This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File:                     YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier:          satm4n/H8+eh7MAHqODHYmL03ojxaEY0kqQSXWgtHxU=
Subject key identifier:   BB:BD:5C:35:7C:AD:CF:B7:54:EE:7C:B5:C4:FF:AC:84:AE:E4:84:58
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer:       /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial:       019C42EAF5E5817492158803CA354F9C503C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number:          1133
Signing time:             Mon 09 Feb 2026 15:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:20 +0000
Files and hashes:         1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
                          2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: KoQ2Lhy5Pv6/PAKc3671mh8zm1HQEfG7zI3uLT6TuRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f5:e5:81:74:92:15:88:03:ca:35:4f:9c:50:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
        Validity
            Not Before: Feb  9 15:00:20 2026 GMT
            Not After : Feb 10 15:00:20 2026 GMT
        Subject: CN=bbbd5c357cadcfb754ee7cb5c4ffac84aee48458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:54:ff:11:e5:40:01:38:fd:ad:27:11:13:
                    0f:bb:15:07:d4:c7:82:ed:3c:f6:6f:f7:43:33:a3:
                    02:65:1f:e3:2b:7e:25:95:07:e4:1d:bc:61:d8:da:
                    c0:e9:48:03:83:9d:49:3b:ea:c5:f9:64:2c:0f:fe:
                    2c:7f:79:2b:6b:ce:c9:4c:24:a1:5e:65:d2:bf:ee:
                    c6:55:03:b7:e6:0e:77:ed:00:5d:2e:70:fc:bf:ba:
                    5d:83:03:4f:79:b2:ae:89:64:86:2a:54:f0:40:d8:
                    62:dd:b9:48:8a:9d:dc:77:c2:c1:5e:ef:e8:c2:e7:
                    3b:7b:ad:f2:36:37:18:c4:2a:fc:02:68:1d:5a:8f:
                    b5:ab:8a:dc:cb:c0:40:4f:29:2d:9d:6a:8c:8e:d2:
                    1a:ef:d2:f4:f5:fc:fb:09:2b:1e:b8:2d:9e:9d:26:
                    f0:06:ac:cd:2b:42:91:57:7b:be:2d:93:5e:dc:8d:
                    a8:8e:59:af:2b:67:38:b5:5a:59:77:88:b4:b5:a1:
                    4e:df:1d:22:89:d1:d5:e1:a4:40:f7:aa:4b:1e:0c:
                    77:1b:08:7f:1c:20:c8:bb:67:38:a6:3b:b2:fe:21:
                    79:f3:22:95:6c:ee:12:cb:d2:44:b4:8b:3b:7f:e0:
                    d6:4c:52:58:da:01:7e:8b:c2:f4:82:f5:f0:79:60:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BD:5C:35:7C:AD:CF:B7:54:EE:7C:B5:C4:FF:AC:84:AE:E4:84:58
            X509v3 Authority Key Identifier:
                keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:30:c0:28:a2:9b:ff:f9:21:e5:2b:8a:94:99:7d:e2:e8:ef:
         36:2b:52:ae:00:67:99:1c:59:8b:60:d7:7d:de:f5:f0:26:07:
         10:02:e9:d2:3f:7a:58:c9:e9:57:6b:f2:7a:14:21:42:6a:e6:
         31:cb:eb:45:6b:02:a2:2f:35:bb:a3:41:09:1c:30:d3:b9:69:
         77:e0:54:8e:2e:a5:25:ac:b8:48:db:3a:17:ff:c1:27:94:32:
         07:31:39:4e:f9:9f:15:53:d4:ce:a3:ac:b6:00:45:52:05:52:
         99:d3:1b:d3:51:6c:a2:5c:92:2e:c7:99:df:01:fe:cd:79:d5:
         ae:9e:04:39:0a:df:3d:17:38:c4:51:ff:bf:f6:98:01:00:99:
         b9:8b:f6:4e:4e:9b:17:71:59:b0:a5:9c:b8:30:ea:01:f2:24:
         e7:3f:99:73:7e:74:13:ac:dc:cd:cd:1b:c3:f3:6d:0e:88:0e:
         c3:bf:3f:5f:68:9a:27:73:a6:d2:e9:dd:f1:1e:73:82:41:9f:
         5b:4b:d6:d9:d8:9f:ed:28:ae:9c:83:a3:05:ef:3a:38:bf:09:
         95:60:ef:78:47:5c:3b:d4:50:be:c7:6e:14:95:e9:37:2e:6c:
         7b:c2:2f:df:65:71:7b:f2:7e:1a:35:61:54:a7:4a:9b:b7:a0:
         d7:a1:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:24 2026 by rpki-client