This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File:                     sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier:          WJKOr2mxjuuNG6Ljdv29pcMtR14Ht8faDGq0iwBQrmc=
Subject key identifier:   A2:61:2C:98:21:20:BC:40:F9:2E:78:B8:E3:3E:70:E7:28:A3:C0:46
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer:       /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial:       019C43FE083E84B70CFF60C8ACC9593BC884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number:          16F5
Signing time:             Mon 09 Feb 2026 20:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:47 +0000
Files and hashes:         1: bQ0UMbsXdltHxsStpLRstv9CTXE.roa (hash: im1T7M/9bEyzU0YTti18gKcB/PDLlDsdZZk+yOh0iEQ=)
                          2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: Y/FEO3knYEqSs8mf93xwujg0d9L52KzQOnPjhx1gDPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:08:3e:84:b7:0c:ff:60:c8:ac:c9:59:3b:c8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
        Validity
            Not Before: Feb  9 20:00:47 2026 GMT
            Not After : Feb 10 20:00:47 2026 GMT
        Subject: CN=a2612c982120bc40f92e78b8e33e70e728a3c046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:36:1f:05:b9:5a:d6:df:51:0d:7c:22:a6:
                    10:d1:b1:52:ba:06:b7:a3:72:e1:bf:56:f9:d8:40:
                    25:13:8f:76:60:02:0b:3f:69:cc:1f:cb:57:dd:d4:
                    c6:38:f2:d1:54:3a:43:94:7e:6a:5d:fd:86:69:4c:
                    d7:6d:d0:ce:0b:43:d6:aa:57:37:61:8a:d5:3d:ce:
                    29:e4:9e:1c:9c:cb:71:90:67:f1:35:08:34:84:0b:
                    3c:5d:39:f0:91:68:28:a7:db:0f:7e:34:3f:c1:f4:
                    fe:a5:93:52:09:61:90:d2:ec:0c:fd:15:c7:3c:95:
                    36:aa:78:09:b9:78:f3:3c:b6:81:9c:80:8e:81:57:
                    92:d1:a1:19:5b:28:f0:a1:66:1a:b1:ff:ad:20:10:
                    c2:4d:f2:fa:a2:1b:47:75:39:25:f0:3d:44:34:74:
                    ea:27:0f:e2:8e:5f:37:38:68:f0:40:4d:8a:20:dd:
                    5a:53:e0:88:0c:ed:b4:35:93:a2:18:58:3c:41:4a:
                    0c:59:0a:dd:eb:21:95:33:30:9d:30:b8:f7:12:20:
                    38:29:57:7c:5e:58:8e:b1:54:ab:52:26:a8:a5:b5:
                    e5:03:f4:46:21:1e:ad:7e:6f:5b:65:5d:70:20:bb:
                    30:7c:51:3f:f9:1f:06:01:d3:ff:e9:3c:ee:16:2d:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:61:2C:98:21:20:BC:40:F9:2E:78:B8:E3:3E:70:E7:28:A3:C0:46
            X509v3 Authority Key Identifier:
                keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:93:aa:e9:97:fb:cc:78:65:d0:37:06:1d:18:56:bb:83:f8:
         ea:dd:28:1f:74:09:b9:40:dd:69:8d:0f:b7:5d:58:b8:31:76:
         cf:a2:22:76:85:07:a0:ae:79:37:f3:a7:a2:aa:f6:ba:93:dc:
         fb:3c:64:94:cb:02:97:50:c9:3f:90:55:0b:40:67:40:2e:ee:
         4f:37:f8:4b:45:3c:6c:a7:3e:c6:b2:e9:d0:ba:8b:a1:3c:27:
         5b:48:66:2c:0f:2b:a3:d9:3c:93:36:af:30:b6:f7:40:ec:3c:
         f7:08:ee:eb:b0:a0:db:f0:c0:98:e2:58:a4:2d:51:ce:b6:38:
         06:6d:7d:57:4e:de:51:4f:e8:cb:95:31:b2:7a:b6:d2:ba:d9:
         f8:f0:de:2c:d2:4a:85:dc:c5:69:03:05:47:e1:25:30:55:38:
         f4:90:36:f0:19:a0:25:71:c4:6c:7e:2f:48:40:4b:15:bc:4b:
         ab:bd:f0:68:da:c4:93:2b:b3:e6:ab:24:fc:29:a3:2f:75:5c:
         ba:74:9b:14:26:56:36:5a:3b:a5:86:7b:5c:3e:40:f0:6e:ae:
         29:4e:71:0c:05:2a:56:79:d0:0b:46:1d:8f:52:8c:d5:ed:31:
         db:73:ca:52:e2:cf:b9:7b:63:e9:3c:63:56:49:92:92:21:0f:
         4a:7e:e6:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/gg+hLcM/2DIrMlZO8iEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGQ1ODhkZjIwYjMyZGI5Nzg3ZDc3ODY0Mzk0Y2Q3YTY2
ZDQwMzAwHhcNMjYwMjA5MjAwMDQ3WhcNMjYwMjEwMjAwMDQ3WjAzMTEwLwYDVQQD
EyhhMjYxMmM5ODIxMjBiYzQwZjkyZTc4YjhlMzNlNzBlNzI4YTNjMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PI2HwW5WtbfUQ18IqYQ0bFSuga3
o3Lhv1b52EAlE492YAILP2nMH8tX3dTGOPLRVDpDlH5qXf2GaUzXbdDOC0PWqlc3
YYrVPc4p5J4cnMtxkGfxNQg0hAs8XTnwkWgop9sPfjQ/wfT+pZNSCWGQ0uwM/RXH
PJU2qngJuXjzPLaBnICOgVeS0aEZWyjwoWYasf+tIBDCTfL6ohtHdTkl8D1ENHTq
Jw/ijl83OGjwQE2KIN1aU+CIDO20NZOiGFg8QUoMWQrd6yGVMzCdMLj3EiA4KVd8
XliOsVSrUiaopbXlA/RGIR6tfm9bZV1wILswfFE/+R8GAdP/6TzuFi2dCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJhLJghILxA+S54uOM+cOcoo8BGMB8GA1UdIwQY
MBaAFLJNWI3yCzLbl4fXeGQ5TNembUAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgt
ZDdiNjRiN2NjNTgzLzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgtZDdiNjRiN2NjNTgz
LzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpOq6Zf7
zHhl0DcGHRhWu4P46t0oH3QJuUDdaY0Pt11YuDF2z6IidoUHoK55N/Onoqr2upPc
+zxklMsCl1DJP5BVC0BnQC7uTzf4S0U8bKc+xrLp0LqLoTwnW0hmLA8ro9k8kzav
MLb3QOw89wju67Cg2/DAmOJYpC1RzrY4Bm19V07eUU/oy5Uxsnq20rrZ+PDeLNJK
hdzFaQMFR+ElMFU49JA28BmgJXHEbH4vSEBLFbxLq73waNrEkyuz5qsk/CmjL3Vc
unSbFCZWNlo7pYZ7XD5A8G6uKU5xDAUqVnnQC0Ydj1KM1e0x23PKUuLPuXtj6Txj
VkmSkiEPSn7mDw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:00:01 2026 by rpki-client