This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File:                     yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier:          i8ELR/9SLYDsGXq7NLfaqvfyRRmumNEpXbnHoA6o+ww=
Subject key identifier:   70:80:23:9F:62:E4:C5:4F:DF:20:FA:61:A3:7D:65:E1:C7:9D:43:6E
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer:       /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial:       019C421028C83660678CA1EC23D783CA027C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number:          0BA3
Signing time:             Mon 09 Feb 2026 11:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:21 +0000
Files and hashes:         1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
                          2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
                          3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: W++itQ/ikfBbPu/20ppNe0Mm+wHyO6UMm2LX0wd3mPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:28:c8:36:60:67:8c:a1:ec:23:d7:83:ca:02:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
        Validity
            Not Before: Feb  9 11:01:21 2026 GMT
            Not After : Feb 10 11:01:21 2026 GMT
        Subject: CN=7080239f62e4c54fdf20fa61a37d65e1c79d436e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:9b:7b:8d:28:9e:53:29:60:ac:8a:32:29:
                    e5:44:3c:93:a5:72:26:b0:0e:54:ce:8f:8c:b2:73:
                    14:96:d2:ab:e6:22:04:8d:89:8a:7d:a6:ce:37:98:
                    f9:7c:ef:6c:3d:08:3e:89:54:0e:ae:c6:5f:79:40:
                    d8:08:8d:12:b3:2d:c9:13:43:db:6c:8c:6c:a2:8a:
                    95:9d:c5:1e:f4:e1:42:b5:81:95:1e:01:16:6b:ad:
                    23:e8:57:de:db:6d:ae:87:7a:08:21:90:af:1c:1b:
                    d3:fa:a7:99:a4:ed:e7:3e:70:21:a8:f3:15:57:19:
                    95:cf:94:a1:0c:03:22:d8:bf:cd:4b:64:f3:f6:b5:
                    57:a8:4b:e9:8f:e8:14:5f:db:c6:fa:20:96:33:ea:
                    14:79:b0:71:a0:73:3a:b6:c5:36:2b:76:e4:89:b9:
                    52:3b:58:54:02:5e:6a:ec:49:73:cc:c7:59:6d:85:
                    b9:b9:34:04:f6:d8:c2:1c:42:cc:d7:36:44:86:1b:
                    4b:80:a0:0f:89:2e:62:bc:f0:d2:ed:56:f3:8a:0c:
                    18:f6:85:a6:96:37:c1:7c:58:a0:d1:46:58:4f:72:
                    d9:5c:fd:ba:ab:d7:79:8d:00:2b:a9:af:94:cd:1e:
                    17:60:80:0c:65:c9:ec:5d:86:2a:33:93:0a:71:c2:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:80:23:9F:62:E4:C5:4F:DF:20:FA:61:A3:7D:65:E1:C7:9D:43:6E
            X509v3 Authority Key Identifier:
                keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:58:ea:52:e9:fc:c6:5c:47:a2:16:f9:7d:44:f5:bf:9b:91:
         f8:20:42:f0:c3:1c:7b:34:0c:3b:9d:2a:c7:c5:44:7f:e7:2a:
         bf:79:bc:95:83:b2:0e:1a:fe:61:d9:73:86:e2:27:69:30:00:
         76:8e:7a:db:f5:99:6e:f6:f4:1c:5e:4d:29:5d:4d:27:3b:0c:
         ec:2e:39:47:43:f6:d0:00:6e:af:af:d6:79:15:0a:2e:0c:5c:
         3a:86:21:85:bd:1f:63:40:03:84:43:56:73:90:06:a1:96:da:
         c0:f5:47:c0:54:a9:ff:9c:67:c3:3c:55:5c:cd:d8:a1:5e:40:
         60:78:39:93:cf:e4:e8:0b:a6:65:06:44:cb:51:7c:f6:d3:f7:
         03:5c:66:8a:68:6f:40:f5:fd:c9:91:2f:b3:ec:a7:2f:75:23:
         b1:88:25:39:69:db:c4:07:64:04:82:77:fa:e1:c9:3c:2d:73:
         13:6e:44:43:ed:a5:b3:78:11:95:61:5b:95:73:87:6b:3a:47:
         1c:27:60:05:6e:0d:06:ca:94:44:14:b4:0a:86:c2:d9:68:d0:
         15:56:cb:77:14:09:94:9b:a8:90:f8:f6:b3:12:1a:2b:9e:41:
         17:76:0d:0b:df:88:29:ad:82:8a:eb:f1:54:b0:e2:a5:c3:75:
         0a:c6:f2:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCECjINmBnjKHsI9eDygJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4
OTA1YmUwHhcNMjYwMjA5MTEwMTIxWhcNMjYwMjEwMTEwMTIxWjAzMTEwLwYDVQQD
Eyg3MDgwMjM5ZjYyZTRjNTRmZGYyMGZhNjFhMzdkNjVlMWM3OWQ0MzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTSbe40onlMpYKyKMinlRDyTpXIm
sA5Uzo+MsnMUltKr5iIEjYmKfabON5j5fO9sPQg+iVQOrsZfeUDYCI0Ssy3JE0Pb
bIxsooqVncUe9OFCtYGVHgEWa60j6Ffe222uh3oIIZCvHBvT+qeZpO3nPnAhqPMV
VxmVz5ShDAMi2L/NS2Tz9rVXqEvpj+gUX9vG+iCWM+oUebBxoHM6tsU2K3bkiblS
O1hUAl5q7ElzzMdZbYW5uTQE9tjCHELM1zZEhhtLgKAPiS5ivPDS7VbzigwY9oWm
ljfBfFig0UZYT3LZXP26q9d5jQArqa+UzR4XYIAMZcnsXYYqM5MKccLCJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCAI59i5MVP3yD6YaN9ZeHHnUNuMB8GA1UdIwQY
MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt
ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0
LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVjqUun8
xlxHohb5fUT1v5uR+CBC8MMcezQMO50qx8VEf+cqv3m8lYOyDhr+YdlzhuInaTAA
do562/WZbvb0HF5NKV1NJzsM7C45R0P20ABur6/WeRUKLgxcOoYhhb0fY0ADhENW
c5AGoZbawPVHwFSp/5xnwzxVXM3YoV5AYHg5k8/k6AumZQZEy1F89tP3A1xmimhv
QPX9yZEvs+ynL3UjsYglOWnbxAdkBIJ3+uHJPC1zE25EQ+2ls3gRlWFblXOHazpH
HCdgBW4NBsqURBS0CobC2WjQFVbLdxQJlJuokPj2sxIaK55BF3YNC9+IKa2Ciuvx
VLDipcN1CsbyTg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:26 2026 by rpki-client