This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File:                     bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier:          /hMKxr2aUqgElQF/u2VZqSNjPqHO/7Sm/3bthlQ0V2A=
Subject key identifier:   E3:E2:65:F7:03:43:3C:63:A6:77:71:80:B3:A8:96:94:D6:DE:31:BC
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer:       /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial:       019C44A2AAE869F8FF770FEDFE7609A1DE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number:          1370
Signing time:             Mon 09 Feb 2026 23:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:36 +0000
Files and hashes:         1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
                          2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: H1wOmlTcu9SwqaH3EAerKAj5aUSZkMF0Zz5dHO0L0ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:aa:e8:69:f8:ff:77:0f:ed:fe:76:09:a1:de:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
        Validity
            Not Before: Feb  9 23:00:36 2026 GMT
            Not After : Feb 10 23:00:36 2026 GMT
        Subject: CN=e3e265f703433c63a6777180b3a89694d6de31bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:f3:8d:fb:da:69:24:c1:2f:ed:b0:36:9c:
                    f5:4e:a4:32:b5:6e:e6:4e:0d:9e:4c:55:47:5a:3c:
                    33:0c:48:3c:d5:e1:14:09:76:92:fe:ca:58:64:02:
                    1b:5e:1e:3f:6f:a6:38:28:e9:9c:d4:4c:3f:fa:66:
                    f6:62:a8:de:d3:a7:2e:64:94:e4:0f:2f:26:44:40:
                    2f:56:88:26:0a:26:f7:94:e1:08:4f:9d:a5:6a:2e:
                    46:af:60:e7:3e:e2:08:09:0d:c7:1d:92:81:04:50:
                    79:17:ac:7a:df:10:5b:65:34:9b:c6:32:b8:05:3a:
                    e8:37:14:42:30:fc:45:3b:12:5b:60:e0:25:5b:48:
                    bd:c7:80:d9:2d:1a:c1:be:e7:31:c7:c4:20:aa:eb:
                    88:b8:42:8a:7b:de:c3:c2:9a:11:3d:57:d3:85:91:
                    2d:ea:41:d4:86:e0:39:bc:5a:61:20:31:fb:0b:50:
                    1c:d7:92:a3:3e:80:8f:2a:12:e4:c6:a7:eb:fe:ab:
                    8d:58:14:6d:3f:26:c4:2d:43:28:4e:6c:84:6b:50:
                    00:7b:2a:51:13:4b:7a:e4:cd:e5:c9:12:73:88:7a:
                    7a:ea:57:31:98:01:13:3f:70:db:80:3d:9c:ff:ab:
                    69:ee:c9:1b:02:49:46:86:ae:4d:49:6e:9e:74:b3:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:65:F7:03:43:3C:63:A6:77:71:80:B3:A8:96:94:D6:DE:31:BC
            X509v3 Authority Key Identifier:
                keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:c6:35:e4:53:b2:41:cf:3e:90:f4:f1:83:5b:1b:8c:55:
         5e:42:ec:22:9c:be:bf:50:65:61:7e:32:15:91:cb:b0:aa:f6:
         68:7a:58:76:92:09:97:93:fc:3a:8b:10:85:67:96:24:74:16:
         f4:a7:f0:df:c9:e4:76:95:d7:57:40:16:2f:4c:1e:d0:13:0d:
         5a:0b:a0:df:a0:20:6a:d5:62:e6:c5:77:23:d1:07:72:12:40:
         99:f2:45:7c:67:ec:98:9b:9d:34:bf:41:e9:ba:9c:99:07:fc:
         81:eb:e2:bc:9f:90:02:21:0a:92:ce:a1:ad:81:bf:a2:a7:32:
         7a:0b:13:87:d7:f5:7d:9b:30:86:f7:58:c7:46:9f:1a:f8:81:
         68:bf:49:61:b6:31:a0:ad:73:b0:d2:73:00:0b:b6:77:f0:b8:
         b1:a9:58:cb:2d:45:04:2c:60:8c:3a:da:e5:2f:50:d8:27:f5:
         47:5d:e1:01:57:c1:2f:16:80:77:22:0d:5d:68:8f:1d:de:ef:
         a0:f9:be:b1:ea:05:2a:87:d9:05:54:65:e1:66:e2:87:ce:db:
         c6:a3:63:51:85:df:4e:0a:1b:59:cf:ab:cc:96:7c:55:9b:71:
         f6:0e:d8:df:a1:6b:6b:63:8e:6a:ed:dd:53:00:91:87:92:e8:
         55:3f:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:57 2026 by rpki-client