This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File:                     YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier:          R1T24TOV/UHleiYEmAduPOqw035UE5t3aJ3LIe0aDNE=
Subject key identifier:   99:21:37:68:CC:69:2F:06:D9:A8:57:4F:27:DF:5F:5C:77:9B:64:1B
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer:       /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial:       019C40FD40A88E1FB2DC42FFD29E37F4913B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 06:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:04 +0000
Files and hashes:         1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
                          2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: X2BUb8rshQBxMCRYNdNbHz7gjf0F5/oJjC+kfW1DTg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:40:a8:8e:1f:b2:dc:42:ff:d2:9e:37:f4:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
        Validity
            Not Before: Feb  9 06:01:04 2026 GMT
            Not After : Feb 10 06:01:04 2026 GMT
        Subject: CN=99213768cc692f06d9a8574f27df5f5c779b641b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:81:15:f8:7c:37:81:65:30:de:40:8e:36:
                    73:9b:c9:18:b7:8d:0f:b1:74:1b:5a:ae:35:7c:69:
                    58:c0:75:b1:f8:be:0c:40:6a:dd:67:d6:d0:91:c2:
                    ee:c9:35:9f:e6:7e:d0:6f:63:d4:c5:c1:0f:22:3e:
                    38:d8:a4:81:eb:ad:db:4c:96:b1:52:ae:b2:49:59:
                    31:d7:6c:43:78:1b:20:48:70:b4:52:bb:d1:94:90:
                    fe:c7:05:6c:b4:b0:8f:ff:c5:6d:5b:66:98:fe:61:
                    cd:4b:06:9f:85:24:f5:fe:6c:63:2e:c8:79:a3:70:
                    06:7f:21:4b:3b:7a:8c:5d:6b:c3:19:99:7a:04:e6:
                    b3:fb:1f:01:fb:6f:4a:bf:7d:e0:ae:0d:6f:3e:62:
                    b0:94:ee:99:d2:96:37:78:5b:13:53:53:24:86:b2:
                    3c:86:00:c3:23:73:89:9b:0a:f7:4d:8f:9d:5e:23:
                    96:13:18:91:b3:fe:bc:c8:89:40:e1:03:22:2b:a6:
                    eb:9c:ec:c8:33:9a:56:63:2a:ba:13:c7:2d:cd:99:
                    e2:a1:4f:64:20:95:67:dc:36:66:f5:2e:68:a4:3f:
                    d8:cb:28:4f:fa:a7:66:07:6a:37:ad:87:e8:b4:e4:
                    70:a7:e0:f6:cc:e0:ee:3e:39:65:8d:24:6c:b7:b1:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:21:37:68:CC:69:2F:06:D9:A8:57:4F:27:DF:5F:5C:77:9B:64:1B
            X509v3 Authority Key Identifier:
                keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:6d:f8:d0:ac:95:0d:aa:85:f9:5f:d7:32:43:22:58:55:
         30:61:9a:46:e3:a7:76:50:f2:e0:ee:12:25:75:d6:82:2b:c4:
         5a:eb:d0:13:62:59:dc:34:e8:ad:38:65:81:8d:a3:8f:d0:bc:
         b0:7e:39:c7:94:bc:9b:35:2a:e1:6f:9f:ae:e9:20:fe:f4:e6:
         df:75:ab:df:3a:57:37:6b:3b:eb:e6:c7:49:82:f9:f7:f6:2b:
         08:ba:d3:e5:91:75:28:3a:3f:c7:fd:52:e9:7b:df:77:5a:66:
         35:0c:78:82:ef:22:ef:c9:9c:e4:d4:85:15:87:5f:c5:f0:3b:
         67:bc:52:a3:b1:ba:2c:94:25:36:31:eb:04:7e:af:eb:8d:44:
         68:4f:dd:8f:2e:fa:92:5b:f6:32:31:66:0c:0e:e3:1f:ee:df:
         31:6a:7a:18:e9:f2:58:90:8c:9d:c8:85:8c:9d:86:42:94:a7:
         86:ee:2d:f9:16:8c:e8:fd:46:b6:95:31:36:95:c9:19:e1:c6:
         2f:60:3f:ac:ac:15:73:52:3a:ca:d8:59:08:9a:9f:60:be:47:
         74:5c:18:dd:91:2e:fb:56:bb:8b:d2:6c:74:b0:82:0a:04:5d:
         62:ee:c2:15:42:b1:8d:ef:e7:99:6d:83:93:ee:49:53:65:48:
         6a:5b:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:40 2026 by rpki-client