This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File:                     yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier:          5/i136/QCo4xS8R5Zmy95VJ4hN6sqaCPtDuFOa4VB4w=
Subject key identifier:   BC:88:42:6D:96:C1:52:C6:B1:5C:B4:7F:9C:17:02:15:09:2B:7A:48
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer:       /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial:       019C427E053CD1220863734F09FCAC193A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number:          1445
Signing time:             Mon 09 Feb 2026 13:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:20 +0000
Files and hashes:         1: 9KLhgHdDNsZBBUFEIyheUzLt-c0.roa (hash: c+1HpuSdzLNeAztTtHz4t/e6e0WWME4OFHOVd3MSwEs=)
                          2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: 527KeU5b0Itw2LexBEEYEK4oliE40ZBfRth/VsUBYQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:05:3c:d1:22:08:63:73:4f:09:fc:ac:19:3a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
        Validity
            Not Before: Feb  9 13:01:20 2026 GMT
            Not After : Feb 10 13:01:20 2026 GMT
        Subject: CN=bc88426d96c152c6b15cb47f9c170215092b7a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:35:ff:23:92:6d:77:d2:e2:95:6b:fe:57:
                    98:cd:72:e5:4a:fe:b9:b0:c4:f6:bf:6d:fc:ca:e5:
                    68:90:1c:99:e1:6a:69:0e:01:aa:91:81:cb:78:20:
                    d8:74:fe:1d:00:ce:9c:ae:d9:3f:38:69:a3:b5:e3:
                    59:1f:a3:87:ff:e2:6b:ac:d6:86:83:4f:73:10:86:
                    8d:40:28:8d:72:19:fe:3f:a5:4f:92:be:2a:06:a3:
                    19:4f:95:a1:97:8c:85:0f:a5:24:57:1e:9f:fb:6e:
                    76:e6:08:db:24:69:3c:d4:7a:7d:07:4f:30:5f:61:
                    e1:54:ce:f6:4b:70:b2:7e:8b:c8:80:60:b8:29:47:
                    7d:18:14:7a:5c:61:0b:0f:69:bb:93:07:39:c5:f2:
                    f4:3c:1d:a9:f3:72:81:ad:67:88:a1:61:59:6a:44:
                    08:73:0d:31:b4:e9:a3:0a:27:37:45:ca:e6:b9:f9:
                    47:76:ec:56:b4:67:93:ae:e2:20:05:37:8a:1c:65:
                    62:e7:af:c9:ec:9d:cc:a2:04:4a:43:d6:b2:0a:e9:
                    a4:0d:1d:65:e2:e2:32:fb:1f:28:01:ee:3e:5b:c5:
                    cf:30:e4:96:32:ce:e1:25:bd:07:e4:ba:7d:dd:24:
                    67:85:f4:34:93:de:29:5a:cd:84:fb:06:41:3b:6f:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:42:6D:96:C1:52:C6:B1:5C:B4:7F:9C:17:02:15:09:2B:7A:48
            X509v3 Authority Key Identifier:
                keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:41:a0:d6:ff:b7:b4:f7:b3:7e:11:7a:6c:ba:e4:26:83:
         35:33:23:e6:8c:de:9e:5f:6b:01:7d:eb:92:6a:33:a9:43:90:
         82:3a:1d:ed:dd:d9:7c:8a:86:93:c0:db:3b:76:af:3e:4a:ff:
         56:f4:59:98:2a:2a:d0:50:62:15:52:59:b1:bd:33:7b:f5:b2:
         f8:15:36:85:41:d2:0e:a2:73:0c:9a:3e:5e:77:df:ef:1e:5c:
         da:84:60:a6:8c:93:63:a9:86:42:50:24:9b:0b:ab:e5:bd:79:
         07:e0:bd:ff:55:74:22:66:9b:41:f8:17:83:30:8e:66:3b:df:
         a6:a7:4c:af:e0:d5:92:bc:2d:75:98:77:d7:20:0f:93:56:cf:
         d4:80:f3:2b:3e:13:26:e7:e3:9c:8c:d6:78:1c:0f:04:12:9e:
         f3:b3:c6:6c:2d:04:8b:e9:30:15:7e:c1:ea:45:fb:5a:4a:cc:
         24:43:e8:a6:e9:90:c0:2e:19:37:8b:6e:f4:48:df:53:50:ad:
         0e:80:b8:d8:88:3d:10:09:2c:d8:49:4c:75:fe:93:96:dc:b0:
         a9:8a:b4:6f:c6:0d:01:61:bd:70:d3:0e:46:78:55:6c:a2:2b:
         e7:48:d4:34:8c:fb:55:2b:45:74:12:03:cd:b9:43:02:a3:cf:
         e7:df:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:39 2026 by rpki-client