This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File:                     YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier:          kyWG2w94/IZ+UYXI/8GjBmc5abGismILwBa15IXZ2oc=
Subject key identifier:   24:8B:80:29:43:2B:41:8B:8C:3D:EA:88:34:B8:4C:C1:F8:AC:D7:5D
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer:       /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial:       019C4246AD3F16A52DA786181637946E697D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number:          05A0
Signing time:             Mon 09 Feb 2026 12:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:53 +0000
Files and hashes:         1: 52xBodduqIwcsYy_iwGrav8wNPA.roa (hash: OeV7zUR0TM+VXjljKVbrtHhPSwRtjc0RboLlqaQmwFA=)
                          2: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: tnUJ02LcLILZQ4lcCJ4hGRyRg7v55PH+X8iZzHI70GI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:ad:3f:16:a5:2d:a7:86:18:16:37:94:6e:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
        Validity
            Not Before: Feb  9 12:00:53 2026 GMT
            Not After : Feb 10 12:00:53 2026 GMT
        Subject: CN=248b8029432b418b8c3dea8834b84cc1f8acd75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:82:24:b1:de:c8:5f:ea:b2:b0:d6:2a:f1:08:
                    ea:1d:a6:8e:66:27:31:b6:c5:3d:57:c8:eb:72:90:
                    7a:b8:82:f6:31:8e:b9:ca:72:d0:c4:88:a6:26:ec:
                    f4:e2:4d:3a:be:ff:95:41:20:fd:30:f0:f7:23:97:
                    49:e5:31:e0:8e:02:66:70:97:8f:e0:77:6e:2d:cb:
                    17:9a:fc:35:61:2a:5b:05:81:a7:1a:45:46:1e:0a:
                    df:6c:ca:dd:b1:fc:f6:97:db:ca:e6:2e:50:23:28:
                    f0:10:c8:87:a4:27:62:83:cc:1c:e8:ae:d4:81:45:
                    1f:6a:6c:07:88:3d:54:15:98:83:bd:0c:80:46:da:
                    3d:b0:6b:d6:5c:60:48:5a:88:06:3f:0d:42:ce:e3:
                    43:9d:00:4f:7f:42:35:3c:f1:2a:0a:77:9a:67:c8:
                    23:e1:66:bc:21:c9:8f:b9:f5:82:4f:ef:47:0f:c9:
                    33:8a:ca:e7:af:37:52:a1:d6:59:17:d8:f1:e8:34:
                    e0:c5:40:fe:cd:7b:92:74:81:81:9b:81:34:cb:bb:
                    21:40:28:00:b5:03:f2:99:91:e6:64:e0:a7:eb:35:
                    31:d2:c8:63:33:da:78:d2:ce:d1:d0:e9:be:4e:ce:
                    52:39:7d:90:b7:8d:e3:e2:62:41:5f:81:25:34:96:
                    7f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8B:80:29:43:2B:41:8B:8C:3D:EA:88:34:B8:4C:C1:F8:AC:D7:5D
            X509v3 Authority Key Identifier:
                keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:18:dc:30:2a:70:5b:80:77:ea:33:a6:5f:62:b6:06:86:31:
         55:44:de:cd:9d:cc:62:30:a7:cc:33:a7:2b:31:ba:7c:a7:23:
         87:bf:59:22:c3:a7:e9:55:30:c6:50:36:2e:b7:5b:23:08:29:
         64:ea:d9:bd:a8:2e:15:f4:55:45:0f:fe:46:fd:08:37:98:f8:
         59:e8:7c:8f:f6:e4:33:52:e8:d0:d6:21:46:6d:7e:6b:24:b7:
         58:4e:2f:ef:6b:f3:12:14:57:14:d9:92:56:fd:6c:a9:78:be:
         f3:db:7f:cb:cf:3d:14:f4:ca:1f:21:26:9d:e0:e2:f5:24:43:
         b5:6f:de:97:c3:50:57:7f:97:69:ea:2a:ce:e3:5f:95:ea:73:
         2e:a0:a6:34:e7:f9:fc:ac:ea:4d:66:7a:57:ab:4c:8e:e9:42:
         3f:5b:91:83:96:1a:ec:7d:99:e4:cb:8d:7d:a9:a7:82:10:d8:
         27:ac:46:04:63:1b:88:48:be:3e:70:24:2c:9b:32:74:96:52:
         3f:3a:6f:b2:1e:78:37:b0:da:e6:c3:73:d9:da:02:e0:c5:e1:
         8e:06:ec:24:14:f3:81:3d:4a:fa:32:13:8b:4b:30:3f:a1:15:
         8b:2b:01:47:6c:2f:a7:07:43:51:3a:05:c4:a1:03:f8:d8:f5:
         7d:2f:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:01 2026 by rpki-client