This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          RYHB7P7taqZ8BRKZY3jxUMMDFPaHrRb2kcAS+mBfP5g=
Subject key identifier:   CD:08:F6:79:DB:0C:D5:72:83:39:7B:C4:AA:9A:0D:77:C3:47:B1:2B
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       019C43591DC134938394EB67DF8166DA14BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          05B8
Signing time:             Mon 09 Feb 2026 17:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:39 +0000
Files and hashes:         1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: G1YmKYsHZ34DgdsD5Kz6mNc3DMtc+ZhCuMOgyT/twq0=)
                          2: ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa (hash: kikQlykcn+WarGEP2RIaDoLYfnMDSfgY1GHVB0fe+tA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:1d:c1:34:93:83:94:eb:67:df:81:66:da:14:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Feb  9 17:00:39 2026 GMT
            Not After : Feb 10 17:00:39 2026 GMT
        Subject: CN=cd08f679db0cd57283397bc4aa9a0d77c347b12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:b0:4e:df:c4:a7:90:79:2c:86:10:18:d3:
                    e2:6e:b8:ed:e0:bc:2c:51:b3:a6:92:5c:03:23:9b:
                    3d:70:89:b2:ff:9c:bd:c5:c3:1e:6b:70:fa:25:7b:
                    80:d6:9c:a0:1c:24:ef:f9:da:d8:b6:94:d1:5b:92:
                    cd:54:0d:3c:fc:e0:a9:df:07:74:62:df:46:00:cb:
                    d7:ed:94:18:15:31:54:0e:ce:33:47:1e:42:af:81:
                    d2:f8:de:f2:7f:9f:ea:e8:d9:a4:05:96:28:49:4c:
                    b4:4e:74:c5:06:46:38:b7:ca:9a:b5:9c:8c:3f:77:
                    6e:58:77:c1:97:14:84:14:f2:45:f3:e4:a3:38:df:
                    b8:c6:8b:d7:3b:97:b4:49:5d:44:73:3f:32:69:74:
                    08:24:88:37:af:f9:d1:0b:33:ea:9a:01:8b:59:33:
                    27:d7:54:4b:65:99:c2:18:36:38:06:99:76:33:e2:
                    b4:42:03:d5:0c:0a:89:0f:87:f9:c4:51:97:1b:0d:
                    44:aa:85:d0:a7:46:1f:8f:84:92:86:91:1b:83:f5:
                    cd:a4:83:bd:80:9b:e1:5e:aa:f7:1d:29:3a:30:2c:
                    ed:02:ab:38:62:37:40:e2:ba:23:53:85:ae:75:32:
                    25:06:36:03:7c:70:2a:54:6d:5b:99:2c:fd:5e:fc:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:08:F6:79:DB:0C:D5:72:83:39:7B:C4:AA:9A:0D:77:C3:47:B1:2B
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:49:53:7e:06:3c:ec:5b:ff:0f:22:b8:c9:03:06:3e:b7:28:
         6b:80:aa:8a:77:6c:18:45:65:e5:7d:62:6f:70:0d:13:98:c2:
         de:38:14:37:f5:dc:83:c7:76:4a:9f:e5:b4:54:c6:6f:6d:14:
         b6:d5:9e:7c:63:7d:25:fe:52:79:5e:b0:4c:03:21:bf:c8:4d:
         9a:1d:f6:ef:f2:ac:87:78:32:82:e8:7f:37:bf:61:42:0d:eb:
         c3:43:54:eb:be:f9:44:17:c4:d9:73:77:d1:e6:c3:c0:5b:8d:
         84:90:12:94:a0:cd:f1:b3:e8:ba:55:56:df:03:ff:d3:8b:f5:
         48:e6:2d:54:a2:0c:9f:cf:e4:32:75:86:25:19:58:b9:cd:54:
         5e:2b:30:9c:8f:7a:21:44:bc:d6:27:ba:38:d4:ec:05:6c:e3:
         1b:30:4c:84:1d:89:71:1c:37:20:9f:f6:65:ae:1a:9a:6c:ae:
         ea:a3:d1:2f:7c:4c:ee:59:9f:b4:4d:e6:5d:91:9f:53:78:84:
         97:75:59:1a:b6:83:72:13:38:b2:26:cd:54:ae:33:a9:05:7c:
         b1:cf:6a:29:07:d7:88:37:85:82:c4:51:de:0b:76:51:eb:7c:
         78:31:38:ad:e7:37:b7:a3:dc:25:22:aa:17:b5:a1:fd:3d:fd:
         48:0d:53:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWR3BNJODlOtn34Fm2hS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw
MDkwYWYwHhcNMjYwMjA5MTcwMDM5WhcNMjYwMjEwMTcwMDM5WjAzMTEwLwYDVQQD
EyhjZDA4ZjY3OWRiMGNkNTcyODMzOTdiYzRhYTlhMGQ3N2MzNDdiMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA652wTt/Ep5B5LIYQGNPibrjt4Lws
UbOmklwDI5s9cImy/5y9xcMea3D6JXuA1pygHCTv+drYtpTRW5LNVA08/OCp3wd0
Yt9GAMvX7ZQYFTFUDs4zRx5Cr4HS+N7yf5/q6NmkBZYoSUy0TnTFBkY4t8qatZyM
P3duWHfBlxSEFPJF8+SjON+4xovXO5e0SV1Ecz8yaXQIJIg3r/nRCzPqmgGLWTMn
11RLZZnCGDY4Bpl2M+K0QgPVDAqJD4f5xFGXGw1EqoXQp0Yfj4SShpEbg/XNpIO9
gJvhXqr3HSk6MCztAqs4YjdA4rojU4WudTIlBjYDfHAqVG1bmSz9XvwibwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0I9nnbDNVygzl7xKqaDXfDR7ErMB8GA1UdIwQY
MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt
NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj
LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUlTfgY8
7Fv/DyK4yQMGPrcoa4CqindsGEVl5X1ib3ANE5jC3jgUN/Xcg8d2Sp/ltFTGb20U
ttWefGN9Jf5SeV6wTAMhv8hNmh327/Ksh3gyguh/N79hQg3rw0NU6775RBfE2XN3
0ebDwFuNhJASlKDN8bPoulVW3wP/04v1SOYtVKIMn8/kMnWGJRlYuc1UXiswnI96
IUS81ie6ONTsBWzjGzBMhB2JcRw3IJ/2Za4ammyu6qPRL3xM7lmftE3mXZGfU3iE
l3VZGraDchM4sibNVK4zqQV8sc9qKQfXiDeFgsRR3gt2Uet8eDE4rec3t6PcJSKq
F7Wh/T39SA1Tug==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:37 2026 by rpki-client