This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File:                     Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier:          tJUHzKIcRuSNxqKQ1Ee5KTeqmhqJWmEnj2YWNiyO3bw=
Subject key identifier:   33:D2:21:D3:10:8C:72:19:3B:6F:A8:EF:16:43:76:61:0C:74:66:CF
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer:       /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial:       019C420F64BB0C5F512FFBC7C80773A07329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number:          096D
Signing time:             Mon 09 Feb 2026 11:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:30 +0000
Files and hashes:         1: AE7tKoXDyuuPCaDaUfMyBa4xWdM.roa (hash: xVpRKPTRXjz76O68/XRyRJECKQ9lTBxMBzIgyh25rxU=)
                          2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: yigBM2r5SDFu9456LwRLyXQ/jRpF3sLKf6r/chcQJIs=)
                          3: rNinx4CuZpXEUOOVr_5qkOxUOro.roa (hash: c7dKHMaq9EPZZdDOaPAKKGKEDbpiSPHR+ZX8mfzSM64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:64:bb:0c:5f:51:2f:fb:c7:c8:07:73:a0:73:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
        Validity
            Not Before: Feb  9 11:00:30 2026 GMT
            Not After : Feb 10 11:00:30 2026 GMT
        Subject: CN=33d221d3108c72193b6fa8ef164376610c7466cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:cf:cd:8a:db:3b:47:44:37:58:6d:5a:b7:
                    e8:f8:68:cd:ce:6f:e7:ec:91:5c:83:85:87:18:95:
                    4b:6d:46:fc:88:67:a7:fa:32:15:9d:4e:3f:b9:b8:
                    51:31:63:11:0e:08:63:01:f3:5d:e7:63:17:34:4c:
                    14:f8:c8:6b:39:be:80:c0:5a:62:6f:62:04:c5:82:
                    f8:ea:05:88:43:4d:2b:c7:36:7c:bc:b6:07:25:6a:
                    72:50:64:1a:65:2d:ab:76:83:a0:e3:b8:dd:6b:3b:
                    33:0b:90:46:cf:ca:80:36:d5:14:f8:ba:b5:f0:4f:
                    01:63:99:81:86:b2:4b:70:1b:47:f9:ef:92:b6:53:
                    99:ed:eb:26:39:f6:1e:0e:44:f5:04:53:65:a5:79:
                    07:a7:e6:b2:dc:8d:63:a3:df:97:ba:28:2e:29:cf:
                    1c:8a:7e:0d:57:1a:fc:3e:eb:9d:c5:a4:48:a1:00:
                    1b:9c:85:84:5a:b8:52:ab:c3:d2:24:85:32:05:ff:
                    57:15:58:d7:7f:6c:73:f0:e5:e8:8b:d4:26:89:5f:
                    d8:a6:f8:e1:75:bc:45:c6:23:57:cf:30:9a:03:9f:
                    42:4f:39:ac:70:38:52:3c:53:c7:d4:21:4f:ac:15:
                    f0:b0:05:ea:ff:2d:3d:ce:d6:dc:04:4f:1c:de:7e:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D2:21:D3:10:8C:72:19:3B:6F:A8:EF:16:43:76:61:0C:74:66:CF
            X509v3 Authority Key Identifier:
                keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c2:f9:aa:ed:17:d6:92:ad:75:fd:0f:b7:22:e5:a8:ce:ee:
         76:f3:9c:12:a7:f1:8e:ba:e9:6a:b3:79:25:af:e6:a4:fc:b3:
         46:07:06:2f:18:48:12:fe:07:10:ad:50:26:0d:0d:0f:83:88:
         29:62:3e:8d:79:2b:fa:20:d0:6e:a9:a7:af:32:41:0e:4d:e6:
         d3:b2:03:35:51:e4:76:ee:98:ce:18:ec:2f:7d:e4:73:cb:81:
         43:be:f1:e3:1e:35:ce:3e:be:7b:15:56:73:a4:73:28:bb:ba:
         7a:f0:53:3d:4d:c0:11:37:4f:d9:2e:26:09:b5:7d:69:89:eb:
         d6:9e:1b:23:ec:93:d7:85:52:71:05:c8:f5:70:ad:b7:ee:69:
         21:20:38:a2:a5:d1:58:64:dd:b1:25:7b:f9:b2:9b:62:3c:50:
         0c:3d:47:94:32:96:c7:d8:8a:10:d7:29:62:ac:72:69:bb:db:
         88:38:26:d7:6a:70:68:7f:bb:be:0c:f7:99:91:30:c1:5a:40:
         8d:e9:0f:3a:cd:eb:ec:fd:a8:73:ca:20:ba:27:99:85:b9:72:
         6d:80:35:77:ad:98:dd:1b:bf:72:22:c7:be:c1:a3:97:fb:21:
         a5:ab:8e:66:51:aa:63:1a:fb:66:33:21:e9:8b:87:41:cd:df:
         60:3f:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:51 2026 by rpki-client