This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
File:                     YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json)
Hash identifier:          by5n38X2BliHDcWHeiJ5DmEnO9DcwYyZ9N4zdjeskxA=
Subject key identifier:   1C:0C:8E:2F:85:CB:AB:6F:BA:92:89:C0:C7:C9:7B:5D:4D:CF:0E:27
Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59
Certificate issuer:       /CN=6007365e0cf30ca8fce98c62660d186a979bc959
Certificate serial:       019C41A1E9175727976A183545E259E9C8B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
Manifest number:          0B6D
Signing time:             Mon 09 Feb 2026 09:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:55 +0000
Files and hashes:         1: VhcZAOMO7N09LPQIiVy-ZSyhJt8.roa (hash: YOyQI4AeCxujnK36EwQ68GRZtvK8FNB5/s4x1q9BUjk=)
                          2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: 1RWV/ZzxQc/Knx5DiSiLKqTbnLSTlHMD/89qGsgOk7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:e9:17:57:27:97:6a:18:35:45:e2:59:e9:c8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959
        Validity
            Not Before: Feb  9 09:00:55 2026 GMT
            Not After : Feb 10 09:00:55 2026 GMT
        Subject: CN=1c0c8e2f85cbab6fba9289c0c7c97b5d4dcf0e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:0a:7f:18:d6:62:c2:dc:ad:9f:2a:6c:65:
                    b3:ce:ed:c2:dc:30:2e:49:fe:fe:a7:42:39:21:bd:
                    f3:d8:96:7c:ff:a2:4e:c0:21:5c:28:bd:b5:b0:85:
                    4c:5d:3f:b6:1d:97:61:96:3a:60:dc:0c:c1:a1:86:
                    27:1f:54:56:ef:84:09:94:19:7b:e7:b6:12:ed:74:
                    13:df:4a:09:77:d6:ce:51:dc:e4:6f:53:66:2b:d5:
                    6a:7d:4a:4d:2c:aa:4c:00:23:47:0b:c4:16:90:24:
                    91:34:6c:90:5f:17:ea:ee:cd:1a:a2:18:5d:2c:31:
                    c1:cc:81:00:b5:c4:b2:84:41:f8:7f:72:35:de:43:
                    b5:21:56:9b:84:93:e9:8b:b3:66:65:ee:3b:60:7b:
                    2b:64:e4:ec:8e:4e:45:97:16:5b:5c:28:56:a2:46:
                    f2:9e:11:39:82:1a:e8:0e:d0:1a:a6:62:c3:28:d5:
                    14:ed:46:97:04:f0:73:4e:2b:38:9d:a3:57:4c:ae:
                    77:46:4e:da:ee:1b:c1:38:27:40:eb:a5:76:b6:19:
                    57:ab:d3:44:9e:bc:85:41:82:bf:74:71:a7:1b:84:
                    ad:09:2b:7e:92:26:61:b8:68:d7:6a:a5:d5:2c:46:
                    d9:7d:dc:f2:1e:cb:54:ea:b0:86:79:90:f6:02:3b:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0C:8E:2F:85:CB:AB:6F:BA:92:89:C0:C7:C9:7B:5D:4D:CF:0E:27
            X509v3 Authority Key Identifier:
                keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:28:8f:8d:e9:f8:ed:f2:ed:56:40:64:df:84:f7:56:8b:d8:
         48:9a:f7:a4:e6:bb:a4:01:78:ec:9e:f3:42:30:95:63:3b:93:
         56:2c:15:e8:30:3a:9d:4f:a7:47:d6:44:27:e5:45:30:7e:8c:
         71:7a:01:57:4e:55:0b:fc:9f:2f:49:a6:06:0d:7a:4d:84:71:
         ad:f5:08:74:a6:d9:bc:67:e8:03:29:83:8e:47:70:3a:e3:d2:
         30:3e:ea:ca:44:bf:d2:e2:56:22:d3:7f:46:c7:23:5a:01:e8:
         ea:26:b4:c2:8d:34:e1:c3:ba:c1:d2:eb:26:22:05:0c:c6:38:
         79:bf:f8:a8:09:a8:94:2a:06:7c:96:69:cd:7d:19:1f:54:11:
         fc:ee:d8:fe:d4:53:53:eb:42:4c:7c:08:27:16:4d:6d:26:d9:
         40:ff:fe:96:ac:bf:b6:a6:8d:3b:1a:74:c8:05:c0:24:a3:07:
         46:c9:f9:bb:f0:e6:a2:1c:27:07:18:3d:d6:aa:fd:5a:86:96:
         d9:e4:c1:4e:b6:1e:fa:9a:5d:0c:11:67:f0:8d:cf:1f:24:2c:
         e7:e8:8b:ac:be:7a:91:b7:98:92:c4:c4:81:ee:82:d1:da:2d:
         b2:26:59:5f:ce:49:89:0c:8b:f4:d5:0d:be:67:93:0b:64:29:
         e3:d7:61:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoekXVyeXahg1ReJZ6ciyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDczNjVlMGNmMzBjYThmY2U5OGM2MjY2MGQxODZhOTc5
YmM5NTkwHhcNMjYwMjA5MDkwMDU1WhcNMjYwMjEwMDkwMDU1WjAzMTEwLwYDVQQD
EygxYzBjOGUyZjg1Y2JhYjZmYmE5Mjg5YzBjN2M5N2I1ZDRkY2YwZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAcKfxjWYsLcrZ8qbGWzzu3C3DAu
Sf7+p0I5Ib3z2JZ8/6JOwCFcKL21sIVMXT+2HZdhljpg3AzBoYYnH1RW74QJlBl7
57YS7XQT30oJd9bOUdzkb1NmK9VqfUpNLKpMACNHC8QWkCSRNGyQXxfq7s0aohhd
LDHBzIEAtcSyhEH4f3I13kO1IVabhJPpi7NmZe47YHsrZOTsjk5FlxZbXChWokby
nhE5ghroDtAapmLDKNUU7UaXBPBzTis4naNXTK53Rk7a7hvBOCdA66V2thlXq9NE
nryFQYK/dHGnG4StCSt+kiZhuGjXaqXVLEbZfdzyHstU6rCGeZD2AjuVmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwMji+Fy6tvupKJwMfJe11Nzw4nMB8GA1UdIwQY
MBaAFGAHNl4M8wyo/OmMYmYNGGqXm8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTIt
Yjc1YjQ5MDQ5ODJmLzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTItYjc1YjQ5MDQ5ODJm
LzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSiPjen4
7fLtVkBk34T3VovYSJr3pOa7pAF47J7zQjCVYzuTViwV6DA6nU+nR9ZEJ+VFMH6M
cXoBV05VC/yfL0mmBg16TYRxrfUIdKbZvGfoAymDjkdwOuPSMD7qykS/0uJWItN/
RscjWgHo6ia0wo004cO6wdLrJiIFDMY4eb/4qAmolCoGfJZpzX0ZH1QR/O7Y/tRT
U+tCTHwIJxZNbSbZQP/+lqy/tqaNOxp0yAXAJKMHRsn5u/DmohwnBxg91qr9WoaW
2eTBTrYe+ppdDBFn8I3PHyQs5+iLrL56kbeYksTEge6C0dotsiZZX85JiQyL9NUN
vmeTC2Qp49dheA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:37 2026 by rpki-client