This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File:                     y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier:          TyqPMzF0CEdS5eoB5CKogpe8StlvWB+Cnwp3uVgMG7I=
Subject key identifier:   49:76:97:AB:8D:DB:62:10:2A:A9:FE:DB:5C:82:52:F2:12:97:2A:AA
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer:       /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial:       019C43594AE1D56E91F583940951AC9BB581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number:          0D03
Signing time:             Mon 09 Feb 2026 17:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:50 +0000
Files and hashes:         1: ED9fPzOepDgkuJo-elslIFPUuoE.roa (hash: 6gPQSH/gpSv5/wqic1Y/TmKzEmUsxiYhBSwpI3RrMfE=)
                          2: xpqqOtgsAXsWWjj58DWw9Ikqzic.roa (hash: XQV7y3FYzj3+Xq+UX0OMewU57UNtc6BiHPtsxX2i26s=)
                          3: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: YHHDK7J2VOy2YdLuE5oYe+UcdTWDlVsTB0sHoGkD9s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:4a:e1:d5:6e:91:f5:83:94:09:51:ac:9b:b5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
        Validity
            Not Before: Feb  9 17:00:50 2026 GMT
            Not After : Feb 10 17:00:50 2026 GMT
        Subject: CN=497697ab8ddb62102aa9fedb5c8252f212972aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:6b:f5:ff:f2:95:cb:44:29:53:e8:56:3d:
                    de:b0:f5:e1:fd:1c:4d:6e:57:de:5d:46:65:2c:77:
                    3b:c3:75:0e:9e:fe:a0:70:ab:be:17:1e:5d:e3:dc:
                    b9:a9:53:6f:11:4d:90:08:33:22:e5:01:1e:49:7c:
                    67:78:b6:29:57:8e:e0:e2:25:2f:23:b9:f2:4a:ff:
                    6f:f9:2c:36:0a:9f:61:58:2a:8b:88:40:eb:8d:ae:
                    cf:9b:65:88:63:e3:93:d9:5a:34:a5:cf:dc:0e:06:
                    b5:be:ff:b4:90:41:b1:74:30:e5:43:27:b0:cb:a8:
                    c8:e2:94:92:82:c9:bd:2d:01:92:c8:40:ec:80:55:
                    5b:a0:f9:2a:49:18:6a:bb:00:d9:9e:a1:2b:ce:3d:
                    3c:c8:1e:85:c3:de:ed:7d:b3:96:cc:be:c6:4c:f9:
                    1d:75:22:0e:7b:5c:4f:b5:1a:ab:0d:6a:36:86:f4:
                    f1:bb:16:a9:a5:01:24:45:dc:c1:16:68:c5:6d:b5:
                    25:bc:bf:53:aa:ea:cc:bc:10:23:3f:b4:8d:50:04:
                    33:61:91:0f:09:1c:27:9b:38:21:7a:7e:97:c3:0a:
                    0a:f3:d9:27:03:5c:62:eb:8c:bd:73:73:ff:08:25:
                    95:2b:f9:5f:f3:3f:99:b6:ae:d6:04:c8:57:a2:4a:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:76:97:AB:8D:DB:62:10:2A:A9:FE:DB:5C:82:52:F2:12:97:2A:AA
            X509v3 Authority Key Identifier:
                keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:64:b9:10:a6:bc:c4:e2:5c:7d:b6:99:02:01:3a:0f:d3:
         0f:12:74:89:51:74:84:fa:ad:f2:80:34:45:34:03:0b:47:9d:
         a9:3a:20:4c:8c:dc:11:5c:03:3d:34:71:36:b0:1c:fd:03:74:
         03:24:c6:58:99:13:53:18:50:fc:41:83:eb:27:76:1a:31:64:
         31:a5:17:9e:d1:9d:3f:b8:13:3b:2e:cf:8a:29:89:a6:d3:a0:
         1e:bb:e0:f7:26:15:82:00:9a:77:37:e8:19:f7:0b:11:4f:5e:
         69:8c:d7:98:d8:54:c3:75:48:26:23:af:91:5b:14:f5:99:94:
         49:dd:73:09:85:cf:fc:a4:01:33:55:5f:3f:e2:f2:98:6f:c4:
         0d:30:ee:77:c6:a5:4c:ea:c7:58:8b:af:20:52:a1:f6:a5:2d:
         fb:20:2f:8f:3a:4b:ea:16:cd:d1:f1:f5:4e:c2:bc:4b:df:1d:
         8e:5e:8b:3e:e9:e0:9f:ab:ca:9f:76:1a:fb:18:88:96:26:f1:
         49:f3:8e:02:3b:56:55:f1:95:e5:9e:c0:a7:d1:5a:ae:d2:6d:
         3a:dd:96:1c:48:73:1e:9e:b9:ac:92:2b:1c:ee:15:c4:0c:e0:
         d6:bd:11:13:62:99:2c:a1:27:1a:b5:53:4f:74:c8:b1:b8:dd:
         83:f8:1c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWUrh1W6R9YOUCVGsm7WBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz
NmM0MjgwHhcNMjYwMjA5MTcwMDUwWhcNMjYwMjEwMTcwMDUwWjAzMTEwLwYDVQQD
Eyg0OTc2OTdhYjhkZGI2MjEwMmFhOWZlZGI1YzgyNTJmMjEyOTcyYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ARr9f/ylctEKVPoVj3esPXh/RxN
blfeXUZlLHc7w3UOnv6gcKu+Fx5d49y5qVNvEU2QCDMi5QEeSXxneLYpV47g4iUv
I7nySv9v+Sw2Cp9hWCqLiEDrja7Pm2WIY+OT2Vo0pc/cDga1vv+0kEGxdDDlQyew
y6jI4pSSgsm9LQGSyEDsgFVboPkqSRhquwDZnqErzj08yB6Fw97tfbOWzL7GTPkd
dSIOe1xPtRqrDWo2hvTxuxappQEkRdzBFmjFbbUlvL9TqurMvBAjP7SNUAQzYZEP
CRwnmzghen6XwwoK89knA1xi64y9c3P/CCWVK/lf8z+Ztq7WBMhXokoCnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl2l6uN22IQKqn+21yCUvISlyqqMB8GA1UdIwQY
MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt
N2E0MDU0NTUxZmQ0LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0
LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAij5kuRCm
vMTiXH22mQIBOg/TDxJ0iVF0hPqt8oA0RTQDC0edqTogTIzcEVwDPTRxNrAc/QN0
AyTGWJkTUxhQ/EGD6yd2GjFkMaUXntGdP7gTOy7PiimJptOgHrvg9yYVggCadzfo
GfcLEU9eaYzXmNhUw3VIJiOvkVsU9ZmUSd1zCYXP/KQBM1VfP+LymG/EDTDud8al
TOrHWIuvIFKh9qUt+yAvjzpL6hbN0fH1TsK8S98djl6LPungn6vKn3Ya+xiIlibx
SfOOAjtWVfGV5Z7Ap9FartJtOt2WHEhzHp65rJIrHO4VxAzg1r0RE2KZLKEnGrVT
T3TIsbjdg/gcVg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:26 2026 by rpki-client