This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          4bQKwBTDLS6balb4gJmIaIFzmJ8jvZPwnxmW1sgdQCA=
Subject key identifier:   24:9F:07:72:3F:A9:CF:10:3E:99:B2:FA:9D:F4:A0:AE:16:D5:AE:2C
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       019C42B404F6DAC20CCA338B736A48A37627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          10BE
Signing time:             Mon 09 Feb 2026 14:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:19 +0000
Files and hashes:         1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
                          2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: 18ypEi2zulqZYAMzHiK6CnMez0xctndjgd7AjPTreUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:04:f6:da:c2:0c:ca:33:8b:73:6a:48:a3:76:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Feb  9 14:00:19 2026 GMT
            Not After : Feb 10 14:00:19 2026 GMT
        Subject: CN=249f07723fa9cf103e99b2fa9df4a0ae16d5ae2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:b6:ae:94:5b:13:fe:b5:e7:04:d3:1a:9e:
                    03:f7:00:73:69:32:5c:90:95:ae:5d:b4:44:fd:a8:
                    a1:e3:df:47:43:65:07:7d:3a:34:f5:f6:54:7d:5a:
                    d5:94:15:81:f7:52:ae:ee:08:1f:5c:19:28:7e:59:
                    21:70:c5:00:91:01:43:a6:36:eb:b9:bd:a8:16:8c:
                    b4:ea:c4:19:5a:6b:fa:f3:af:91:a8:37:d0:81:db:
                    0d:4e:85:45:a3:01:8f:d4:a6:b7:3c:df:5a:9d:4f:
                    12:8d:a8:14:8a:d5:0e:f1:69:30:ff:23:83:06:54:
                    26:3c:5c:44:9e:d4:df:ac:29:1d:20:9c:9d:c3:7e:
                    5c:fa:a1:9b:4b:eb:97:de:90:ef:4d:54:8c:a9:57:
                    18:06:d1:84:00:2a:ba:e4:2c:3a:55:67:a1:09:d8:
                    ed:58:cb:69:2d:56:bd:7a:f1:a1:3c:34:50:fd:13:
                    2b:be:f9:03:40:6d:83:07:a2:e3:9e:fb:19:62:8f:
                    32:be:4e:6f:f6:20:1d:a9:d2:24:15:eb:12:97:92:
                    81:e9:4e:10:da:2c:85:75:69:39:34:c6:4b:4a:ad:
                    6b:67:04:24:2c:0d:b9:71:ab:8b:c3:85:c0:2d:e5:
                    ee:3e:e7:61:da:45:53:9f:bd:9a:2a:e2:12:68:4a:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9F:07:72:3F:A9:CF:10:3E:99:B2:FA:9D:F4:A0:AE:16:D5:AE:2C
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:6f:31:e4:ae:6c:73:e3:f3:b8:3e:16:8d:e0:09:d0:94:
         72:fb:6e:85:28:63:a0:01:60:2f:43:83:10:1a:5c:08:1a:9f:
         cd:b4:98:5f:82:5a:0e:d2:70:02:c4:22:52:38:a5:c1:10:de:
         56:0c:04:40:9f:23:3f:28:3d:24:cf:ec:bd:fb:1e:c9:f0:99:
         ea:a9:45:aa:e0:a2:94:13:bf:25:fe:b7:6b:8e:65:92:c4:e6:
         54:b1:60:b3:c7:fc:9e:d5:cb:90:1f:f2:8a:65:f3:38:96:08:
         1b:1b:c8:39:ea:00:dc:68:6b:f7:cc:10:05:de:76:11:da:4e:
         e3:dc:e4:e4:86:3f:09:03:e4:5d:e4:2f:be:48:25:1b:b9:07:
         14:2e:70:ef:cd:77:3f:11:bd:f0:3d:fd:10:07:af:de:1f:b0:
         f0:c5:11:a8:02:ee:23:78:da:70:7c:7e:a3:6c:51:c3:eb:39:
         87:52:49:51:02:0a:a5:12:63:6d:d9:2f:60:78:f5:0f:01:8d:
         18:0d:d6:ae:9f:1e:1e:00:eb:43:04:5c:e9:65:36:4b:e9:c4:
         7b:6d:6c:82:7e:da:a4:a9:63:b6:f8:79:ca:25:af:27:a1:e0:
         b4:e5:7d:6a:3b:8e:3f:8c:c0:1c:31:6b:40:fd:59:10:29:3c:
         75:6c:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:38 2026 by rpki-client