This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File:                     A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier:          UdWo2g2beejCWbrjJUCzJdn3+WWzXIaMc/ujVEP5AqE=
Subject key identifier:   6F:14:AD:2F:C6:07:72:6E:77:80:0A:89:5C:88:26:49:54:B0:DB:F8
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer:       /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial:       019C41D8C813A54C01802BB953A7852F2431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number:          0A43
Signing time:             Mon 09 Feb 2026 10:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:51 +0000
Files and hashes:         1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: dzqw7Bi4u5CR0veIdsYcN795m8MNQw7Gsz2jW3R2zqA=)
                          2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:c8:13:a5:4c:01:80:2b:b9:53:a7:85:2f:24:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
        Validity
            Not Before: Feb  9 10:00:51 2026 GMT
            Not After : Feb 10 10:00:51 2026 GMT
        Subject: CN=6f14ad2fc607726e77800a895c88264954b0dbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dc:3c:60:87:e2:90:b6:82:90:aa:b5:17:49:
                    2b:de:b6:dc:a7:c6:18:5b:da:3c:3d:97:cb:f5:b6:
                    47:74:df:93:3c:1a:df:74:00:c0:b5:1d:d6:cb:e7:
                    c0:96:56:dc:00:f1:12:cb:3b:58:f3:29:11:ff:38:
                    41:d8:f7:c4:c4:2a:61:0e:ae:6e:e5:8b:8c:08:bd:
                    d6:ab:72:01:dc:93:38:37:eb:8e:54:e4:5b:14:5d:
                    2a:2b:0b:4d:82:de:23:81:86:2f:1b:1f:c3:fa:54:
                    90:14:95:5b:6c:4f:56:7e:a7:98:61:e3:9b:af:e3:
                    e4:b9:e0:4c:20:e6:9d:38:4e:0c:57:e0:23:85:2f:
                    e0:85:01:58:6c:ed:b8:0d:9d:a0:cc:f7:32:fe:9e:
                    f5:e3:63:a1:ac:71:3c:93:b5:b6:a3:27:81:88:6e:
                    7a:84:40:22:0f:81:ec:f4:60:66:b8:a7:e7:a7:6f:
                    c4:f5:e9:f4:75:65:32:f5:e6:e6:91:f9:cd:9d:61:
                    51:00:68:48:95:07:ed:68:3c:34:46:bf:6e:40:c0:
                    db:51:54:1c:cd:bf:93:34:9a:92:14:4b:fb:de:75:
                    15:33:a9:1b:a0:ee:19:97:06:4f:d4:36:22:fb:62:
                    98:4a:16:50:47:72:2e:a1:03:a1:0d:67:6c:34:64:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:AD:2F:C6:07:72:6E:77:80:0A:89:5C:88:26:49:54:B0:DB:F8
            X509v3 Authority Key Identifier:
                keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:74:3a:32:7e:54:80:e6:f7:c0:ec:67:dc:03:69:e3:70:
         f9:65:26:87:9c:e0:85:f8:82:bc:5f:c1:23:44:9d:b3:86:f5:
         40:d9:81:7f:71:92:96:5a:f4:1e:85:c2:a4:55:d9:9e:97:78:
         0f:0f:bc:fa:63:27:2e:83:63:7d:b8:92:a9:29:f0:84:7b:66:
         d3:82:61:0e:7e:e6:71:e4:16:fc:27:3d:f9:90:75:a4:74:5f:
         5a:87:f6:61:1a:1b:26:27:3a:e6:a0:5d:d5:ac:f0:41:70:0e:
         0f:22:12:42:ab:86:35:5e:36:c9:db:3b:6b:fe:b0:11:fe:71:
         85:ad:20:0b:ce:21:0f:c3:e4:a6:32:fc:5f:7c:de:9a:72:f0:
         e2:de:f1:42:d3:8c:23:d5:5d:14:e0:99:68:3e:4d:ba:38:2a:
         5f:72:45:44:20:4d:12:d7:65:46:97:cc:63:4d:c7:96:07:9e:
         62:f6:fc:2c:a6:04:4c:46:1b:5e:04:e1:a2:63:fb:b8:f9:fe:
         bf:5f:ba:69:6e:2d:ef:28:ac:94:23:a3:29:6f:b7:47:d8:e3:
         f7:07:f4:b8:6c:c6:9f:f2:74:c7:ac:c7:35:8e:f4:6f:9f:15:
         5c:d7:dc:7a:f6:16:5c:48:4d:5f:f4:38:21:05:db:d2:c3:f7:
         9f:e4:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:09 2026 by rpki-client