This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File:                     YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier:          6Z/PO+q9E1oSbYLkzLHLa+8ezuxBCDCYCa/zddlwI28=
Subject key identifier:   E3:A2:B3:6A:AD:83:BE:27:C1:20:57:1F:18:1F:A6:5A:A0:78:98:1D
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer:       /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial:       019C41A20A28B485AFB70AE9192846D6A673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number:          0684
Signing time:             Mon 09 Feb 2026 09:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:04 +0000
Files and hashes:         1: U1sfV9HH8u88t2HBLjDAkG-CyLg.roa (hash: tpq5q5jvhF2tXurj200oQaFHHR4X1vOHV0qottraasM=)
                          2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: 8ta/iWhLqQtW8bRUr1+fBg4rPPqlOhnyjcXXelgLiqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:0a:28:b4:85:af:b7:0a:e9:19:28:46:d6:a6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
        Validity
            Not Before: Feb  9 09:01:04 2026 GMT
            Not After : Feb 10 09:01:04 2026 GMT
        Subject: CN=e3a2b36aad83be27c120571f181fa65aa078981d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:db:d3:d0:3a:f7:c4:e2:d4:d8:d3:da:18:45:
                    8c:28:d1:19:97:2c:de:6f:30:b1:d7:86:1d:50:41:
                    34:1e:cb:0f:7a:24:08:40:2c:97:e2:ac:47:7e:42:
                    71:70:52:8c:bc:3b:96:06:5f:c3:22:34:db:51:fa:
                    b3:a9:39:7b:5a:88:a1:e9:9c:ac:06:cd:38:9a:54:
                    5d:99:f1:b6:0c:4c:04:69:07:aa:9f:06:b2:00:bf:
                    d8:74:d1:87:ae:c4:b4:28:04:a4:1b:36:fb:2e:ac:
                    a5:a5:66:e2:53:eb:a5:e0:72:9e:e7:41:23:2f:77:
                    85:12:23:ce:a2:43:7b:75:1d:c7:f3:2d:19:20:f8:
                    39:0a:60:57:04:8d:40:98:9b:da:ce:a6:dc:68:c1:
                    6b:26:de:64:ff:3f:84:17:0c:48:03:29:06:b3:56:
                    6a:29:59:f4:6d:58:4b:8f:68:02:9e:28:13:9b:83:
                    f4:3e:2b:ba:e2:13:b1:e5:29:e3:2d:d3:14:17:ec:
                    6d:44:3f:e0:0f:fd:ef:ff:f9:33:dc:96:01:3b:bb:
                    99:31:ec:ec:9a:5d:fb:bb:7e:9f:15:1c:5c:35:36:
                    e1:e5:a8:78:ea:91:a6:b4:e5:5f:b9:0e:cb:e9:fa:
                    b2:e9:fb:a7:a5:7c:a0:be:dd:71:1a:8d:24:4b:d2:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A2:B3:6A:AD:83:BE:27:C1:20:57:1F:18:1F:A6:5A:A0:78:98:1D
            X509v3 Authority Key Identifier:
                keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e6:60:42:db:1a:2d:8b:f0:2e:2c:e1:60:dc:8d:04:1f:17:
         a2:ed:d0:94:49:a3:f9:67:9c:df:c5:63:6f:b4:f5:48:54:c4:
         33:94:f6:c4:dd:e8:96:3c:f3:8c:5d:18:59:9e:32:84:75:9e:
         15:07:5b:b1:44:24:73:63:2e:bd:5b:08:eb:68:00:cb:ac:3d:
         5d:d8:b5:a1:21:f0:21:b1:ed:b0:65:13:6c:cb:dc:83:de:fa:
         be:c8:10:21:ca:7c:0c:87:0d:e4:62:da:61:bb:4a:ec:c4:0e:
         ed:18:ae:fd:19:89:e2:65:a7:2d:94:62:42:6a:cd:ab:e3:46:
         34:ad:d9:0c:34:ad:f0:83:8a:43:5c:ea:99:34:30:44:da:6a:
         d3:cd:bb:dd:d6:a9:76:8b:e4:a2:7e:b5:3f:e1:d2:92:68:4f:
         56:1a:f6:c9:2c:6c:98:9f:8e:62:58:cc:0d:5e:7a:ed:28:99:
         dd:23:0a:21:11:fd:7b:52:79:e4:97:a5:83:5f:83:85:99:72:
         1f:e3:48:5c:9a:06:c4:7f:ba:8a:1a:40:7c:62:40:cc:42:39:
         f5:ea:3c:47:1d:5e:14:77:a7:b1:78:fb:5e:e0:8f:d9:9c:51:
         6a:86:18:c7:9a:b7:b6:e6:d2:8b:5a:a4:4a:49:67:6a:67:1b:
         4e:ff:66:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:30 2026 by rpki-client