This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File:                     AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier:          rqXUzdLuGbboQNsmaDXfXlzHZbFNv5b99BH63q7ZcHE=
Subject key identifier:   8D:D8:B7:12:88:98:DD:37:79:CC:BC:4F:FB:FA:81:53:71:9B:BC:78
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer:       /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial:       019C42EBBA79CACA4291E16A74D9DF590DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number:          1078
Signing time:             Mon 09 Feb 2026 15:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:10 +0000
Files and hashes:         1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: qn0o+53Ajsdb3zgYp/qPgfU/KkpziuBCHtevbtgDrBg=)
                          2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:ba:79:ca:ca:42:91:e1:6a:74:d9:df:59:0d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
        Validity
            Not Before: Feb  9 15:01:10 2026 GMT
            Not After : Feb 10 15:01:10 2026 GMT
        Subject: CN=8dd8b7128898dd3779ccbc4ffbfa8153719bbc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:e9:f6:3b:d3:45:3b:e6:61:7b:fc:04:4d:
                    28:08:88:9e:50:42:2c:7a:7c:82:fe:29:89:42:82:
                    7b:64:41:a9:50:12:c8:e6:00:3b:db:cd:15:b1:6a:
                    f9:67:50:58:4d:ec:14:81:0c:6d:19:3b:51:a5:a5:
                    7a:a5:1d:5b:06:3b:3b:42:6c:0f:77:d7:d6:23:0a:
                    57:98:8a:c9:93:25:b3:64:e3:c7:c2:a4:5e:f9:00:
                    88:d5:44:cb:88:ca:b1:76:af:9c:97:6e:ca:73:41:
                    23:fb:58:42:08:28:35:2f:30:15:7c:5b:74:39:f0:
                    5b:3e:01:8f:46:e8:7e:bd:48:db:a0:89:56:f0:8a:
                    b2:66:11:f0:13:74:d4:1c:ad:ed:46:35:65:33:43:
                    0d:f2:f0:2b:0c:e7:bb:c4:44:e0:a7:0c:83:f1:74:
                    c8:ea:9c:0f:3e:f9:07:be:71:99:7c:71:0a:c0:52:
                    eb:5d:c2:d5:9b:1f:6f:15:7f:90:18:f3:af:dd:18:
                    2f:f3:15:a5:60:23:d7:4c:a9:53:39:07:90:0f:11:
                    70:62:b9:87:ef:4c:5c:de:c5:11:74:f6:f4:1f:26:
                    b3:72:d8:5b:07:b7:a4:74:b4:6c:05:78:8d:79:25:
                    6f:e8:d2:33:8d:52:a2:46:4e:4e:e3:00:57:06:89:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:B7:12:88:98:DD:37:79:CC:BC:4F:FB:FA:81:53:71:9B:BC:78
            X509v3 Authority Key Identifier:
                keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:98:8c:23:b6:28:37:5d:d9:d7:91:db:81:5d:a9:dd:e7:c3:
         81:8b:a0:cc:4a:59:89:a8:da:b5:4f:dc:a1:db:04:08:a3:38:
         52:0d:4a:55:8e:87:30:51:81:7d:b1:12:e9:44:6f:ef:db:f4:
         17:ec:18:db:19:f1:9e:6a:82:47:58:54:c6:d2:c5:ed:29:cd:
         df:f1:c0:a4:8f:ce:05:71:be:5f:af:48:13:eb:23:7b:19:a1:
         d8:3c:14:5f:46:40:3f:58:59:02:53:47:91:99:46:69:c9:01:
         22:9c:23:15:d3:bd:9f:2a:af:d8:48:1f:91:bc:46:3a:a2:96:
         0d:a9:5d:95:e6:1f:39:06:3b:9b:1a:6c:e7:b7:49:ec:9c:c6:
         01:e9:bf:3b:76:af:82:ec:e0:63:69:93:e8:4c:71:9d:79:40:
         72:30:93:58:14:52:42:9a:27:d0:d3:e9:d1:39:bb:ea:64:6d:
         98:dc:32:d3:1a:a6:03:65:aa:40:7e:66:d2:94:bf:22:60:35:
         45:56:be:4f:f8:6e:fc:1d:d1:5a:86:12:02:e0:cb:52:5b:de:
         6b:aa:f8:79:73:b1:9c:88:ae:d3:ad:6c:4d:c1:b8:7b:85:1a:
         8a:4c:3e:24:a1:0b:46:10:6d:09:26:bd:77:f8:d5:b8:54:c0:
         51:cd:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:22 2026 by rpki-client