c:
                    c6:5a:44:c5:73:9a:1f:05:b9:b9:e8:03:e5:22:bd:
                    56:59:31:3d:af:67:02:6d:0c:2d:28:b9:02:13:3b:
                    2a:5b:88:8d:3f:73:b5:23:51:a5:7f:41:43:53:64:
                    6c:90:df:e5:db:23:15:88:3d:3f:d1:ea:4a:f0:a3:
                    0c:3e:99:cf:ec:fb:1d:11:75:3c:42:8f:a9:56:63:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6C:59:96:07:2B:E2:FC:5D:E1:BC:A8:28:CD:D8:3C:DF:02:DE:93
            X509v3 Authority Key Identifier:
                keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:19:6e:ed:d2:1f:64:81:54:bb:d5:7a:a9:da:30:5c:f8:3e:
         3b:d5:5f:12:4b:67:46:4a:cb:a7:83:ed:d3:20:09:5e:86:fc:
         6e:75:3d:3a:39:24:41:48:62:50:65:bd:b2:ab:4e:ee:ec:05:
         63:9f:f8:75:27:32:98:41:80:9c:23:72:cf:28:c3:4c:2c:e4:
         b6:5f:d3:5f:92:1c:be:e9:a1:b9:13:6f:a2:6c:a1:dd:cb:5c:
         3d:51:31:f0:bd:78:d7:3e:95:e7:10:21:8d:db:25:64:74:3f:
         0c:ac:dc:55:9c:d8:d1:82:fc:a8:0f:9d:cb:a7:c3:07:0a:ef:
         24:36:83:21:5a:35:b7:d8:f0:42:20:98:c4:22:74:33:3f:d6:
         9a:42:e5:0b:93:0c:b6:a4:82:96:8a:0a:b4:2d:c1:06:09:ee:
         81:f9:6b:2b:67:c3:66:10:25:8b:fa:21:d8:dd:e1:35:9d:e4:
         8c:ba:43:6e:6d:25:5d:82:20:4d:81:b1:bd:57:61:37:c3:9c:
         5b:39:69:50:38:45:4d:b9:29:71:1a:32:24:f4:5d:06:db:cc:
         84:4e:2b:ca:88:0d:ab:c8:6f:4c:85:88:4d:11:bc:03:6d:c5:
         a9:bf:58:d7:b4:a6:c1:62:3e:94:62:68:85:6b:b3:e6:c4:5c:
         0b:78:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:46 2026 by rpki-client