This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File:                     yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier:          yADW+JvId9DKXES1gAd5HOinsqFWa8S+7JD8gvcSwOY=
Subject key identifier:   BC:61:17:A3:5C:73:7D:43:AE:E5:52:6D:C8:C7:E0:A2:A2:FB:47:2D
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer:       /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial:       019C42B49EE675BCA4A02357656896398DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number:          173B
Signing time:             Mon 09 Feb 2026 14:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:59 +0000
Files and hashes:         1: QX-Yd6enYEasfQySbQcOpc-S1R0.roa (hash: l4a+bU8pCXlKF2s60/wU4ac6DKkHq3Tb0TMI5WXKiic=)
                          2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: iHjDE+/md5/94JkOhaFHX62Cs4hHzdqXF9HAQU8ZbkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:9e:e6:75:bc:a4:a0:23:57:65:68:96:39:8d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
        Validity
            Not Before: Feb  9 14:00:59 2026 GMT
            Not After : Feb 10 14:00:59 2026 GMT
        Subject: CN=bc6117a35c737d43aee5526dc8c7e0a2a2fb472d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:5e:b7:61:71:84:b5:63:18:cb:eb:1e:d3:
                    77:f8:b2:6a:f3:10:6e:24:50:40:8e:87:3f:51:48:
                    3d:2b:3a:1a:b6:f2:ee:1e:d8:2b:d3:75:1b:23:e0:
                    a6:7d:5c:e5:3e:39:e4:ae:04:b0:b7:85:3e:eb:de:
                    34:f4:9a:94:9e:76:4d:05:67:de:59:95:bc:e5:36:
                    ae:0f:d3:bb:02:8e:4f:9d:07:78:f1:23:20:83:b1:
                    64:18:1f:f0:99:50:11:f2:34:a3:8f:85:bc:44:eb:
                    6f:3c:3c:7d:05:33:bd:23:b4:b6:ed:76:42:d1:f2:
                    44:f1:6a:92:0b:2d:e6:89:e9:74:dd:ff:82:75:86:
                    a3:74:c4:98:31:6f:97:c2:ab:3b:80:db:68:4f:24:
                    8c:88:b0:e1:ff:90:fa:d5:ec:c2:26:f4:3b:12:26:
                    ea:ff:a1:45:cc:bd:b5:0e:86:58:0a:31:c6:06:e7:
                    8a:71:85:40:14:19:51:c8:e1:18:b9:fb:ca:09:de:
                    87:b8:65:c1:a7:7d:c4:4f:2a:bd:ae:85:5d:29:f0:
                    0e:1e:30:e7:a6:fb:a9:23:ec:56:21:9b:6f:4e:20:
                    c1:4e:0b:5c:90:37:31:73:4e:fe:65:ec:76:fd:de:
                    64:2a:70:ee:d1:74:0c:9e:1c:a9:dd:b1:b2:60:65:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:17:A3:5C:73:7D:43:AE:E5:52:6D:C8:C7:E0:A2:A2:FB:47:2D
            X509v3 Authority Key Identifier:
                keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:32:55:4b:38:44:67:40:24:74:c9:fa:80:65:14:0c:c3:
         48:1a:6b:83:64:a4:2e:28:44:96:7e:62:c0:94:1f:13:06:7b:
         27:11:a4:86:0e:58:f2:a8:15:cf:7b:2a:7a:2a:f0:f9:71:b8:
         52:4e:91:ec:57:a3:b2:17:55:08:63:be:4c:20:8d:21:cc:5f:
         a1:2a:8f:7f:d9:04:3d:5a:b2:24:f5:4b:94:68:64:66:f3:7a:
         3f:20:22:2a:63:6a:84:5d:d1:2d:8a:e2:a9:ea:ec:25:f5:12:
         ec:a1:b4:07:0a:56:47:42:b0:d1:79:0c:f8:fe:6d:55:08:63:
         48:56:ac:db:8b:cc:a5:08:88:09:30:f8:7c:7f:77:a5:18:e5:
         e5:15:f3:79:bb:a3:00:ab:bf:0c:a3:3d:60:43:aa:ba:bc:81:
         46:1a:43:04:a4:e4:d0:20:7d:f1:85:00:4a:2b:f1:aa:17:dd:
         93:4f:f4:89:9a:69:6a:18:b5:b8:e6:f1:fc:51:c9:e3:a9:b3:
         d8:57:74:ac:a4:3b:1f:dc:ee:b4:f5:2d:f1:89:73:50:9e:22:
         5c:cf:e0:53:d1:4d:20:c0:bb:c9:5e:a6:a6:17:64:77:65:25:
         45:00:c7:a6:8c:c3:c9:95:f6:6d:8a:c5:6e:9e:91:69:80:7d:
         23:a5:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:07 2026 by rpki-client