This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File:                     YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier:          MKHMwaA1+zvl9mf9exiiojBAoUs4RXBEYjvP3SkjxIM=
Subject key identifier:   BE:41:EB:9C:95:77:41:63:30:F9:41:C7:1F:15:D9:3B:63:19:2B:E5
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer:       /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial:       019C1D5E7DA0776468E5896DCC8240B9BB90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number:          12C6
Signing time:             Mon 02 Feb 2026 08:00:57 +0000
Manifest this update:     Mon 02 Feb 2026 08:00:57 +0000
Manifest next update:     Tue 03 Feb 2026 08:00:57 +0000
Files and hashes:         1: Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa (hash: ccXR+qhmYk9GcwGl/n5URNgWvh69G6GfXIkJnkUXeww=)
                          2: W6BHamf2jpzS2Ly1N7dmFknvgnE.roa (hash: Y0WAX2G5HXqDefdjOmtWCA6lTsIa8VwGlFit3BxKSq8=)
                          3: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: 1qakRG0qSFo5fXSzYe/tIKI50Y7sKJ67B49HMMitxUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:5e:7d:a0:77:64:68:e5:89:6d:cc:82:40:b9:bb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
        Validity
            Not Before: Feb  2 08:00:57 2026 GMT
            Not After : Feb  3 08:00:57 2026 GMT
        Subject: CN=be41eb9c9577416330f941c71f15d93b63192be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:87:b0:6a:37:d4:cd:e9:3b:39:2c:03:11:
                    76:0a:95:c0:00:62:e4:d0:cc:85:04:8b:ec:05:d6:
                    e1:df:10:16:3a:d6:f7:32:d4:30:30:0b:b2:77:f1:
                    e6:b5:89:89:f5:8b:f6:b3:82:1f:3b:d7:0d:f3:3b:
                    01:e3:53:8f:81:04:6f:4e:80:35:15:5d:2b:c2:4e:
                    16:23:74:ea:70:6f:c0:b7:c2:ae:53:7a:2c:7b:2f:
                    51:f6:67:82:75:dc:0c:25:b8:71:53:98:a3:d2:55:
                    37:86:80:fb:ce:b4:b1:03:78:fc:80:13:87:fe:7b:
                    15:8d:97:2a:b3:ff:39:b2:93:c7:71:f5:18:18:f6:
                    cd:84:23:2b:37:a3:27:24:e7:64:a1:3a:6c:b7:63:
                    5b:a1:1b:3c:74:4f:d4:ee:52:87:d3:45:52:4e:12:
                    b1:29:e3:99:ae:61:87:f8:58:36:35:e3:01:95:d3:
                    58:f7:64:06:25:79:47:6a:1f:40:76:fe:e8:1b:1a:
                    5d:2d:9f:1c:64:14:3e:41:49:4f:93:d6:54:b3:92:
                    95:af:16:6b:41:ff:11:c9:fd:a2:95:46:6c:1a:e9:
                    e2:b2:2f:00:5a:b5:c2:d7:94:ea:74:78:22:5b:f9:
                    4e:52:8b:61:51:6e:e8:2f:cb:02:36:93:ce:8b:a6:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:EB:9C:95:77:41:63:30:F9:41:C7:1F:15:D9:3B:63:19:2B:E5
            X509v3 Authority Key Identifier:
                keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:8a:1c:41:65:15:42:05:25:51:4a:bf:22:ee:92:18:2f:
         a4:de:f1:8d:0e:da:f3:d7:52:fd:91:61:c1:bb:2a:63:e1:ac:
         2b:f5:fc:11:07:32:90:42:52:f9:b7:fe:d2:70:06:e8:48:06:
         3b:b4:e9:99:a4:14:e1:f7:7e:2f:fe:52:a3:8b:3d:af:9e:c3:
         56:0a:b9:fb:61:e3:c5:fc:88:00:c5:9a:05:38:19:ec:2b:a3:
         59:fe:88:15:89:1f:56:56:24:8e:b2:96:13:60:18:51:67:c4:
         e2:18:91:86:3b:09:c0:27:0a:0e:c5:cb:7c:4d:04:a1:3d:97:
         63:a7:9e:ac:3a:0d:4a:3c:e4:6e:ba:cd:c7:84:aa:4f:b5:68:
         01:38:1b:be:f0:07:cf:dc:36:4d:f9:b3:cd:53:b3:07:6e:82:
         33:63:18:a2:01:82:de:da:66:55:79:14:5c:b7:6f:bc:e4:96:
         72:58:cd:e2:a8:76:44:21:72:7b:67:0d:6a:42:1e:b9:69:41:
         bd:36:0b:2f:b8:70:21:ac:d4:34:fb:d0:f0:0e:c5:d2:ae:9d:
         2c:19:c1:98:98:d1:c0:66:86:8e:27:3f:7d:95:66:0e:09:c2:
         ee:5a:9c:36:0e:49:63:86:5f:bb:40:f7:2b:8d:69:dc:0c:39:
         5d:c7:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:30:15 2026 by rpki-client