This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File:                     yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier:          IN5MoveNCozu8eGbZCnZ+BTUEVHALmTzW7zqA6uRgPs=
Subject key identifier:   AB:64:07:CE:A0:ED:A7:3F:3A:59:6D:B1:D4:CE:B5:5E:70:DF:FB:3F
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer:       /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial:       019C42EB9C4E56F045914D392AD81402BCFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:03 +0000
Files and hashes:         1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
                          2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
                          3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: FbZQVbej17sEYugTELmJWQMUn8e1i8pxOSgxvjM6hgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:9c:4e:56:f0:45:91:4d:39:2a:d8:14:02:bc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
        Validity
            Not Before: Feb  9 15:01:03 2026 GMT
            Not After : Feb 10 15:01:03 2026 GMT
        Subject: CN=ab6407cea0eda73f3a596db1d4ceb55e70dffb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:1f:ff:36:d3:a9:ec:60:61:ed:10:66:58:
                    70:a2:66:12:a7:1e:2f:69:51:d3:6c:15:cb:83:5e:
                    80:48:e8:c0:6b:1a:3c:4c:93:f4:47:1e:ac:61:ec:
                    4f:cf:9c:34:37:01:b3:0d:94:1b:ca:a2:cd:0c:8a:
                    3b:d4:84:29:c6:80:2d:92:ed:4f:60:cd:92:40:49:
                    15:5b:6c:a8:02:98:e8:f8:0b:94:33:17:d0:23:a4:
                    ed:e2:a3:2b:a4:1a:e6:78:64:7c:2b:bf:f1:71:fa:
                    e9:77:db:0d:5a:0c:80:14:90:d5:b2:c2:26:15:da:
                    e2:a9:bd:99:08:3d:88:23:6f:04:3e:de:e1:7a:9d:
                    59:ed:66:34:90:1d:a7:6c:48:59:0b:46:2b:34:0e:
                    f3:fc:47:63:3c:9f:b1:c9:3f:11:c1:dd:31:6e:cd:
                    8b:77:c8:f8:97:e6:d2:23:82:bf:a8:b5:4c:e9:c5:
                    30:c1:48:c7:b3:cb:0b:fb:1e:b2:90:1a:52:08:27:
                    60:db:a5:c7:bd:9f:0b:c5:4e:c4:16:37:f1:02:09:
                    18:60:ad:5d:71:a9:1e:d3:82:60:1e:e9:43:3c:d2:
                    99:17:71:23:9b:d2:82:9e:21:1a:fc:d5:39:f7:ca:
                    ba:3c:dc:97:e7:24:22:28:66:d2:c0:b7:b9:b0:3a:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:64:07:CE:A0:ED:A7:3F:3A:59:6D:B1:D4:CE:B5:5E:70:DF:FB:3F
            X509v3 Authority Key Identifier:
                keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:43:e5:03:c3:75:1a:a0:82:02:96:3b:cb:6d:35:38:5a:
         b7:ad:47:06:10:4b:15:72:7e:69:74:15:fa:9d:d5:e3:1e:d7:
         f6:c5:f7:f4:7f:e2:97:f0:1d:0e:cb:7f:80:83:05:9a:bb:dd:
         22:2d:22:9a:16:b8:df:45:17:64:b1:91:81:7c:b5:e2:a4:b9:
         cb:95:51:61:9d:87:b1:f1:3c:9d:f4:57:67:5c:ed:81:d7:7c:
         4e:24:88:99:d9:90:9d:e2:d4:9d:9b:68:db:5c:a2:aa:01:39:
         51:06:d5:57:38:b4:7a:09:3e:3e:f7:d8:29:77:9b:5f:99:85:
         3a:a2:6f:44:da:ac:2c:0d:c7:9d:99:0d:9c:ed:ff:bc:70:d9:
         85:00:44:19:a4:a4:57:ab:c6:e8:32:90:c8:80:4f:b2:90:a6:
         97:6a:61:e2:54:b5:f1:e8:e7:07:4a:f5:37:62:6a:78:44:12:
         a8:30:1f:4f:1b:62:da:e8:69:35:0d:e6:ea:00:03:52:ab:f6:
         fe:b8:d4:09:10:e1:a2:0f:8c:6f:c0:f9:d0:35:e7:cc:5f:4b:
         17:ae:f1:57:c5:58:2e:63:d3:8e:61:6f:42:b2:40:4e:2e:2b:
         d1:85:fd:8d:41:3c:19:ba:3c:51:5d:34:a5:9f:39:4f:fb:3f:
         37:6b:7b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:10 2026 by rpki-client