This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File:                     Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier:          7bLMEVYeKergKKhS9IRTIseDjsHJ12zuXQHl6BEHKM4=
Subject key identifier:   F5:A1:BD:25:14:87:4F:8A:33:23:BC:FD:70:B6:91:AA:83:22:E0:97
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer:       /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial:       019C40FCB34E5C00BC3A0F6CF71C57D6AE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number:          1096
Signing time:             Mon 09 Feb 2026 06:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:28 +0000
Files and hashes:         1: Xxs4ldV2enfWsLfgfxEllPDWnWo.roa (hash: 8Cn8Jb6BuKTBrGl7OMfhVUGxRn/9grjWQRc7jCMSinQ=)
                          2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: pLV5UEivrWlpF4rjn2pLopb2twy8d5uUj0tMVduz63c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:b3:4e:5c:00:bc:3a:0f:6c:f7:1c:57:d6:ae:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
        Validity
            Not Before: Feb  9 06:00:28 2026 GMT
            Not After : Feb 10 06:00:28 2026 GMT
        Subject: CN=f5a1bd2514874f8a3323bcfd70b691aa8322e097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:0e:80:86:9f:d7:90:a7:52:33:5d:52:c7:
                    81:08:32:e2:d6:68:95:7b:c9:07:47:d8:91:f8:b0:
                    d7:3a:9a:ca:2f:31:af:cd:4d:30:79:5a:23:ae:2c:
                    17:8f:8a:ca:79:6d:f6:a1:7b:3a:bf:d1:cc:fc:c2:
                    ba:74:be:da:67:e7:11:dd:45:4a:41:1b:a4:09:b9:
                    0b:af:9d:7c:32:20:27:04:75:ef:59:dd:d5:ec:d3:
                    a2:41:a0:ee:9f:08:fe:8e:3e:3d:a3:cf:f5:ab:3b:
                    75:89:5e:ff:23:c0:a2:82:96:c5:41:4b:0b:30:4b:
                    00:2b:c4:98:62:f3:49:50:16:91:04:77:b5:c9:63:
                    13:7a:ab:8a:a4:08:7d:91:03:bc:01:0f:2b:bf:31:
                    ac:a6:be:72:40:43:e3:bc:b0:6e:b6:b8:0f:43:5f:
                    b8:05:ca:4d:a8:b9:03:b8:8b:9b:92:f3:6a:2d:58:
                    4d:2d:5a:25:e3:54:85:79:0d:a5:4f:8f:a7:76:96:
                    b8:ee:a6:e7:ef:dc:f7:ee:2f:96:21:4e:51:cb:55:
                    6b:59:53:a3:ff:d5:ff:4f:2d:a9:c8:3e:99:3a:f3:
                    44:0b:22:51:83:e1:4b:bf:fd:74:ed:d6:50:6e:12:
                    1c:e1:f4:9d:4d:e9:6c:e1:74:b6:a9:10:03:d4:71:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A1:BD:25:14:87:4F:8A:33:23:BC:FD:70:B6:91:AA:83:22:E0:97
            X509v3 Authority Key Identifier:
                keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:84:96:92:60:7a:da:6d:31:5d:87:54:17:6a:16:00:9f:6d:
         85:fb:d2:2a:27:ad:fa:4f:0a:3c:8e:bd:2e:b2:0c:ca:50:5c:
         0c:31:1c:98:21:52:ba:bb:f1:2e:24:fc:93:4c:43:da:22:e7:
         1b:f3:90:9d:ce:ad:3d:a3:02:57:b0:ae:57:16:6f:f6:94:6a:
         d9:f4:35:83:d7:ee:35:b3:ba:a8:ff:7a:5e:a4:80:3a:3a:32:
         0c:a1:70:9f:ee:25:1c:14:e8:2e:15:76:89:36:a7:54:02:48:
         69:bf:56:4e:07:12:b8:99:a4:21:92:69:77:81:2a:0f:ee:97:
         76:4f:3c:4f:92:9f:34:fa:37:c7:8e:98:53:a1:a0:3e:4c:af:
         4b:dc:1c:00:d4:f5:2e:3d:55:3b:7b:d0:dd:e5:e6:0e:7e:62:
         ba:1b:68:ac:52:0c:18:45:dd:c9:2a:70:9e:8b:f3:29:ba:2f:
         5d:e2:7d:44:22:d7:1c:03:c3:d3:aa:c8:93:e0:c6:4f:8a:9d:
         b9:b4:6e:5c:61:fa:da:78:fd:4b:07:99:5a:e1:94:74:82:d5:
         15:0e:d4:53:bb:ae:d9:de:4b:12:23:ac:34:cf:5b:1d:c8:8b:
         01:66:f3:e3:25:55:67:a0:7a:d5:d5:26:8d:8a:bb:d6:f4:0d:
         18:fa:9f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:59 2026 by rpki-client