This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File:                     Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier:          ZRnikujJRft93CbzZG5A4pd8gMDLQ8dYD21t5aj0lJ0=
Subject key identifier:   B6:53:94:C2:0D:AB:5E:7E:CD:5A:E9:E8:1F:97:F7:D8:85:3C:0A:B0
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer:       /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial:       019C427E02D00929D9E1EEF1F691E5CF6EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 13:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:20 +0000
Files and hashes:         1: 1-iaQVGIRiX5iu1fv45oI-_0UAMs.roa (hash: UJsZfJvQEHGoE3GSbiyNR/EqoxSd0S1YeBtQv8m62RM=)
                          2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: 5akN8/MWLPLN2y4aDmuRbqxCb3rowuEJOTMAO0ViiFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:02:d0:09:29:d9:e1:ee:f1:f6:91:e5:cf:6e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
        Validity
            Not Before: Feb  9 13:01:20 2026 GMT
            Not After : Feb 10 13:01:20 2026 GMT
        Subject: CN=b65394c20dab5e7ecd5ae9e81f97f7d8853c0ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:e0:78:f0:05:9f:f9:ef:d5:8c:d7:e5:fb:
                    03:03:70:13:e6:3c:39:c5:28:ee:00:ec:e8:aa:e0:
                    e3:62:97:59:e9:5d:36:10:aa:b1:d7:15:0d:0d:3b:
                    12:5e:24:4b:6b:ad:f4:6e:26:a4:af:4d:03:c8:8e:
                    f6:78:e3:bc:51:99:66:ec:86:f6:f7:99:c7:86:db:
                    d4:55:6c:cf:50:c6:b3:90:1f:76:04:86:d2:db:d3:
                    10:26:fb:c8:cc:25:81:f4:98:9b:d5:f2:52:ad:6f:
                    d2:bd:1a:89:50:92:8d:48:1f:b0:0b:7e:b8:8e:c9:
                    e3:9b:75:61:2c:aa:05:73:62:e1:60:ed:81:53:ed:
                    92:27:9e:fe:8f:e9:de:6a:1a:98:9b:84:54:64:e1:
                    84:09:24:89:26:fe:8e:35:92:5a:78:d2:94:07:66:
                    a8:40:27:7d:0b:81:54:80:08:ce:03:e1:08:fe:ea:
                    72:ab:e8:8c:2b:9a:e8:34:ed:d1:67:aa:4d:46:ca:
                    93:59:3b:4d:af:f2:f1:56:41:d3:e2:66:e9:03:e0:
                    24:da:a3:0d:1b:b7:6e:68:20:b2:6e:8a:f8:6b:4f:
                    4c:c0:13:2b:88:12:ec:80:18:08:0a:44:7d:7a:4c:
                    31:fb:4d:0d:7c:51:c9:65:2d:c7:a7:e5:94:a0:35:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:94:C2:0D:AB:5E:7E:CD:5A:E9:E8:1F:97:F7:D8:85:3C:0A:B0
            X509v3 Authority Key Identifier:
                keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:97:ec:84:d1:84:22:3b:a6:25:ab:b4:7f:73:f9:65:0f:be:
         7b:6c:e8:88:f7:bd:a9:47:b6:2e:2e:18:a1:8c:56:a9:52:2b:
         66:9f:9e:32:32:13:e6:77:35:3e:71:2b:2f:6e:c3:47:57:6b:
         37:48:3a:cc:7d:64:49:47:5e:a4:ce:8e:78:af:78:87:8e:78:
         a2:62:bc:3e:1d:8f:ce:bf:08:4b:76:69:12:c0:10:31:ad:a4:
         dd:03:9e:97:a4:9d:07:8c:04:3d:99:82:10:ed:10:35:9d:c4:
         00:7b:1f:11:bb:1c:ee:e6:cf:37:fe:bb:5f:9f:59:0c:cd:32:
         22:23:a7:43:96:25:0e:32:40:e2:c0:3c:1c:d4:35:59:ff:85:
         4d:6c:8b:e4:96:d7:43:8c:2b:70:b7:25:ec:c9:c3:1f:78:66:
         1c:64:8f:ad:f4:5c:1b:e9:16:33:ce:8f:a7:45:98:65:b9:e5:
         2f:06:ad:b7:7d:8e:3c:00:e6:f6:a8:76:e2:7f:f4:9d:a4:ad:
         c6:0a:82:b0:d9:77:bb:4b:a2:6c:f9:9b:d5:72:55:03:a0:49:
         b8:43:70:91:e0:95:54:29:08:47:4a:28:dd:5f:51:b0:3b:26:
         30:a3:9c:ec:2a:b5:69:a1:d3:d4:87:cd:65:f7:30:bf:82:ca:
         d8:84:fa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:02 2026 by rpki-client