This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File:                     yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier:          HaaufLalvLBczp5zzhzjyDzWczQhZQh5jJBbw72m40w=
Subject key identifier:   98:E4:D7:6B:C8:7E:44:E5:43:7D:B1:5D:C5:E3:6D:8B:2F:61:54:3A
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer:       /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial:       019C41D88D7A7E7D569A8C6FE6965BAFA320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number:          05B6
Signing time:             Mon 09 Feb 2026 10:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:36 +0000
Files and hashes:         1: ApB3AApTkd-CTxpkFDEIw_6nXz4.roa (hash: BHpUQQ7BEi0kv1fti7vIaRRcfrlm8kSIsZNfVucwYew=)
                          2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: x/CPwYLBB8OdfWYtgEwea+efjFABEGPewzn6sbdEtz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:8d:7a:7e:7d:56:9a:8c:6f:e6:96:5b:af:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
        Validity
            Not Before: Feb  9 10:00:36 2026 GMT
            Not After : Feb 10 10:00:36 2026 GMT
        Subject: CN=98e4d76bc87e44e5437db15dc5e36d8b2f61543a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:9b:6b:33:8d:52:29:d1:3a:bd:69:c2:c8:
                    b1:ff:21:e6:1c:12:d4:2a:6a:da:aa:ca:c8:93:73:
                    01:fa:13:01:cf:b8:58:84:4a:30:4f:a4:01:5e:49:
                    57:6d:4b:ec:a4:5c:ed:bd:2a:71:27:66:35:b1:cd:
                    98:b1:86:b6:62:ac:f0:9a:7c:cf:2c:af:1e:cb:7d:
                    26:9a:29:6b:00:8c:81:91:67:30:7a:85:49:3e:d6:
                    7d:5f:12:0c:c8:9d:4e:7a:e5:87:ee:64:cc:d6:dc:
                    14:37:5a:73:3c:eb:38:96:3d:b5:7f:dd:55:9a:98:
                    94:73:1f:5a:1a:82:35:d0:83:53:f8:e9:fb:32:3a:
                    9a:f6:bf:c3:d1:70:da:94:5a:30:40:65:de:39:a7:
                    ae:f4:35:a7:62:0e:e2:b2:e9:b6:73:fd:54:65:80:
                    0b:79:7d:33:61:77:a3:ae:e6:b0:41:b3:ac:69:6b:
                    15:99:f5:37:83:7f:24:36:ea:50:cb:64:b6:33:65:
                    cf:2b:62:75:fd:f7:8a:91:4a:1a:9e:75:bb:5b:23:
                    09:98:37:e2:ad:fa:bc:63:63:cc:66:3c:54:75:22:
                    e3:56:13:63:6a:27:72:38:6b:ec:4c:27:6f:ef:79:
                    c6:c1:64:46:05:e1:91:0b:ce:e2:57:f5:34:40:79:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E4:D7:6B:C8:7E:44:E5:43:7D:B1:5D:C5:E3:6D:8B:2F:61:54:3A
            X509v3 Authority Key Identifier:
                keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:3b:21:b2:e6:f4:d7:bb:5e:e0:be:35:61:e5:a2:4b:d7:
         7a:6f:7c:35:77:33:ef:9b:96:35:8c:69:1b:1e:2b:71:db:cd:
         89:77:dc:8a:07:b3:f3:a0:f2:ae:a0:b3:2a:4c:fd:a7:2e:c6:
         61:1b:33:6c:07:d7:83:c3:65:d8:23:c2:67:a3:d9:c6:05:a0:
         2e:ba:f3:0c:b5:58:a0:98:07:09:50:c7:66:a1:64:5c:df:1d:
         48:a7:0e:ea:ed:2b:35:91:4e:7f:62:f2:46:fa:13:76:be:4f:
         50:4b:05:0c:ee:13:2a:76:a7:4a:4e:cb:59:c6:8c:28:7f:53:
         ab:07:c1:13:df:fc:d3:96:44:4f:c4:4b:04:72:86:1d:b0:dd:
         a5:8a:78:52:2c:34:25:48:d1:35:09:bc:6d:72:d0:40:bf:fa:
         a1:bf:36:b1:c6:6a:cc:24:14:1f:f8:9e:de:2f:93:32:f0:9f:
         b0:da:0f:48:6c:47:98:32:11:3a:3e:2c:f6:39:26:e4:39:42:
         14:98:ea:32:6b:b4:75:ba:20:ec:ee:28:58:5c:20:0b:87:ab:
         1e:3f:d8:0d:ca:f5:b1:51:27:54:3e:77:46:dc:ec:93:7a:0b:
         f8:96:c6:6c:f0:b1:18:8f:ac:5f:88:d1:db:c3:b5:15:38:94:
         67:14:8b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2I16fn1Wmoxv5pZbr6MgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTJkOGJhMmUwODk0ZGQwNmNhMTQzYTU1MTcyMzRlNTg0
YWY4YzcwHhcNMjYwMjA5MTAwMDM2WhcNMjYwMjEwMTAwMDM2WjAzMTEwLwYDVQQD
Eyg5OGU0ZDc2YmM4N2U0NGU1NDM3ZGIxNWRjNWUzNmQ4YjJmNjE1NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs16bazONUinROr1pwsix/yHmHBLU
KmraqsrIk3MB+hMBz7hYhEowT6QBXklXbUvspFztvSpxJ2Y1sc2YsYa2YqzwmnzP
LK8ey30mmilrAIyBkWcweoVJPtZ9XxIMyJ1OeuWH7mTM1twUN1pzPOs4lj21f91V
mpiUcx9aGoI10INT+On7Mjqa9r/D0XDalFowQGXeOaeu9DWnYg7isum2c/1UZYAL
eX0zYXejruawQbOsaWsVmfU3g38kNupQy2S2M2XPK2J1/feKkUoannW7WyMJmDfi
rfq8Y2PMZjxUdSLjVhNjaidyOGvsTCdv73nGwWRGBeGRC87iV/U0QHn8ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjk12vIfkTlQ32xXcXjbYsvYVQ6MB8GA1UdIwQY
MBaAFMsS2LouCJTdBsoUOlUXI05YSvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMt
MzRlMjI3OWJlNzY1LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMtMzRlMjI3OWJlNzY1
LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvs7IbLm
9Ne7XuC+NWHlokvXem98NXcz75uWNYxpGx4rcdvNiXfcigez86DyrqCzKkz9py7G
YRszbAfXg8Nl2CPCZ6PZxgWgLrrzDLVYoJgHCVDHZqFkXN8dSKcO6u0rNZFOf2Ly
RvoTdr5PUEsFDO4TKnanSk7LWcaMKH9TqwfBE9/805ZET8RLBHKGHbDdpYp4Uiw0
JUjRNQm8bXLQQL/6ob82scZqzCQUH/ie3i+TMvCfsNoPSGxHmDIROj4s9jkm5DlC
FJjqMmu0dbog7O4oWFwgC4erHj/YDcr1sVEnVD53Rtzsk3oL+JbGbPCxGI+sX4jR
28O1FTiUZxSLfg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:56 2026 by rpki-client