This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File:                     YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier:          1VUGWR1mwCCEMyBmHpvKBAH/FllIRv6rbr2cABa0hnQ=
Subject key identifier:   BB:BE:E4:99:C7:0C:BA:81:54:18:1B:E3:43:D2:B2:95:BD:45:1A:DC
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer:       /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial:       019C4359177C709C6EA7307371CCC8D8C269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 17:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:37 +0000
Files and hashes:         1: OgWEvpt9l3fjUZPTGCjCIeBKF7g.roa (hash: ERaqLzlMb64hRM2SkbR4/skAX7oKEBTPX2o20Ce35C4=)
                          2: YNe4buptuJ7UBEwKBogeIyq80jg.roa (hash: NkTj5ifZYkof4P8g9p6OTOx3j64mOVFXyYQzcr25aXA=)
                          3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: reHerYPdeDkYDu01OEu4uhbdYldjUA9sio8fwlseEZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:17:7c:70:9c:6e:a7:30:73:71:cc:c8:d8:c2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
        Validity
            Not Before: Feb  9 17:00:37 2026 GMT
            Not After : Feb 10 17:00:37 2026 GMT
        Subject: CN=bbbee499c70cba8154181be343d2b295bd451adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:8d:77:4b:36:0d:82:8d:37:2d:c9:ea:58:
                    73:7d:9c:8d:f5:cc:d0:8a:2f:f7:e3:cd:36:d1:1e:
                    de:62:02:0c:a5:fa:d3:e1:00:b0:0d:8c:20:b7:2b:
                    e9:fd:81:6b:35:08:c6:f1:29:e2:61:94:85:15:76:
                    ef:33:c2:4d:f3:b5:3d:ea:57:2b:e3:2d:43:bf:58:
                    1e:a5:4f:cc:b1:39:85:40:64:51:0f:b1:8d:9a:dc:
                    40:7d:db:ef:c6:39:b2:b8:20:ac:4c:72:5a:21:bf:
                    99:a6:41:cb:35:1f:eb:2a:a6:a9:dd:ee:48:e9:67:
                    4f:ec:e2:c9:f9:87:f2:1f:94:d5:cb:fb:bb:53:0a:
                    f8:4c:d1:7d:c0:2e:7b:b4:5f:b8:02:ca:fc:10:f9:
                    a6:ce:ef:05:ba:71:09:63:36:67:b6:30:ef:90:9b:
                    c4:1e:e3:8a:f7:30:82:96:ce:40:ba:c9:ee:40:bd:
                    e8:79:1b:a0:80:30:6b:6e:95:27:9c:a3:bc:65:db:
                    70:eb:0d:0f:4f:3b:77:9e:4f:e6:d3:96:d5:69:44:
                    62:2a:d5:e0:49:9a:fa:34:4e:a9:d2:9a:f1:ed:0a:
                    76:ab:cd:db:87:12:ac:6c:73:d6:45:80:18:e8:5d:
                    89:65:05:b3:e0:52:69:fb:f4:7c:21:d6:7c:e5:02:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BE:E4:99:C7:0C:BA:81:54:18:1B:E3:43:D2:B2:95:BD:45:1A:DC
            X509v3 Authority Key Identifier:
                keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:e3:a6:05:78:c6:98:88:b5:ff:a7:4b:b2:e1:78:fa:33:
         82:2b:95:eb:fb:fb:02:d3:ec:68:a1:66:76:0d:7d:ee:c9:16:
         d9:7f:da:c3:f0:63:48:3d:f8:98:e7:80:f0:f8:06:0d:2a:40:
         2c:a3:29:12:49:10:5f:dd:e8:e6:6a:63:82:cc:f3:3e:4b:22:
         8b:36:fa:34:6b:67:64:09:8d:6c:5f:f3:87:9a:d2:fb:5a:0a:
         01:0f:f3:d4:6b:6b:e5:88:f7:e4:a8:3d:52:21:1d:7e:a5:67:
         31:32:ac:63:9d:e3:9a:2b:4f:0e:63:8a:79:a5:08:8d:b2:e7:
         43:36:c9:58:fb:4a:1f:68:35:22:c1:c4:c6:e0:0d:50:9c:e9:
         47:1c:64:97:94:fd:98:08:11:01:9d:6d:a1:32:76:8f:30:76:
         e5:e0:9d:5c:7e:d2:f5:e9:55:a1:03:81:dc:a8:4c:11:c9:01:
         af:e3:be:f3:41:0d:91:20:a1:61:08:a1:ba:f1:ae:a3:42:1b:
         8a:a5:f9:37:2a:4d:f0:15:28:d3:c7:0c:5c:47:c2:d4:31:80:
         0b:75:fe:3f:35:f9:c1:90:b5:30:0f:f5:9e:6f:b9:de:e1:62:
         9d:af:74:cf:62:44:e4:56:86:ba:ad:94:61:4f:af:21:f4:7d:
         03:f9:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:13 2026 by rpki-client