This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File:                     yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier:          cWmykMFCNkNtmAJo68Jr5FMpdPrmVgxDwhiC91aYjCo=
Subject key identifier:   AA:6B:75:2E:AD:43:1C:43:3B:D8:81:18:59:25:48:10:59:54:AB:84
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer:       /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial:       019C1DCC89BCFB85C0478FFD04B461B3C3E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number:          03BB
Signing time:             Mon 02 Feb 2026 10:01:09 +0000
Manifest this update:     Mon 02 Feb 2026 10:01:09 +0000
Manifest next update:     Tue 03 Feb 2026 10:01:09 +0000
Files and hashes:         1: 8Z-EzuThtebO4TCJ4sXK6ZwkF-U.roa (hash: nLXaQxJqeWy3EVhvO0P+XRy5zmHbKG5lRbAYJ4bV64g=)
                          2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: 8UIodbKKFndBkTTh8rVmbrddZVM1Hyi7mjPP24Ztrtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:cc:89:bc:fb:85:c0:47:8f:fd:04:b4:61:b3:c3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
        Validity
            Not Before: Feb  2 10:01:09 2026 GMT
            Not After : Feb  3 10:01:09 2026 GMT
        Subject: CN=aa6b752ead431c433bd88118592548105954ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:2c:f4:be:23:07:f1:21:1b:e0:61:bf:c8:
                    d0:20:19:5a:11:4a:fb:f2:51:48:8b:31:fc:56:ae:
                    d3:ca:d3:eb:8d:4e:0d:c5:90:96:02:44:0c:d1:4a:
                    a8:b6:c3:c8:44:4f:40:aa:55:06:9d:05:27:ce:67:
                    87:d3:97:3b:9d:97:7a:c0:02:d5:9f:2a:54:df:90:
                    aa:22:fe:28:b9:2a:f6:0f:e9:5a:e6:b7:de:95:81:
                    0e:de:00:67:b2:9e:e0:b3:5e:2a:fb:0d:ca:d7:35:
                    c8:f5:32:84:2a:7c:a9:59:09:47:d2:91:b7:5f:eb:
                    4e:9a:0c:ca:28:b4:b8:3c:27:fb:6f:16:3f:3d:82:
                    61:67:e6:84:e5:11:5a:1d:5f:56:a7:2d:08:8d:a0:
                    b3:a8:ca:d6:9f:a6:27:6b:a7:be:a7:d1:49:b1:c9:
                    eb:34:7e:63:af:81:8a:82:68:dd:71:6d:eb:bf:d2:
                    56:96:30:70:cb:a8:3e:d9:31:d8:f2:e2:46:8e:bf:
                    df:a1:d3:3b:fa:46:63:1a:36:fb:e4:4a:5e:28:5d:
                    41:88:af:30:04:c4:14:76:a1:cc:36:d8:36:d8:bb:
                    04:a5:02:83:e9:79:ee:9f:04:29:bb:f9:e3:1f:7d:
                    7e:ce:2f:45:77:ea:55:00:2a:1c:4d:4b:1b:f3:22:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:75:2E:AD:43:1C:43:3B:D8:81:18:59:25:48:10:59:54:AB:84
            X509v3 Authority Key Identifier:
                keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:5b:b6:5f:4a:80:3d:8f:1f:a4:17:bf:0f:48:1c:e0:7a:
         78:cb:07:41:88:4f:19:a8:e9:59:4c:52:a1:5a:72:b7:a1:89:
         30:45:8e:cf:ac:13:d6:e6:65:af:60:a1:89:4b:87:b9:f0:b2:
         0a:61:b9:6c:3d:4f:4b:b1:0b:62:31:17:71:8e:72:32:bf:ab:
         2c:8d:c5:26:1e:56:a7:fd:65:cb:d9:d3:bc:32:ee:5f:68:ca:
         3f:52:b9:16:fd:02:81:1c:0a:f2:af:50:e4:18:67:f0:f0:97:
         d8:bc:9f:ce:c9:34:f6:61:96:b2:52:7c:86:04:24:48:dc:3e:
         55:5b:33:72:b2:1b:85:cd:67:be:a7:91:c1:41:d8:4c:71:0e:
         fd:5d:fc:74:1b:cc:28:6a:db:58:6d:3c:53:15:74:12:0f:e5:
         83:f5:a5:0f:6a:cf:95:8b:42:87:29:b5:92:94:94:01:5c:a1:
         68:b0:25:c3:60:eb:91:a8:22:93:1a:56:fd:0d:bc:d1:50:72:
         09:5b:8d:3a:41:f1:4d:04:7e:e0:38:f2:2f:59:de:6a:57:c6:
         80:83:9e:34:9a:33:ac:2c:bb:88:a7:be:7f:17:2f:c0:f9:46:
         4a:7b:12:39:6b:5d:cd:38:72:bb:94:9d:04:68:b5:2e:9a:97:
         dd:fd:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:43 2026 by rpki-client