This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File:                     aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier:          DMkLvXrR4373Q/H3K2eExFT+xvMt2G4z6FjMPoAAhPA=
Subject key identifier:   28:91:A9:56:AC:DE:E5:CE:70:CA:C3:D0:91:BB:97:6C:DF:B2:3F:F8
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer:       /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial:       019C4390B5570D18271400A4B923E1EFBF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number:          12D9
Signing time:             Mon 09 Feb 2026 18:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:22 +0000
Files and hashes:         1: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (hash: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8=)
                          2: UNFdj_dmEx775tbeS-AdmcBAiAE.roa (hash: GIoAJC41bvDl3yvA5gqVhCuJLL8h9+anwpxNy9MCtyo=)
                          3: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: HvCV5h7quIOv13wRDzx6tijJNYG6/BtRJhfz5t5VY4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:b5:57:0d:18:27:14:00:a4:b9:23:e1:ef:bf:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
        Validity
            Not Before: Feb  9 18:01:22 2026 GMT
            Not After : Feb 10 18:01:22 2026 GMT
        Subject: CN=2891a956acdee5ce70cac3d091bb976cdfb23ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:f2:e8:e9:b6:1a:c5:c1:f4:3a:e7:6b:e2:
                    4b:bd:5c:6d:f1:f6:84:89:e1:fd:9f:90:43:28:95:
                    75:fb:ae:94:c3:d4:7f:c0:df:ee:07:9d:fb:97:00:
                    93:6b:02:ea:3e:40:b5:44:32:8a:af:6e:6f:79:10:
                    cb:04:d3:e0:fe:9b:96:a2:fd:65:1f:47:cd:db:5f:
                    45:6b:a0:7b:cc:61:43:9a:87:37:45:89:b3:b1:67:
                    25:3c:91:d0:79:48:5f:f3:4a:4b:53:b4:fb:41:fa:
                    64:4b:06:26:bf:be:07:c2:f2:5b:51:1c:fd:11:9d:
                    e6:10:c6:60:5e:20:18:3d:14:45:1f:39:f0:fd:c4:
                    52:64:4a:79:aa:a7:9f:4c:9c:eb:06:0b:2f:4c:b0:
                    f9:1f:68:0a:80:ba:d2:5e:1f:eb:3b:3f:7d:d7:0e:
                    32:00:9b:fc:08:5c:ab:7a:24:79:db:6d:25:5e:e9:
                    d8:44:e2:e8:08:8a:a2:40:60:18:a4:f6:05:51:17:
                    f1:6f:a4:f9:f1:0d:50:88:02:09:88:94:95:9a:ac:
                    f9:84:1f:df:0d:77:7c:0f:b8:70:ed:d9:9f:bc:f2:
                    d5:b2:3a:3c:15:18:36:d3:a5:aa:ac:0b:7d:b7:d2:
                    5c:54:da:f4:fd:ee:1b:71:94:bf:a7:f1:49:44:a7:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:91:A9:56:AC:DE:E5:CE:70:CA:C3:D0:91:BB:97:6C:DF:B2:3F:F8
            X509v3 Authority Key Identifier:
                keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:2c:81:91:21:30:90:2f:24:45:49:fa:65:c8:e8:01:7c:5a:
         02:f8:d9:f4:9b:df:82:a4:6c:13:6a:4b:fa:a5:2e:f2:ae:43:
         f6:9c:c4:b8:ba:42:9b:5f:f9:d8:b8:31:e3:52:1e:e1:46:01:
         f6:a7:e8:8c:47:5f:89:1a:c4:1b:22:76:30:e1:f5:25:ff:88:
         87:a0:15:91:80:f6:92:23:e2:09:a5:49:b4:e8:77:ee:66:93:
         df:82:a6:02:9c:c5:3d:82:de:c7:66:ad:59:3f:d5:91:e7:9c:
         3a:2e:80:cd:27:8b:d4:bf:93:2c:e8:c7:f4:4a:f7:6c:5c:36:
         ec:71:94:c2:12:fc:ea:c8:40:cd:b2:20:1c:9c:c2:a9:ab:56:
         17:89:51:47:46:77:7d:3d:ca:b9:7e:4f:9f:e6:46:76:98:a3:
         7f:3d:dc:41:6c:d8:37:ce:10:0d:da:14:aa:18:04:80:6a:57:
         22:78:70:24:58:9d:f0:ad:db:28:c3:cf:bb:e9:52:a2:9b:c5:
         c1:f2:5a:44:98:67:53:95:25:18:c4:39:94:fa:8f:b1:b8:b9:
         ba:31:cc:1b:9a:a8:56:c1:35:32:fc:8b:05:d9:18:aa:0e:b7:
         ac:94:5b:f8:d8:5e:32:5b:3e:61:0e:90:e1:83:06:c0:1f:8d:
         14:c8:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:32 2026 by rpki-client