This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
File:                     YjqxggzkjFedpAxm2FJl8cLPy04.mft (raw, json)
Hash identifier:          SOBvOLw4Ss2uyN5f/jTe4G2cplF3FKUEEDFFxx94TpU=
Subject key identifier:   26:03:9C:6F:BA:F8:77:3D:24:4E:4B:26:19:FD:8C:3C:8D:71:CB:19
Authority key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Certificate issuer:       /CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Certificate serial:       019C43FDA30A02F7F9093D4AFE7F5C55A999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
Manifest number:          0895
Signing time:             Mon 09 Feb 2026 20:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:21 +0000
Files and hashes:         1: YjqxggzkjFedpAxm2FJl8cLPy04.crl (hash: dG+LZIupDWHOlSED2kBiG15L9gmqlYiheA0fFRnzPIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:a3:0a:02:f7:f9:09:3d:4a:fe:7f:5c:55:a9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
        Validity
            Not Before: Feb  9 20:00:21 2026 GMT
            Not After : Feb 10 20:00:21 2026 GMT
        Subject: CN=26039c6fbaf8773d244e4b2619fd8c3c8d71cb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:3b:92:e6:ec:68:53:27:0c:02:5b:62:04:
                    5b:d0:60:4e:7a:65:0e:58:ea:20:19:cf:4d:3f:05:
                    fc:6c:0c:18:e3:53:77:7c:3c:4c:41:73:8f:9d:fe:
                    be:0d:79:be:22:de:bf:d2:23:7c:97:30:2c:f3:40:
                    5d:cb:8d:d9:87:66:14:9d:f1:73:b6:e4:dc:ae:05:
                    32:fd:a6:33:1d:3b:4e:a4:c4:d6:f6:ef:fd:52:d7:
                    da:39:65:e0:1c:74:ad:e6:3b:d3:2d:de:b3:09:72:
                    15:7d:a8:ca:b4:42:99:e4:5a:b4:d0:86:5d:fb:fe:
                    0f:60:95:ce:a0:72:8b:f1:1f:19:68:cf:c1:86:49:
                    d8:26:ba:91:f3:95:ae:37:4f:0f:a9:06:80:79:6a:
                    fe:f9:e5:de:d7:8d:00:1c:d8:46:a1:cf:12:c4:57:
                    88:fa:b0:c5:d6:4c:f9:43:50:f5:34:32:3b:2d:25:
                    29:61:c9:f2:76:1c:0d:7c:cd:c9:e8:e4:86:cd:85:
                    07:cb:25:a2:f6:94:1d:e6:2f:05:a2:66:d0:20:c3:
                    52:3b:d6:43:06:03:eb:3b:80:03:fc:b1:34:81:25:
                    c1:ce:ee:e3:e9:fa:8e:4c:f0:48:55:90:cf:e3:ab:
                    e5:7e:ac:34:ce:ab:d4:fd:49:6a:d9:37:7d:30:c5:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:9C:6F:BA:F8:77:3D:24:4E:4B:26:19:FD:8C:3C:8D:71:CB:19
            X509v3 Authority Key Identifier:
                keyid:62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:dc:6f:67:0d:f1:06:b4:20:71:7c:cd:07:08:24:f6:93:
         d4:53:78:45:9c:ee:81:2a:af:94:d3:ee:df:1e:12:bb:9e:68:
         45:24:b0:3e:3e:a6:a7:e0:c1:8d:7b:39:e2:e7:9c:68:c7:3d:
         89:04:20:11:e1:61:52:60:58:7b:20:59:77:b7:9f:a9:93:6e:
         7e:d2:10:f9:a6:4d:39:1c:02:92:30:4a:e3:93:33:6e:d2:a6:
         aa:88:fb:df:6e:30:22:3f:aa:73:ae:d4:bf:aa:a3:8c:4e:6b:
         fe:58:d8:73:61:ef:31:b7:82:38:bf:21:3b:37:b3:ac:59:dd:
         ff:38:b8:81:29:f6:f3:cd:45:28:94:8b:c3:05:81:b5:17:bc:
         2e:d3:87:ff:28:8f:f8:c8:68:94:64:ec:90:a3:e4:f7:67:dd:
         2d:ae:0e:31:84:ed:4c:6f:79:f3:7f:04:ab:ab:77:2c:33:63:
         3d:2b:b1:a8:c6:eb:c7:6f:91:06:00:ea:d6:70:69:12:f3:1a:
         b7:79:b0:c6:01:22:e9:f7:fc:19:ce:cf:48:00:93:5f:31:6c:
         c4:08:2f:c5:b0:f5:d6:4e:13:5d:f4:1b:1a:99:cd:67:97:de:
         4e:63:68:17:a1:4f:de:10:f9:e6:c4:be:32:42:71:28:ae:dd:
         f0:63:e9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/aMKAvf5CT1K/n9cVamZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyM2FiMTgyMGNlNDhjNTc5ZGE0MGM2NmQ4NTI2NWYxYzJj
ZmNiNGUwHhcNMjYwMjA5MjAwMDIxWhcNMjYwMjEwMjAwMDIxWjAzMTEwLwYDVQQD
EygyNjAzOWM2ZmJhZjg3NzNkMjQ0ZTRiMjYxOWZkOGMzYzhkNzFjYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRU7kubsaFMnDAJbYgRb0GBOemUO
WOogGc9NPwX8bAwY41N3fDxMQXOPnf6+DXm+It6/0iN8lzAs80Bdy43Zh2YUnfFz
tuTcrgUy/aYzHTtOpMTW9u/9UtfaOWXgHHSt5jvTLd6zCXIVfajKtEKZ5Fq00IZd
+/4PYJXOoHKL8R8ZaM/BhknYJrqR85WuN08PqQaAeWr++eXe140AHNhGoc8SxFeI
+rDF1kz5Q1D1NDI7LSUpYcnydhwNfM3J6OSGzYUHyyWi9pQd5i8FombQIMNSO9ZD
BgPrO4AD/LE0gSXBzu7j6fqOTPBIVZDP46vlfqw0zqvU/Ulq2Td9MMVy2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYDnG+6+Hc9JE5LJhn9jDyNccsZMB8GA1UdIwQY
MBaAFGI6sYIM5IxXnaQMZthSZfHCz8tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDIt
NmMzZDExZDQwZDc4LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNGM5ZDUtZTI3Zi00NGJmLWJhNDItNmMzZDExZDQwZDc4
LzEvWWpxeGdnemtqRmVkcEF4bTJGSmw4Y0xQeTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdXcb2cN
8Qa0IHF8zQcIJPaT1FN4RZzugSqvlNPu3x4Su55oRSSwPj6mp+DBjXs54uecaMc9
iQQgEeFhUmBYeyBZd7efqZNuftIQ+aZNORwCkjBK45MzbtKmqoj7324wIj+qc67U
v6qjjE5r/ljYc2HvMbeCOL8hOzezrFnd/zi4gSn2881FKJSLwwWBtRe8LtOH/yiP
+MholGTskKPk92fdLa4OMYTtTG95838Eq6t3LDNjPSuxqMbrx2+RBgDq1nBpEvMa
t3mwxgEi6ff8Gc7PSACTXzFsxAgvxbD11k4TXfQbGpnNZ5feTmNoF6FP3hD55sS+
MkJxKK7d8GPpjQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:37 2026 by rpki-client