This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File:                     Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier:          iat5xzTh/9BdUaO2OckhKNjzPulhnCR+St6nOBESAxI=
Subject key identifier:   0C:AF:B7:43:3C:E0:A4:33:C4:C3:13:D9:AA:EA:3B:6B:50:F4:25:E6
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer:       /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial:       019C43C6E481B06B522CC5A3FACF7789A0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number:          02AE
Signing time:             Mon 09 Feb 2026 19:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:33 +0000
Files and hashes:         1: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: A/RAqGdJNsdclx/+FB129La96AZZ4DncfQ55uLu2pqc=)
                          2: sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa (hash: SJvy+b4frEQGMy5gxf3VawAH0CiFxMKXegFK+YmGabE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:e4:81:b0:6b:52:2c:c5:a3:fa:cf:77:89:a0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
        Validity
            Not Before: Feb  9 19:00:33 2026 GMT
            Not After : Feb 10 19:00:33 2026 GMT
        Subject: CN=0cafb7433ce0a433c4c313d9aaea3b6b50f425e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:73:91:d4:05:a0:0d:dc:dc:fd:49:d6:a6:
                    2d:19:0d:03:43:80:e5:2c:36:f1:70:c3:57:88:4b:
                    a5:8a:66:46:fc:99:23:c2:1f:ff:18:cd:a5:5e:81:
                    bc:de:10:a3:a3:f3:7d:92:f2:ce:61:6e:7d:88:23:
                    1d:7f:23:fe:c0:43:84:e7:f7:61:ed:11:66:6d:9b:
                    02:11:1f:05:26:d8:1b:03:1c:65:c9:77:06:8c:b2:
                    de:95:23:da:2e:31:f9:20:d5:58:0e:58:85:b4:ca:
                    0b:f1:b2:c1:e6:3c:03:bf:dc:33:07:3f:7a:d4:de:
                    5f:5b:b7:d4:e3:f5:f9:8a:64:64:95:41:d1:6b:3c:
                    59:7f:ec:da:99:31:00:07:42:65:0c:a5:f9:ac:63:
                    ef:6e:5b:d8:82:d6:09:85:b8:bc:50:f6:64:c7:ca:
                    c4:6f:2f:cc:68:52:c3:9c:e2:8a:0c:5b:2a:84:31:
                    c7:b9:33:c8:ee:56:6a:d7:61:ce:2b:73:e3:37:22:
                    ca:5c:92:af:29:7c:7c:0b:b1:16:fe:df:81:85:ba:
                    f8:c0:44:4c:d9:43:e4:ed:32:e4:84:36:91:9a:e3:
                    f3:d9:dc:63:13:94:49:6f:ce:07:20:fc:25:3c:68:
                    32:9d:8e:32:7c:75:58:1a:80:94:f1:b5:9a:37:21:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AF:B7:43:3C:E0:A4:33:C4:C3:13:D9:AA:EA:3B:6B:50:F4:25:E6
            X509v3 Authority Key Identifier:
                keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:cd:ff:3b:2d:6e:1e:47:88:31:0b:ce:53:71:7d:1d:1c:2a:
         ee:af:0a:70:0d:33:61:a1:76:50:97:a9:fa:da:e9:9b:84:77:
         71:7e:68:5a:0d:ee:ff:5a:14:9b:6b:f6:5b:38:9f:77:ff:e5:
         49:36:78:e4:10:63:34:4b:50:c1:c7:91:94:04:29:05:bd:aa:
         be:1d:bb:1d:d4:0e:b7:20:72:47:b9:47:85:9f:ef:72:7b:fa:
         28:94:c6:fc:9f:34:ab:6b:43:21:4b:1e:b2:ab:a3:b3:91:00:
         5d:fd:55:fa:76:96:1d:ed:df:44:c2:a4:ae:7a:78:25:85:1b:
         4a:de:a3:ab:eb:1e:63:31:b3:9d:b9:87:99:92:9b:85:ba:8b:
         ce:bb:7a:09:6e:37:3e:9f:a0:d1:18:cb:c2:98:07:69:73:7c:
         de:ae:70:61:19:47:74:ca:a3:47:db:73:11:8e:eb:b5:f3:4a:
         34:b6:d9:a4:dc:52:c1:ee:8f:ff:6b:fd:ce:a6:e6:5a:38:e7:
         49:f8:4e:c0:84:78:aa:4d:be:51:2e:1f:fa:95:2c:3b:84:20:
         a2:3e:14:a4:5e:cc:33:93:d9:1f:7c:8d:53:18:20:2f:d8:f4:
         60:9c:a8:47:e5:b2:79:3e:d6:9f:c5:35:f5:86:21:e1:9f:78:
         e6:d6:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:34 2026 by rpki-client