This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File:                     YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier:          uezJpeLQOcHgMnt57HsDJs59N9VnSOqJkVtaM6hLwy4=
Subject key identifier:   B1:4C:F5:2C:C9:B3:12:A1:A4:CB:AC:14:B2:89:E0:76:F9:80:DA:10
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer:       /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial:       019C41A23196F7728B7FAAC3D0CF10A7353B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number:          146E
Signing time:             Mon 09 Feb 2026 09:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:14 +0000
Files and hashes:         1: 3IMyxyNm6r93DqPE2aE52SXbIuI.roa (hash: QbQusr/PsSc9ZEq6dT5CeLnT4svv4+NWJleDs2gqqNo=)
                          2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: PIJ5mjJVJcnawzjgj50DXGiXtyx9tvHp1+tzxNIDheI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:31:96:f7:72:8b:7f:aa:c3:d0:cf:10:a7:35:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
        Validity
            Not Before: Feb  9 09:01:14 2026 GMT
            Not After : Feb 10 09:01:14 2026 GMT
        Subject: CN=b14cf52cc9b312a1a4cbac14b289e076f980da10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:f7:49:47:d2:48:57:54:1d:ba:0f:94:11:
                    a9:24:e9:ac:84:ed:70:ee:bc:71:da:ec:78:51:8e:
                    4b:fc:1a:b8:b7:da:10:64:c8:8d:82:33:a0:ef:e2:
                    87:9d:f1:d4:9d:68:9f:ac:9a:20:55:2c:ec:c5:5a:
                    3f:c0:5f:46:99:1c:fb:ac:a9:61:e2:ba:2c:84:2e:
                    b8:37:db:57:2d:09:1e:24:f3:29:1c:8f:f9:22:ac:
                    c1:8a:88:e8:ae:b0:58:e1:8f:91:ab:72:16:6d:1d:
                    b1:07:ef:96:de:69:64:64:a1:52:d7:ab:2c:8b:a1:
                    7e:c7:cf:7a:48:bb:67:a0:e7:09:44:47:42:d1:70:
                    4a:64:b1:7a:a8:09:43:61:b9:12:f7:72:c8:75:c6:
                    2d:b1:48:f1:9b:27:85:f2:e0:fb:e1:30:ef:31:de:
                    c9:aa:a7:c8:76:ec:61:1a:4b:f3:fa:66:79:a6:95:
                    b6:46:72:c0:17:95:73:6c:4c:56:93:68:8f:ea:e7:
                    63:fb:ba:d8:40:89:0a:48:6a:0d:e5:54:f9:3e:9d:
                    2d:ea:03:95:1d:61:e8:ff:20:64:09:bf:b8:ae:1f:
                    00:24:c6:1e:fd:f6:a2:e2:e4:84:0f:4f:e4:d0:f5:
                    06:ba:d8:1c:ed:8d:e6:e3:95:d3:90:3d:a0:ca:fc:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:F5:2C:C9:B3:12:A1:A4:CB:AC:14:B2:89:E0:76:F9:80:DA:10
            X509v3 Authority Key Identifier:
                keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ba:6c:2d:b3:c7:25:f6:ea:b3:01:c2:30:63:d6:d6:d1:9b:
         28:e8:83:27:44:ca:75:04:e6:10:04:98:41:29:c3:57:7f:e3:
         c6:0f:55:22:a0:4d:4e:61:b0:f1:f1:c6:eb:42:3f:5c:b3:b3:
         ef:e7:e1:59:fe:49:9d:53:fc:d9:04:85:9a:ed:23:05:43:93:
         51:ec:d6:63:c8:78:5a:7b:f6:d3:a6:39:07:ac:bd:0c:1e:1d:
         3d:ea:e5:4a:70:fb:d2:c0:8f:c9:4c:bc:43:e2:71:1d:97:db:
         bb:2a:14:92:ac:ef:af:9a:de:c5:76:6b:b2:29:3d:0e:ea:6f:
         84:11:b2:01:f5:71:a4:42:2a:76:a1:fd:10:7b:90:c4:76:68:
         3e:62:82:4c:3d:aa:95:ae:a9:13:34:aa:03:dc:91:0c:31:32:
         95:76:ef:ad:dd:10:ea:bd:98:ba:57:7d:ef:09:f6:60:c6:bd:
         32:84:5e:94:e2:3d:aa:c4:5b:5d:93:ec:7f:6f:1c:2f:e2:ee:
         bb:ab:74:30:aa:9d:ac:7e:0f:95:17:08:ee:0d:6a:c5:fe:ad:
         a1:64:2a:d0:51:02:d8:4f:42:a7:d8:4c:ce:23:4d:7c:3c:23:
         8e:84:f3:df:fa:4f:9e:77:61:61:0e:c0:e1:2d:9d:ba:13:54:
         8e:90:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:41 2026 by rpki-client