This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.mft
File:                     ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.mft (raw, json)
Hash identifier:          4aSKE/76g0n8hRPd2ndeH/uUFB4gHynUjdmZpIZKsC4=
Subject key identifier:   FB:2D:7F:AB:A2:75:79:B3:73:43:C7:D6:C4:C3:0D:AC:2C:6C:7C:92
Authority key identifier: CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88
Certificate issuer:       /CN=ca434d399d93a19d8a8108456c5575096c2ae588
Certificate serial:       019C4246DF236B89BDD1B12B3F033A841186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.mft
Manifest number:          0831
Signing time:             Mon 09 Feb 2026 12:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:06 +0000
Files and hashes:         1: G-foIY1cv2s-pbmJJsngENBWLwM.roa (hash: /sje/fJ/oYoi2zdAPSdZ79XrD4oozBnY/U0gHu3a9bM=)
                          2: ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.crl (hash: Rd1h6kU3ibZebbnT69OcL5Qd3OeUnfWr648U3opONG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:df:23:6b:89:bd:d1:b1:2b:3f:03:3a:84:11:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca434d399d93a19d8a8108456c5575096c2ae588
        Validity
            Not Before: Feb  9 12:01:06 2026 GMT
            Not After : Feb 10 12:01:06 2026 GMT
        Subject: CN=fb2d7faba27579b37343c7d6c4c30dac2c6c7c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:80:d3:b6:cc:00:a1:88:52:2b:7c:3a:99:
                    ef:4c:21:4e:64:55:46:53:f7:57:bb:38:99:fe:20:
                    60:3b:88:fa:25:ff:fa:55:45:39:b2:43:e9:81:09:
                    d1:4f:08:c2:75:99:b7:06:a6:16:ce:b9:22:88:e8:
                    27:80:82:32:22:8c:4d:cb:7a:c8:c6:cc:ac:46:f4:
                    c8:50:ac:ad:a4:ee:ba:3b:26:07:48:df:cf:11:07:
                    6d:4a:14:35:7b:ee:ab:08:34:59:63:55:cc:e7:fc:
                    9f:e9:59:c0:15:ea:9a:5c:22:7e:4e:54:76:82:3e:
                    3a:0f:5d:12:d2:0c:e2:c0:bf:49:d3:7e:a9:d1:12:
                    33:7c:7b:cb:09:3b:3c:13:d5:01:67:78:30:0c:1a:
                    cd:eb:c0:1e:8d:10:e1:3e:35:5d:5a:cb:7c:de:ad:
                    81:66:08:1b:66:79:0b:a8:9f:38:51:d1:fd:fc:cd:
                    8d:62:79:2a:35:ec:0d:35:3f:75:1d:ec:34:5f:8c:
                    68:a8:a4:26:00:87:f1:65:65:47:e9:8e:b7:15:db:
                    ea:cc:fb:ef:2b:76:f4:82:37:6d:2f:11:60:b3:d2:
                    8a:b1:24:ab:07:9b:5a:0e:13:ee:f2:35:48:70:20:
                    48:d7:e2:34:c7:ec:ca:55:78:28:c5:ee:0d:b7:43:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:7F:AB:A2:75:79:B3:73:43:C7:D6:C4:C3:0D:AC:2C:6C:7C:92
            X509v3 Authority Key Identifier:
                keyid:CA:43:4D:39:9D:93:A1:9D:8A:81:08:45:6C:55:75:09:6C:2A:E5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6aec6a-3683-405a-9e61-db2368271913/1/ykNNOZ2ToZ2KgQhFbFV1CWwq5Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ce:b9:22:58:67:71:da:db:cb:db:bc:f7:fe:20:2f:20:a6:
         2e:5e:d9:c7:c1:5d:1c:8e:96:e9:73:53:10:3e:8b:4c:bd:2b:
         42:75:41:e4:94:90:e7:0b:53:2d:49:cb:1a:5d:b8:91:37:df:
         ad:c6:54:e8:57:84:a3:15:93:b7:96:f0:21:a1:99:d0:23:0b:
         21:4c:c5:ec:22:24:0c:d8:a9:b5:b8:fb:4c:93:21:9c:0e:39:
         c5:de:e8:f3:94:68:90:bb:97:1a:20:c1:9c:d0:6d:ba:66:5f:
         86:36:56:e8:99:3c:ab:6f:65:f9:7d:30:77:61:32:d8:b4:4c:
         7a:8b:0e:a0:28:f0:a1:dd:c6:56:d5:1a:a7:b8:c3:a8:f4:d6:
         75:f3:96:0d:e6:bf:2c:ca:1e:10:2b:f5:51:a6:65:4e:66:51:
         d7:2f:5b:92:c0:5e:d5:cf:7a:5a:95:b3:b1:68:59:a3:a6:bb:
         7c:24:94:35:22:73:7a:6e:42:c4:87:82:26:2a:8a:f4:dd:f5:
         b6:14:96:65:7d:7c:93:89:2f:63:71:e9:09:5b:a2:40:93:bd:
         b2:b4:b6:be:20:33:ec:cf:88:54:08:1a:b7:df:b5:88:5e:63:
         ac:67:2c:02:3e:eb:cd:52:63:bb:d9:ff:c0:2f:6f:41:eb:db:
         1f:23:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:21 2026 by rpki-client