This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          BvZWUFhFvNhmFQpm/w+amPt9ipxd43NuS/mrphwfMss=
Subject key identifier:   07:C3:F7:0F:B4:C4:26:5B:39:A5:B3:D6:D5:CF:F3:89:03:F3:4C:D7
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       019C420F98218E880FE23A2D84826E21B93E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 11:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:44 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: 2c5UIMMNmGa153GycNWIdi8VG/PjyRl9q2a5noy2RqI=)
                          2: lsqSMmJEavXh7pViu8wsmFP-0ew.roa (hash: WZM+G3iXoRdRNC/z9rbX80joIRjQ5aWaqz7KFYrf3LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:98:21:8e:88:0f:e2:3a:2d:84:82:6e:21:b9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: Feb  9 11:00:44 2026 GMT
            Not After : Feb 10 11:00:44 2026 GMT
        Subject: CN=07c3f70fb4c4265b39a5b3d6d5cff38903f34cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:c1:57:e9:d0:b5:0e:5f:6d:28:ce:62:3f:
                    a2:7d:f6:eb:ab:22:2d:32:65:38:f7:ae:49:b2:1c:
                    94:dd:a1:31:bd:ab:ad:f9:05:dc:b1:b4:c8:60:9a:
                    0d:ee:d8:53:82:cb:01:69:c5:17:29:87:34:83:3f:
                    e3:c8:b4:45:0b:48:ab:a7:13:ee:aa:b7:39:de:80:
                    98:99:74:ff:fc:be:70:23:af:a8:c0:c1:31:44:6f:
                    8a:5c:d1:01:dd:31:e5:7d:09:33:0c:12:32:9d:9e:
                    0d:8f:04:95:4d:1f:39:ba:43:ff:ff:aa:b9:fa:6b:
                    0d:76:b8:50:47:c0:4f:34:27:7d:a4:27:05:22:80:
                    1c:35:35:24:2a:4c:3e:71:c8:af:57:77:f9:2f:6a:
                    e2:20:cc:1c:2a:de:35:80:78:f7:29:87:2a:d2:53:
                    e4:a0:6d:5e:6f:72:97:1e:1e:f2:5c:8e:a8:a3:c5:
                    9f:7e:56:af:84:db:cd:18:bd:d5:e7:35:35:dd:13:
                    16:94:95:a7:85:b4:2f:b8:4d:1a:8b:b2:48:3b:0b:
                    1e:12:52:68:03:8d:aa:f8:db:d7:16:9f:41:d3:00:
                    3a:32:88:58:20:46:5e:9f:70:a8:0f:62:de:7a:c6:
                    2a:70:a8:f9:13:16:c4:a1:fa:93:6a:60:e2:aa:4e:
                    51:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:F7:0F:B4:C4:26:5B:39:A5:B3:D6:D5:CF:F3:89:03:F3:4C:D7
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:b1:e3:f7:61:c1:df:73:21:08:16:16:fb:e9:e0:39:d4:c5:
         2e:cf:0b:18:bd:97:57:8c:7a:dd:0f:1b:25:90:49:dd:53:84:
         3b:d6:73:57:44:8d:9d:45:46:ee:91:2f:47:70:58:b6:c5:25:
         b2:c5:b5:92:17:95:62:8a:47:20:9a:81:c2:74:ea:8b:c5:6b:
         18:ca:66:8b:31:4d:f5:8e:bd:7a:b6:a3:db:f3:42:3d:80:46:
         89:f9:6b:6d:84:37:98:49:c1:a7:1b:31:99:0f:1c:3a:31:ce:
         e0:e5:d4:f0:dc:d3:2b:f0:54:34:aa:05:33:63:82:70:87:fb:
         c9:c0:41:04:a8:e7:91:d0:09:0b:04:6a:34:ad:84:f9:e8:e2:
         d5:07:1e:a7:fa:41:ba:bd:53:43:78:f6:6c:05:8d:bc:35:0a:
         11:f0:44:2d:55:85:72:0e:5f:8f:d7:41:06:63:86:86:8f:dd:
         f4:c7:ea:ab:7d:fb:f7:b7:17:c3:0e:ca:73:22:b9:e9:a0:51:
         e1:e2:07:4f:c9:65:00:10:a5:29:24:40:91:27:2b:7d:bf:d1:
         4d:eb:00:e9:9c:48:3c:7f:44:07:88:66:29:f3:a4:34:51:b2:
         b3:40:f6:18:b1:fc:38:5b:f2:7d:e1:03:5b:18:ab:22:ee:38:
         ab:a5:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:02 2026 by rpki-client