This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File:                     yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier:          h7td+5+Ah7Uk171IEIl4HceUHQy0IYWFqylNfLzkxEg=
Subject key identifier:   31:C4:9B:F7:F3:0D:4D:15:A0:F1:BD:13:1E:EA:09:3B:4A:B0:5D:37
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer:       /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial:       019C273D768E52EE4D6FA557597C55210B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number:          087E
Signing time:             Wed 04 Feb 2026 06:01:05 +0000
Manifest this update:     Wed 04 Feb 2026 06:01:05 +0000
Manifest next update:     Thu 05 Feb 2026 06:01:05 +0000
Files and hashes:         1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=)
                          2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: qQNSH4NQFfIofEW15s77xBUe13fDYhF3OgXBilCycfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:3d:76:8e:52:ee:4d:6f:a5:57:59:7c:55:21:0b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
        Validity
            Not Before: Feb  4 06:01:05 2026 GMT
            Not After : Feb  5 06:01:05 2026 GMT
        Subject: CN=31c49bf7f30d4d15a0f1bd131eea093b4ab05d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:52:64:b0:65:46:9a:d2:ab:c5:b3:41:67:
                    38:9e:b1:a6:db:a1:29:70:1d:76:c5:9d:2f:84:ca:
                    05:49:f5:34:36:70:3c:8e:8a:69:ea:24:e7:a2:04:
                    f1:10:a7:eb:18:89:8e:b9:9e:ed:55:19:a5:91:55:
                    ed:44:82:0c:f6:8b:3c:e2:3e:97:b3:79:f1:4b:41:
                    c7:29:d7:44:6b:49:a2:bb:76:ec:b8:fa:67:ac:c4:
                    d5:8a:0c:45:8b:a8:4e:c5:a6:33:71:0b:ae:84:32:
                    f4:ab:cc:a7:a8:9a:ce:b5:f7:98:ac:fe:ff:46:f0:
                    04:2f:f0:da:36:af:a2:86:98:6f:18:a3:2e:c3:41:
                    a4:03:ff:51:6d:98:14:46:24:76:0f:ac:0c:e3:08:
                    ea:6b:d1:e5:e6:71:c6:bf:47:4d:6e:69:09:ca:65:
                    52:55:7e:8a:26:44:2c:d3:93:ed:c0:9c:60:89:7d:
                    80:c5:ee:d7:e7:dc:71:d5:3c:4c:dd:f0:c8:f2:7c:
                    15:6a:8d:01:fd:e7:5e:cf:07:14:6f:4f:65:8d:18:
                    d8:a0:03:6f:7f:0f:e8:ad:72:7a:2a:30:a8:79:45:
                    44:a1:d0:08:45:bd:48:a5:3b:3c:33:18:96:5c:63:
                    0a:fc:34:bc:af:b8:28:f7:3e:ba:93:b5:bc:25:fe:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C4:9B:F7:F3:0D:4D:15:A0:F1:BD:13:1E:EA:09:3B:4A:B0:5D:37
            X509v3 Authority Key Identifier:
                keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:49:bb:a5:3d:6c:0d:cc:fc:20:6a:0d:ce:76:6c:21:56:
         c2:62:35:18:9c:9f:a6:37:b4:90:07:44:a6:69:dc:b4:35:25:
         3a:fa:86:38:65:f2:b1:c6:16:d7:0c:15:ea:17:da:51:80:3e:
         b8:0a:60:0f:0d:ee:9e:94:ff:72:2a:87:78:0f:2c:f5:99:a6:
         1f:f8:1c:25:8a:d0:56:b6:cc:3e:25:7c:68:0c:f6:2e:3c:aa:
         99:0a:9d:9f:d0:fd:cb:9f:7b:04:a7:22:2d:cc:c8:4b:03:55:
         37:44:62:b7:0b:1c:f7:96:7e:3b:df:a2:c2:d9:08:d3:56:7a:
         b6:5c:27:4a:00:cf:ba:ef:bb:6b:61:c9:e2:6d:cf:3a:08:0c:
         24:b1:a0:07:fc:c0:6e:e4:db:25:b4:80:d4:6c:08:63:8d:02:
         34:43:4a:29:c8:a5:e8:49:fd:93:c0:70:4a:5a:ff:43:a1:be:
         f4:b7:be:68:d1:78:90:15:c6:d8:12:95:6f:00:f2:2e:e1:24:
         7e:a4:7a:fe:40:5f:36:27:ec:c4:24:fc:a1:45:52:2e:38:99:
         58:0a:5d:52:00:fc:e2:ce:db:92:5a:ae:e0:9a:cd:88:10:fb:
         c2:d6:8e:1b:20:11:fb:de:00:b7:83:46:25:76:d1:d5:63:f1:
         f7:0c:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:23 2026 by rpki-client