This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File:                     yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier:          ScD9YV6c8ZxFNpOO3JAqqSyAqYslOMiNYkqZX5m8HyA=
Subject key identifier:   46:93:5C:B4:D1:54:0C:1C:C9:02:E2:C4:B4:2F:1A:15:12:5C:4B:E0
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer:       /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial:       019C42B46B02121729CB3F57373EBC314412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 14:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:46 +0000
Files and hashes:         1: 05Rdwr--1tnXZPfu13z1-r9tQTo.roa (hash: wM0ntv3W1SWKI6P8cH7TnrdrNZlJdigMYw8TmLb1CoU=)
                          2: aE8_gVmck-wD_VyyQXZL4UyhlMU.roa (hash: GaAIUgFsYTQaT7thc7zx4Q22k1Bx49GbLq0/1lvEmRM=)
                          3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: WESFLt6SKj4aripNLgNJzHfChIVOmj+a1AI/PSoKcnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:6b:02:12:17:29:cb:3f:57:37:3e:bc:31:44:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
        Validity
            Not Before: Feb  9 14:00:46 2026 GMT
            Not After : Feb 10 14:00:46 2026 GMT
        Subject: CN=46935cb4d1540c1cc902e2c4b42f1a15125c4be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:b9:3d:15:0c:16:e0:cf:53:cb:cc:89:c6:
                    de:77:5b:7f:48:37:33:af:dc:a5:35:92:63:0b:6e:
                    7b:72:ad:2e:a1:64:50:ad:ad:e1:3b:7e:47:80:94:
                    ff:3f:d2:6d:56:06:d7:3e:a5:f6:e8:63:1a:20:fb:
                    00:7a:0f:3d:42:94:98:1d:c9:b4:c6:49:d1:a1:92:
                    10:26:66:ab:67:03:f5:01:8d:96:2d:0d:e7:cd:e7:
                    bd:f0:21:78:d4:13:7f:53:8b:16:2c:66:c8:ee:29:
                    7d:36:fe:f1:7d:9a:f9:8d:78:3a:28:3b:51:99:b9:
                    a9:fd:f1:29:35:0c:a1:f3:78:b5:d3:e7:bb:0c:5f:
                    e1:0f:ef:b3:11:84:4b:31:d2:78:42:62:0d:e8:e0:
                    3e:3c:a8:98:47:81:34:59:da:2c:f4:8d:e0:21:42:
                    02:f0:cd:95:73:1d:ff:e2:78:08:18:f1:ce:0b:a9:
                    e0:a4:c6:09:8f:28:83:28:c2:05:6f:a3:c1:d2:d5:
                    48:6a:85:af:b8:f6:44:16:52:b5:25:cf:35:28:15:
                    99:92:13:fd:58:52:1e:ff:65:d7:e0:7f:4e:6b:04:
                    9d:e0:8c:c9:be:bf:fb:d2:d3:b7:02:2b:c4:a6:79:
                    95:3c:53:48:bc:1b:33:43:c6:6a:80:2b:18:de:1f:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:93:5C:B4:D1:54:0C:1C:C9:02:E2:C4:B4:2F:1A:15:12:5C:4B:E0
            X509v3 Authority Key Identifier:
                keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:20:98:69:10:65:21:b1:40:cb:6e:33:e8:fd:ce:09:de:c7:
         10:14:fb:3e:30:75:9f:c8:34:cf:7f:52:e5:73:b4:8a:5a:f8:
         de:4a:6b:53:7e:8f:43:32:1e:1b:8a:84:44:bd:5f:d1:02:b4:
         90:ef:38:2f:1f:d6:bf:37:c5:41:ff:96:e5:e1:29:f2:47:67:
         82:26:3f:83:7e:36:d5:07:f9:d3:e9:40:eb:0a:ed:19:cf:97:
         60:7a:53:83:02:d1:e3:b4:d4:79:f4:6e:01:c4:a1:c1:73:f6:
         e0:13:0f:c7:c1:73:99:5e:77:90:1c:fc:3f:b9:cc:e4:91:5c:
         ba:7f:64:f2:7c:4b:2c:70:70:d1:40:f8:b4:7d:f2:38:91:15:
         38:54:ed:1f:bb:35:2f:16:3b:27:5d:2c:0a:29:61:c2:b0:b9:
         bd:94:35:2a:f2:2e:55:b2:6a:08:3f:50:3c:bd:66:fe:51:b0:
         87:06:1e:19:71:bb:08:8d:5a:8c:00:1a:04:a8:74:24:82:87:
         72:a1:52:f5:02:38:e9:6a:cc:28:27:46:5e:ba:bf:25:33:00:
         23:87:42:06:a5:db:43:a0:cd:8b:a3:d4:79:2d:bd:1c:e5:6e:
         2e:b1:24:65:38:7a:93:0b:38:41:79:21:08:89:a0:92:e0:6f:
         c3:9e:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:27 2026 by rpki-client