This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
File:                     YhBMyFNVHixMLSKBXsEcYMLVu8s.mft (raw, json)
Hash identifier:          abH0aiP0Wbc7M3hbLoutIDL9AOEj5tU8S4QxVd3B2U0=
Subject key identifier:   BC:5D:08:D7:DE:7D:FE:E0:44:2C:D3:38:0C:BE:75:39:9A:17:BA:09
Authority key identifier: 62:10:4C:C8:53:55:1E:2C:4C:2D:22:81:5E:C1:1C:60:C2:D5:BB:CB
Certificate issuer:       /CN=62104cc853551e2c4c2d22815ec11c60c2d5bbcb
Certificate serial:       019C42B44339164BC9095B14BA5C22706343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
Manifest number:          54
Signing time:             Mon 09 Feb 2026 14:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:35 +0000
Files and hashes:         1: T-rY0qRo1e14m28Gif45TSalcCQ.roa (hash: uqzM/eYecGektorBHHReJyonRfAQRMoZKQLvLEOFZIQ=)
                          2: YhBMyFNVHixMLSKBXsEcYMLVu8s.crl (hash: 3TwYHdqSy6ZrOo94cRrAfURd2gJip5XcfFejWBgFEoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:43:39:16:4b:c9:09:5b:14:ba:5c:22:70:63:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62104cc853551e2c4c2d22815ec11c60c2d5bbcb
        Validity
            Not Before: Feb  9 14:00:35 2026 GMT
            Not After : Feb 10 14:00:35 2026 GMT
        Subject: CN=bc5d08d7de7dfee0442cd3380cbe75399a17ba09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:fe:c4:25:f7:06:bc:13:fc:f6:45:35:e2:
                    96:39:2e:96:2d:87:e3:18:c1:b6:6a:88:2f:b4:24:
                    d4:56:22:ec:cf:4b:5f:71:d6:95:dc:88:37:b0:cd:
                    1f:c8:df:90:4a:67:4f:3f:be:cc:f4:54:2a:30:42:
                    44:97:14:60:c2:74:64:fc:90:b1:c8:af:31:7d:83:
                    f8:57:1b:0e:65:a9:50:8e:db:5b:23:b1:a9:48:12:
                    8c:86:16:a8:2e:ae:34:53:b0:4b:b3:08:0d:d7:ba:
                    ed:25:15:90:b6:3b:90:ac:3e:ac:05:9d:8d:64:c6:
                    81:fa:01:c0:ba:0e:c6:ac:ab:1a:c1:31:a3:30:8a:
                    cd:f9:13:6c:d9:33:64:a6:19:7f:6b:45:f6:49:ba:
                    1f:43:48:e1:b9:1b:fc:39:96:57:09:2f:d9:bb:76:
                    2f:67:31:80:39:c5:07:cb:be:3d:c3:62:b2:0d:a1:
                    29:28:69:ae:bc:d5:f6:a4:fd:59:54:d1:0d:da:95:
                    8e:85:d4:85:93:3b:f7:b6:6b:8b:08:19:64:3b:fb:
                    6f:6c:9a:7e:c5:4e:56:f6:46:68:06:4d:1b:ff:1c:
                    ae:56:b1:51:9f:88:26:55:92:98:cf:44:f4:85:eb:
                    65:94:7d:c6:31:60:91:cc:11:77:03:2a:19:5d:c9:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:08:D7:DE:7D:FE:E0:44:2C:D3:38:0C:BE:75:39:9A:17:BA:09
            X509v3 Authority Key Identifier:
                keyid:62:10:4C:C8:53:55:1E:2C:4C:2D:22:81:5E:C1:1C:60:C2:D5:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhBMyFNVHixMLSKBXsEcYMLVu8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/caad1d-8e7d-45d4-9077-a80987f2dcf5/1/YhBMyFNVHixMLSKBXsEcYMLVu8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:17:eb:c0:c6:4d:5a:96:64:f1:49:21:b7:50:20:58:ab:83:
         b3:4e:61:22:58:bf:01:38:32:82:a2:ac:f1:ee:f1:3b:49:1b:
         ba:73:7a:93:f1:3c:3f:79:c3:4c:74:bc:36:e1:ab:ed:aa:75:
         65:2f:d5:b9:8e:10:f6:3b:f3:9c:f7:7b:26:79:24:48:c1:3f:
         97:93:32:56:16:30:f0:83:b7:34:7a:9d:2c:a6:57:b4:ae:8d:
         2d:28:fc:1d:68:5e:ae:49:1d:da:00:38:71:2c:05:a3:59:b1:
         3c:28:74:9e:7e:5b:a1:8e:1c:9f:93:91:ea:87:c7:85:12:fd:
         55:04:d8:0e:48:30:66:05:24:fd:bb:d9:20:df:9d:9c:56:65:
         a0:25:9f:de:81:1b:f2:54:50:cb:65:e3:5a:c3:00:95:83:81:
         eb:82:10:57:c5:cc:c5:8f:57:5d:14:8d:6e:fb:61:ec:6a:19:
         04:6e:da:18:91:8e:78:97:8a:7c:ac:e0:2d:f0:64:fa:78:02:
         bc:4f:aa:af:e9:df:52:95:28:da:5b:f8:10:32:4e:2b:94:0c:
         a2:75:4a:e4:6a:b1:d9:4d:d6:19:f9:bf:e9:7c:7a:80:b1:a8:
         96:e9:4a:5b:e2:8f:c3:4f:16:79:5d:3d:35:5d:6b:4a:bd:cd:
         2c:3c:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:36 2026 by rpki-client