This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File:                     ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier:          /MSGrQ8eF4KnkV4mg1BblPd1nGzRESyu5cs6YqeiTqQ=
Subject key identifier:   15:71:43:40:98:7A:78:3C:E4:17:47:1B:7F:FC:83:AD:C1:7C:B8:C7
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer:       /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial:       019C41344E30CEA7A57AB4AFFBE707E2C2F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number:          02C3
Signing time:             Mon 09 Feb 2026 07:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 07:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 07:01:12 +0000
Files and hashes:         1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: LuH/EpoeUnNUA+1IbX1V5y+5yGgNwK9ga1OixpeFABE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:34:4e:30:ce:a7:a5:7a:b4:af:fb:e7:07:e2:c2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
        Validity
            Not Before: Feb  9 07:01:12 2026 GMT
            Not After : Feb 10 07:01:12 2026 GMT
        Subject: CN=15714340987a783ce417471b7ffc83adc17cb8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:86:5a:14:98:e1:99:43:58:5e:9c:c4:7d:
                    1e:51:d7:d0:57:a3:ae:dc:81:d6:10:30:4a:cd:0f:
                    23:9f:e7:ec:ad:c0:46:bc:b0:3c:4e:1a:68:72:ba:
                    29:02:37:be:dc:8a:15:e2:4e:a7:fb:02:47:70:30:
                    ac:6d:57:5c:dc:74:4c:2c:ea:d4:b0:4c:0e:b5:94:
                    08:5c:59:20:9c:f1:cc:fa:6f:7b:16:54:27:a1:5c:
                    a2:82:c6:52:01:1e:53:76:fd:d1:a8:d8:49:bf:65:
                    38:04:09:c8:9c:21:8c:fb:b9:d2:45:ef:a6:ae:2a:
                    63:2d:58:a1:ac:e8:e0:7f:34:75:7f:33:bf:a2:94:
                    92:4b:1d:80:19:c9:d8:05:79:00:b1:3e:d8:05:ca:
                    fb:01:56:c2:fb:00:c2:33:e4:c6:9b:08:7d:33:ed:
                    08:09:5b:ea:75:b7:14:ec:3c:6e:8c:73:f3:77:36:
                    36:5a:78:75:3b:07:b3:13:5c:b1:0f:52:f0:ee:64:
                    89:9c:fc:b6:a5:31:bc:01:92:5d:4a:9c:3e:0a:27:
                    c1:6e:08:1a:49:4c:71:19:3e:3c:95:f6:d6:97:24:
                    9b:36:40:f2:ee:4a:41:d6:c2:95:55:3c:cc:3e:1a:
                    42:c3:7e:b9:84:dc:1b:b8:2a:62:49:3b:de:9f:54:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:43:40:98:7A:78:3C:E4:17:47:1B:7F:FC:83:AD:C1:7C:B8:C7
            X509v3 Authority Key Identifier:
                keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:e7:9b:dc:5a:1c:f1:2b:e5:f9:47:bb:7b:1d:9e:8f:d6:
         bd:92:98:3b:91:0b:73:c2:1c:53:8b:a0:f4:f9:4b:f9:17:02:
         8a:6d:46:35:f9:f5:94:6b:e2:71:7a:16:21:87:2e:0f:99:6f:
         71:a2:7c:73:fb:02:a2:a2:b0:f0:d4:a9:af:d7:bf:6d:0e:8b:
         e2:8e:22:93:47:2d:dc:b7:15:9d:06:6e:3d:4a:ae:22:4b:9b:
         1a:3e:c6:b8:a7:2d:ba:5c:f9:60:69:8a:8b:b5:49:98:31:86:
         a3:a7:b8:55:f8:e2:97:78:17:5e:a8:4b:0b:d7:6a:06:87:b2:
         5b:2f:e6:4e:67:6c:c7:2d:b0:ac:b9:68:6c:bc:88:61:1c:e7:
         82:8d:0f:9a:dc:62:85:7f:ef:ef:cb:aa:5d:69:55:46:95:78:
         49:de:46:03:c6:48:db:60:b0:d9:db:04:b0:6d:30:1b:55:62:
         e0:ff:c8:04:bc:01:2a:66:f8:6b:0c:ac:f1:0d:ad:2c:7e:6b:
         05:11:05:da:fe:59:87:53:60:e4:b9:02:98:22:9f:d1:93:13:
         99:e8:5d:21:4e:14:ac:05:0a:4e:dd:cd:9d:42:a9:d7:ba:7c:
         5d:fc:77:30:12:3e:10:df:d9:b5:f1:b8:d0:bb:e3:aa:77:69:
         2d:de:32:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBNE4wzqelerSv++cH4sL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MmM5NTI5NmE4Y2E4MTE5Mjg3ZTIxNmE0Njk1M2MyM2Ez
MDliZWIwHhcNMjYwMjA5MDcwMTEyWhcNMjYwMjEwMDcwMTEyWjAzMTEwLwYDVQQD
EygxNTcxNDM0MDk4N2E3ODNjZTQxNzQ3MWI3ZmZjODNhZGMxN2NiOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UeGWhSY4ZlDWF6cxH0eUdfQV6Ou
3IHWEDBKzQ8jn+fsrcBGvLA8ThpocropAje+3IoV4k6n+wJHcDCsbVdc3HRMLOrU
sEwOtZQIXFkgnPHM+m97FlQnoVyigsZSAR5Tdv3RqNhJv2U4BAnInCGM+7nSRe+m
ripjLVihrOjgfzR1fzO/opSSSx2AGcnYBXkAsT7YBcr7AVbC+wDCM+TGmwh9M+0I
CVvqdbcU7DxujHPzdzY2Wnh1OwezE1yxD1Lw7mSJnPy2pTG8AZJdSpw+CifBbgga
SUxxGT48lfbWlySbNkDy7kpB1sKVVTzMPhpCw365hNwbuCpiSTven1QbgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVxQ0CYeng85BdHG3/8g63BfLjHMB8GA1UdIwQY
MBaAFMkslSlqjKgRkofiFqRpU8I6MJvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iOWIzYjQtY2M5ZS00MDAzLTk3MmQt
ZjE1MDQ4ZWUwZjIyLzEveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iOWIzYjQtY2M5ZS00MDAzLTk3MmQtZjE1MDQ4ZWUwZjIy
LzEveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddnnm9xa
HPEr5flHu3sdno/WvZKYO5ELc8IcU4ug9PlL+RcCim1GNfn1lGvicXoWIYcuD5lv
caJ8c/sCoqKw8NSpr9e/bQ6L4o4ik0ct3LcVnQZuPUquIkubGj7GuKctulz5YGmK
i7VJmDGGo6e4Vfjil3gXXqhLC9dqBoeyWy/mTmdsxy2wrLlobLyIYRzngo0Pmtxi
hX/v78uqXWlVRpV4Sd5GA8ZI22Cw2dsEsG0wG1Vi4P/IBLwBKmb4awys8Q2tLH5r
BREF2v5Zh1Ng5LkCmCKf0ZMTmehdIU4UrAUKTt3NnUKp17p8Xfx3MBI+EN/ZtfG4
0LvjqndpLd4ypA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:34 2026 by rpki-client