This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File:                     yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier:          Lma4cWxrO8aaSLsMY6+7HxSswLfN2Q6vIC3+FYRXHSE=
Subject key identifier:   5B:C5:A4:AA:C0:00:4A:9A:D4:5A:18:35:D1:18:C9:D2:8D:80:BB:F4
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer:       /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial:       019C42EB776CA217D4C219CBF478E11F51B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number:          0561
Signing time:             Mon 09 Feb 2026 15:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:53 +0000
Files and hashes:         1: NmILLaZO13ylxBiJtXCUuUjLxwc.roa (hash: ouwe61Qw3KErUT8wYroof+WiBVltIWBJpKDg8a/XyWg=)
                          2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: euVEhsU5/vcZLb25rgmVWJObhPR/rQVmqNAb00BfvEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:77:6c:a2:17:d4:c2:19:cb:f4:78:e1:1f:51:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
        Validity
            Not Before: Feb  9 15:00:53 2026 GMT
            Not After : Feb 10 15:00:53 2026 GMT
        Subject: CN=5bc5a4aac0004a9ad45a1835d118c9d28d80bbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:07:f7:e2:a3:04:9d:21:48:a4:38:79:6a:
                    bb:7d:aa:19:82:eb:aa:13:96:38:7a:7b:b0:14:3b:
                    ce:92:4e:c2:2a:04:bb:06:69:7a:5c:7c:16:32:48:
                    e1:e3:17:39:73:6c:f0:42:7b:7f:7d:10:37:00:7c:
                    6d:a0:ac:ce:9d:bb:d3:8b:24:f8:0e:12:fe:39:17:
                    a4:69:df:7f:8a:98:e6:d0:f7:07:5a:48:18:5e:29:
                    c3:fa:a5:bc:5c:d1:85:eb:e5:13:c8:37:60:d9:70:
                    45:9b:e7:62:b5:1f:11:63:c1:92:db:6d:82:02:99:
                    05:cb:52:fc:25:a8:3f:05:5e:2e:e5:6c:bc:e4:3e:
                    34:8b:52:f9:9a:43:7d:d0:9e:b5:4b:a2:6b:8f:db:
                    75:d1:9e:d9:8c:80:a6:56:55:08:b7:fb:f8:44:25:
                    f7:34:ca:17:20:ef:07:e8:cd:eb:29:01:1f:7b:48:
                    50:63:7d:84:43:70:9a:e1:6a:61:d0:64:dc:c1:f1:
                    2a:1c:c9:3c:53:fd:5d:9a:34:53:21:a8:0a:d4:48:
                    43:f4:82:71:5b:bc:87:be:eb:39:71:d4:88:1b:2e:
                    1f:1e:ff:dc:e4:03:a6:ac:02:91:38:67:d9:a3:9e:
                    26:f3:14:3f:b5:4a:43:56:52:dc:e8:8e:a8:27:dc:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:A4:AA:C0:00:4A:9A:D4:5A:18:35:D1:18:C9:D2:8D:80:BB:F4
            X509v3 Authority Key Identifier:
                keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:8c:45:7a:30:1a:a2:3d:21:e7:9e:81:8a:f7:36:2f:79:00:
         df:64:f9:b5:3b:d2:29:5f:3a:59:ae:d7:d9:ee:d2:cb:c6:5e:
         ae:c8:74:91:a0:c8:f3:e3:1f:3d:80:fd:84:a1:0e:9f:35:ba:
         36:32:39:37:63:00:c0:ac:cc:03:fb:bb:cc:86:95:b0:ca:78:
         ca:c5:ab:0a:62:02:ad:8e:4f:96:de:34:fd:66:08:3f:4b:73:
         d0:70:de:49:6b:0a:df:f9:4e:77:b1:6e:f8:11:39:d1:4e:ac:
         82:1a:61:04:5b:bc:af:09:62:5f:94:b1:01:c6:6e:0e:5c:42:
         da:6a:6b:f1:73:16:a5:fe:bc:d7:f6:90:43:cd:89:e2:74:50:
         db:c9:4c:70:3a:86:95:73:b1:2e:9a:d1:25:5d:e0:92:46:f8:
         78:19:80:23:bf:bb:a6:72:86:2d:d0:02:63:a1:77:e5:3e:b4:
         34:69:01:4d:30:92:ba:c6:ef:3d:ae:49:77:91:71:bd:4c:15:
         6f:b8:8a:63:55:2b:44:e1:11:17:44:88:cd:3d:07:9d:7f:11:
         4d:1b:2c:35:50:af:22:1e:99:55:a6:a6:2e:58:61:19:1e:dd:
         e5:e4:5a:c5:2d:d0:a0:cf:1a:7f:24:84:e8:67:62:d3:7c:db:
         40:78:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:22 2026 by rpki-client