This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File:                     Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier:          MUldBT35rVg1h6UAlVddhG7pX5VQh+P7IxH9TKdT2k0=
Subject key identifier:   20:43:74:74:55:4B:90:BB:74:A9:78:98:10:42:8E:69:A7:D8:7D:E9
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer:       /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial:       019C40FD4B32E0932ED1365FBAF5B7ECFC19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number:          155E
Signing time:             Mon 09 Feb 2026 06:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:07 +0000
Files and hashes:         1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
                          2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
                          3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: j/sJ1JvRyZA/1vWzhGGVU586a0VeQRo0DUoczBvphDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:4b:32:e0:93:2e:d1:36:5f:ba:f5:b7:ec:fc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
        Validity
            Not Before: Feb  9 06:01:07 2026 GMT
            Not After : Feb 10 06:01:07 2026 GMT
        Subject: CN=20437474554b90bb74a9789810428e69a7d87de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:44:6c:9c:7f:46:b6:2c:6a:66:fa:88:d7:
                    78:da:a3:1f:f4:b0:b3:15:fd:71:25:ba:4b:d6:6e:
                    c9:95:25:78:3a:a2:3d:7e:29:8a:d1:bf:c7:18:4f:
                    1d:50:8a:b2:67:c7:ba:ef:dc:7c:78:5b:87:dc:e2:
                    61:b1:36:d5:c2:1d:02:cd:83:98:1c:c9:e6:b6:b6:
                    90:e4:fe:61:78:0c:ad:60:eb:e6:c8:de:33:c7:77:
                    39:3a:19:1b:e2:d4:6a:f9:33:2b:28:04:52:2a:f3:
                    63:85:3e:46:44:08:8b:e4:4f:75:de:91:90:8c:96:
                    a1:62:77:34:e7:c3:69:59:0e:b7:5b:c6:52:3e:81:
                    cd:33:c6:78:19:9b:13:5a:88:58:2e:83:b6:91:3a:
                    88:30:cc:2b:66:e4:62:31:67:40:33:79:51:47:f9:
                    f5:08:02:24:08:98:1f:4a:da:a6:6f:de:cd:6a:a0:
                    82:75:1f:3f:c9:99:71:3f:9f:b0:f6:70:43:22:4e:
                    19:ff:76:f9:b4:e1:a5:3c:b0:a5:ec:a7:47:76:a1:
                    1f:34:9d:69:b2:1c:5f:ba:ef:f1:bb:d2:58:d6:53:
                    fb:91:04:ba:64:07:b1:9f:c8:7f:06:c8:52:43:26:
                    f1:d5:db:c3:a3:a7:c2:6d:27:8b:f1:f3:0c:40:3f:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:43:74:74:55:4B:90:BB:74:A9:78:98:10:42:8E:69:A7:D8:7D:E9
            X509v3 Authority Key Identifier:
                keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:b8:87:c9:97:61:7f:45:36:ca:6c:85:e8:2b:c1:97:37:
         64:ad:95:8a:29:e6:67:67:6d:b3:96:fd:28:69:2f:8d:6b:48:
         97:84:fe:16:49:f8:93:e9:9b:f7:9d:6e:00:fc:31:35:49:7d:
         56:51:7e:8f:ad:1a:6f:38:1a:54:24:60:31:71:2d:dd:cb:92:
         7a:d7:fc:87:bb:30:4b:dc:32:f0:1a:69:6a:f1:db:fc:d5:87:
         fe:9e:58:d4:41:09:a0:4d:ea:86:13:01:e4:95:d1:53:ad:ee:
         95:12:9e:93:38:04:4e:4a:a7:ea:74:4f:85:77:80:95:ad:a9:
         73:a4:5f:d8:29:28:36:14:bb:58:71:94:03:f9:b7:cb:c4:fc:
         e9:92:6b:c4:9c:af:bf:2c:89:25:fe:a1:7b:33:83:4b:5e:98:
         9a:45:64:f1:cd:4f:60:06:c5:3c:6e:1d:6d:8d:da:c5:4f:e5:
         8a:e5:5b:c3:a7:8b:97:7e:c5:6f:07:7f:fd:35:07:67:4e:79:
         f7:3c:6c:76:bc:85:cc:1a:88:24:5e:e6:75:59:9b:74:90:63:
         73:62:ba:06:cb:72:18:69:e2:f1:04:bf:fb:89:a3:d6:fd:63:
         a1:3b:bf:a5:42:48:a3:73:59:13:e5:42:ee:14:5a:aa:a4:39:
         14:fb:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:43 2026 by rpki-client