This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File:                     yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier:          6d6iQ+uTYnHbYD+HMQrdPlR9kwnk+rAJn2NQnzjR4GY=
Subject key identifier:   6F:AD:16:F9:60:2A:82:E3:CC:C2:E1:34:34:8A:BC:48:CE:A8:E0:14
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer:       /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial:       019C43FDCC0446A122EE43BCB3E04036AA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number:          14B1
Signing time:             Mon 09 Feb 2026 20:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:32 +0000
Files and hashes:         1: c09YJVIz1gAeeersG-N_XV14zPo.roa (hash: A4WIJzWdDctFX+Ynr5FMyCdWVozIwFvvlX52iKZ/Phw=)
                          2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: ccfG5BrVKJrEcbgTTar59uLl/23tc2uzEt3cxZrhpGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:cc:04:46:a1:22:ee:43:bc:b3:e0:40:36:aa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
        Validity
            Not Before: Feb  9 20:00:32 2026 GMT
            Not After : Feb 10 20:00:32 2026 GMT
        Subject: CN=6fad16f9602a82e3ccc2e134348abc48cea8e014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:b4:25:05:96:cf:49:50:74:62:89:c9:65:
                    f7:02:6f:29:4b:1a:be:8e:d1:c3:c9:7c:65:44:bc:
                    52:c5:64:0d:fb:3c:3a:3d:1c:0d:7d:07:1f:02:85:
                    02:21:11:da:ad:c2:d6:8f:31:17:80:48:41:ec:c9:
                    44:ce:1b:16:f1:6a:5c:b2:ff:1a:e5:41:13:fd:8b:
                    61:79:e8:4b:14:e7:53:8b:db:43:63:4a:98:d4:6c:
                    4e:27:14:dd:34:13:b2:90:e8:26:4a:e7:2b:b6:f1:
                    c5:d6:66:3f:e8:27:fb:ba:80:d3:5a:37:58:ae:26:
                    b9:93:a4:20:32:d9:c8:51:39:bc:b0:af:1e:5d:ed:
                    17:db:1b:84:c1:74:48:bb:b2:1e:30:cc:c8:e5:e4:
                    e8:73:88:da:8b:ed:d4:4c:07:67:01:62:fe:0f:42:
                    cc:58:ea:69:6b:1c:5c:92:c0:ed:56:6f:11:53:0f:
                    d4:fc:24:9c:2a:d8:e0:6d:eb:8c:0b:d0:c3:93:98:
                    2d:62:84:a8:7a:08:6e:90:58:b6:43:d7:22:51:5a:
                    b2:80:a0:6d:4f:c9:d0:a7:cf:77:cb:f6:7d:09:cd:
                    8a:5a:1f:c9:ad:c2:87:a3:b0:da:bf:00:27:90:31:
                    5c:4e:61:e4:6c:81:f1:10:07:a8:7c:55:34:56:a0:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AD:16:F9:60:2A:82:E3:CC:C2:E1:34:34:8A:BC:48:CE:A8:E0:14
            X509v3 Authority Key Identifier:
                keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:ac:62:5b:3d:eb:d2:70:53:ab:2f:49:3e:1a:5f:d2:d7:
         37:47:6a:10:73:a8:de:87:5d:a5:8a:99:79:2f:ca:de:4c:d0:
         78:50:61:61:df:9c:ea:7c:6e:c6:59:3c:fe:8e:99:09:6f:95:
         6e:03:ec:67:01:1d:79:27:7e:39:5e:95:1e:c4:87:eb:34:75:
         86:30:e0:4e:5d:65:4c:75:72:1c:82:81:7d:a5:ac:0f:6c:de:
         08:91:23:38:da:2f:39:77:0e:f0:9d:70:7b:6e:25:07:67:f8:
         54:33:03:e2:57:af:6f:92:98:4e:76:f3:4c:4c:5a:f9:35:43:
         66:af:60:66:d8:be:e1:69:16:8b:ce:d4:a0:55:82:ff:d6:cb:
         84:55:94:33:99:fc:67:a7:cd:ff:9b:72:5b:c6:3f:a1:f0:b2:
         55:78:66:d4:de:18:32:63:3e:35:a7:09:0f:36:15:9d:37:80:
         ac:25:7e:59:1c:56:7c:12:c1:ac:6c:55:01:ad:b8:13:24:d1:
         79:64:b7:eb:f2:d0:02:b6:0f:a8:ad:8b:81:19:83:bc:6c:2d:
         77:2c:05:20:17:b2:58:77:a3:a2:6d:cf:84:65:c0:2e:8d:06:
         47:60:8f:f1:64:91:17:04:b2:90:f6:f7:5f:a9:73:fc:a7:fc:
         89:32:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:37 2026 by rpki-client