This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File:                     yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier:          mCNCna55kFp140dfPPhwTrSMfO2l8OKtliHzTk5SUPk=
Subject key identifier:   1A:A0:E6:F4:19:6E:3A:19:94:14:15:77:8A:DA:83:8E:87:22:A7:1B
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer:       /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial:       019C4210245F735FB4F2260C46D2ECC674C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number:          0968
Signing time:             Mon 09 Feb 2026 11:01:19 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:19 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:19 +0000
Files and hashes:         1: i9TbDs-UmHFr784ZoqFEeJgd4fs.roa (hash: jtee/rF2N21pHuv03EKIznBMKr6tlpL1hhT7AG0kWT8=)
                          2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: dBLXYxv5iTGjHijfmUIR0Ze3Dnz3BQTZUTdi60wcCjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:24:5f:73:5f:b4:f2:26:0c:46:d2:ec:c6:74:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
        Validity
            Not Before: Feb  9 11:01:19 2026 GMT
            Not After : Feb 10 11:01:19 2026 GMT
        Subject: CN=1aa0e6f4196e3a19941415778ada838e8722a71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:fd:51:17:4c:19:23:c5:e1:a0:4e:b0:8e:
                    e5:ef:52:4e:8a:f7:1a:43:1c:69:69:79:96:38:ce:
                    b4:3d:61:57:b6:d3:3a:8b:c4:61:f5:3d:ae:e9:4d:
                    d0:46:7f:04:ec:f4:ba:74:f2:76:8e:1e:01:ae:f3:
                    85:91:7e:25:02:7e:90:6b:9f:01:c0:4d:87:96:11:
                    61:c5:90:4e:37:9c:a6:bb:44:b1:96:84:51:ef:a9:
                    07:50:d4:bd:fa:c1:09:fc:42:04:62:90:6b:31:03:
                    33:22:b1:f2:cb:84:c6:7a:ce:7e:ad:48:cd:9f:0a:
                    99:fe:b3:8d:b4:b7:5d:4b:fe:8e:1a:85:d5:4d:d1:
                    8c:d0:07:66:2a:70:93:14:e9:f9:1d:a7:8c:06:9a:
                    2c:0c:3e:75:96:f5:f6:c7:86:56:9c:9b:34:b0:84:
                    0c:e1:7d:25:89:78:6d:13:8d:98:4a:db:3c:7b:a5:
                    09:89:46:c0:78:e0:38:0d:6f:3b:45:df:fc:d3:b9:
                    dc:bf:b3:9a:0f:3c:f1:5b:17:1e:c0:9e:55:14:27:
                    c0:5a:23:4e:3d:a2:8f:b2:1e:19:59:e5:b9:79:31:
                    07:48:26:74:45:12:11:a5:ed:61:38:0e:0e:0b:f3:
                    4e:1b:2a:8e:b3:2a:e4:10:4f:0a:a9:39:c0:37:a1:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A0:E6:F4:19:6E:3A:19:94:14:15:77:8A:DA:83:8E:87:22:A7:1B
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:17:7e:ef:c1:88:d5:0a:4d:c9:ab:5b:6e:40:69:f6:6f:14:
         a5:3a:41:52:a9:b9:95:f1:0d:e0:66:59:f3:e8:0c:cc:0a:e0:
         a7:ec:2c:9b:6f:37:10:1f:e4:ec:89:ab:1d:4c:24:8b:b3:9f:
         a6:0d:7e:1b:8a:95:ab:47:f3:38:05:0e:84:13:d8:da:17:bc:
         f0:d5:bf:03:33:f9:da:3e:fe:fc:29:20:b6:60:d5:95:33:51:
         66:7f:ee:7b:c1:7e:6f:07:8d:84:0e:27:98:4a:d3:3e:a4:39:
         4e:6b:29:ab:e4:a0:01:41:67:e8:2d:62:28:cd:5c:67:fc:8e:
         d1:65:fb:39:89:a1:ff:f4:6a:72:44:05:62:90:31:ec:95:66:
         bf:58:f0:0c:fa:ed:e3:b9:a7:96:57:ae:8d:ee:fe:70:cc:63:
         b2:41:5e:83:c3:16:93:3c:57:30:28:20:f8:97:ad:31:4a:d9:
         0a:8e:cb:6c:73:47:8e:4c:3e:48:a0:7a:13:d4:39:c8:e8:e8:
         94:cf:66:c2:3d:6b:06:c5:21:66:db:ea:d5:e7:e6:a2:82:c9:
         42:be:f2:38:e1:9e:49:be:47:cb:ae:cf:03:95:65:cd:da:77:
         d0:57:21:15:1b:05:5e:8d:cd:be:71:e3:4f:09:3c:d6:6f:2d:
         55:1d:80:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:56 2026 by rpki-client