This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File:                     YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier:          UebB6CQ+mk5mWTY6tGU7cZYoN5C7J80UnJyQ6/oaU8I=
Subject key identifier:   5F:EA:FA:30:FD:FB:5E:8D:2A:60:66:22:23:5A:7E:F5:B6:B9:3B:B1
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer:       /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial:       019C43FE0242948C09A705BF150C6DCC7AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number:          06C1
Signing time:             Mon 09 Feb 2026 20:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:45 +0000
Files and hashes:         1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
                          2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: mkGPrBNLcDkLTxq9iWN3pxMXFXYZnq175Fm1PeH6B84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:02:42:94:8c:09:a7:05:bf:15:0c:6d:cc:7a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
        Validity
            Not Before: Feb  9 20:00:45 2026 GMT
            Not After : Feb 10 20:00:45 2026 GMT
        Subject: CN=5feafa30fdfb5e8d2a606622235a7ef5b6b93bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:10:5d:15:8d:f4:c1:46:31:14:47:13:2f:
                    6f:7b:0a:9f:12:1e:af:c2:55:e9:a9:de:02:61:ab:
                    41:49:7c:06:3b:9e:b6:9b:aa:8e:8c:b7:17:9d:74:
                    8e:34:15:a2:93:46:75:fd:21:f2:71:20:f4:09:af:
                    5b:6e:7a:c0:df:0a:fd:64:62:35:07:0c:b9:ff:a2:
                    ad:14:38:f1:9e:27:57:42:ec:af:4f:d9:c0:65:4c:
                    c0:77:57:f8:50:aa:13:c7:e1:42:d0:6f:e6:7f:63:
                    c0:87:95:11:61:80:93:87:3c:4b:ef:40:2f:5c:f4:
                    3f:af:cc:8b:5a:db:5b:e0:5e:d1:5a:2c:61:20:4d:
                    d6:c1:49:66:1b:5a:1a:db:24:f2:fc:b5:5e:44:a3:
                    14:00:d3:b9:e6:a2:e9:b6:f3:73:9c:02:18:ce:02:
                    d1:4e:10:26:52:d3:2e:d1:2d:34:5e:d0:20:54:32:
                    02:bb:97:e5:b6:5f:1f:5d:f8:c9:7a:ef:fe:9c:26:
                    d8:fc:44:d4:5f:44:4b:88:11:ba:48:0c:42:7f:c6:
                    e9:12:63:f8:2a:54:77:56:17:02:37:9b:40:24:18:
                    33:9c:a9:28:c6:f1:61:27:60:68:0c:07:ac:1b:3f:
                    ba:63:43:2d:9e:17:c3:1e:9b:f8:34:66:cc:45:d4:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EA:FA:30:FD:FB:5E:8D:2A:60:66:22:23:5A:7E:F5:B6:B9:3B:B1
            X509v3 Authority Key Identifier:
                keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0d:6d:1c:72:96:56:bc:3f:16:63:b5:1e:f6:95:6a:88:62:
         b0:87:ed:f7:31:de:44:ec:17:b2:af:b0:08:d1:27:3a:44:06:
         b4:b1:12:cd:e9:63:ea:fb:7d:c8:7c:87:3d:97:a6:ff:06:ad:
         fa:aa:41:d9:67:40:8c:64:a1:ad:6f:4a:fa:40:96:ef:b1:11:
         41:87:a7:97:6e:90:09:ff:59:8a:42:b6:33:30:d0:dd:d2:e0:
         31:db:9a:40:e7:66:a5:fe:61:82:63:6a:25:92:ba:86:03:78:
         4f:1f:87:3c:8f:d8:f1:cb:48:7c:52:7b:e2:43:8f:74:66:32:
         bd:1c:33:60:39:e2:16:6e:eb:53:b7:73:01:48:e9:81:7c:a3:
         c0:34:b9:45:62:c8:42:39:13:5b:19:65:9f:53:1b:bb:b7:a3:
         7d:86:0f:0c:e4:ca:b5:1a:c6:e8:21:5c:b2:cf:c7:1d:ab:70:
         d4:af:75:eb:25:b1:ca:05:7d:7a:c2:a7:9f:26:fb:15:d4:61:
         0c:90:a7:ae:bd:d8:a5:07:c8:49:70:14:ff:06:31:35:e5:9e:
         9f:67:9a:b0:3e:50:e3:2e:b1:9b:dd:e5:cf:5d:37:f7:e6:a0:
         f2:24:63:1a:3e:fc:c2:55:99:0f:99:c6:4f:5a:49:32:1b:1b:
         9c:81:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:18 2026 by rpki-client