This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          xlDuNht3aNtPF3nOyTOBFGcm+UsqM+kqskkdVQTkjjQ=
Subject key identifier:   60:68:89:99:6C:D7:B4:E9:F5:FF:DC:17:2E:44:2E:E7:AE:5F:D3:86
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       019C44D9DF3189F0CE61083ABAB8BCB1B3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          1809
Signing time:             Tue 10 Feb 2026 00:00:54 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:54 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:54 +0000
Files and hashes:         1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
                          2: CoOWsD_WMrov0INrtlO9ijHEvvk.roa (hash: Sr0i40WcN6Y0+OoNtGn/lvWuAn5kO+cpjLNdnf5+TGE=)
                          3: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
                          4: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
                          5: qaZbA-D1etRlTM-FU--ac0dB_ss.roa (hash: BN6YD3t+6V0VWjVd4lNO3C0Ljn5myDizRC13ZwN4dhY=)
                          6: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
                          7: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: Qfp7MsmEleGaxo8ZtnPXZlTQsAbrA/6F6KcRxF+PBOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:df:31:89:f0:ce:61:08:3a:ba:b8:bc:b1:b3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Feb 10 00:00:54 2026 GMT
            Not After : Feb 11 00:00:54 2026 GMT
        Subject: CN=606889996cd7b4e9f5ffdc172e442ee7ae5fd386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:2a:31:85:ce:21:22:10:bd:8d:2b:ee:69:
                    39:6b:9c:f2:83:72:20:41:20:78:71:30:31:0b:17:
                    09:2d:d7:64:fe:b7:d1:d4:8d:e0:8f:fb:03:35:4f:
                    dd:ae:fc:c5:82:f6:14:65:f9:4a:8a:9e:c5:33:2a:
                    29:48:d4:21:d2:b0:b3:75:c3:d3:cd:77:ae:65:ae:
                    c9:ad:d1:ca:f0:5f:03:35:cc:c6:13:35:70:ad:a4:
                    9f:90:fc:ad:30:4a:ab:7f:45:bb:30:10:74:b0:64:
                    b6:35:7d:7e:d6:06:17:03:fe:59:b3:a5:d2:12:2c:
                    2a:53:33:2f:1b:0a:49:44:78:21:50:9c:b4:bc:ff:
                    63:4c:24:36:dc:4a:3d:c5:ca:44:be:b6:7b:39:69:
                    a7:19:fb:a3:41:24:cb:69:a7:35:aa:97:c0:6c:28:
                    ec:4c:f8:28:7f:fd:eb:ee:3c:1e:39:93:48:f4:58:
                    d4:d0:dc:d9:66:a5:c0:91:6f:47:01:ed:eb:16:66:
                    a8:09:45:7e:be:b8:4f:38:43:20:bc:da:bd:d2:3c:
                    9b:35:1e:0d:e9:b7:e7:96:e7:c5:3c:f2:bb:bd:e8:
                    b0:60:19:13:a6:f8:ea:fa:f1:ea:14:4d:9e:de:e6:
                    34:de:c3:e5:a7:bd:06:35:71:01:25:44:72:1b:58:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:68:89:99:6C:D7:B4:E9:F5:FF:DC:17:2E:44:2E:E7:AE:5F:D3:86
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f3:fa:98:87:82:b6:86:51:8d:95:82:46:c6:95:a1:e4:a7:
         b5:4b:5d:39:1e:5f:7a:17:01:8c:45:78:8f:91:be:d1:13:35:
         90:7e:d8:0a:23:f6:68:e1:89:6f:5e:e2:94:1f:dc:fa:f1:a7:
         dc:54:0f:1d:95:df:8b:ba:32:29:06:b8:a5:4a:3c:7a:0b:8a:
         d4:21:44:50:64:25:a6:bd:99:0b:14:95:e3:da:37:22:06:7a:
         48:01:61:74:6c:52:51:ea:79:b0:9a:77:c2:69:16:2c:2f:62:
         9c:77:80:5e:59:57:78:ff:46:0d:e6:f1:4f:0a:63:13:be:5a:
         2d:2d:f4:65:9a:91:33:76:89:dc:ed:14:e5:95:be:cd:f4:2c:
         93:6c:8c:20:9d:03:cb:a9:49:02:4d:39:a3:13:63:95:49:00:
         5b:86:62:ec:e7:e5:6d:4b:12:82:8d:7b:69:66:8c:50:c7:5c:
         5e:42:71:a7:88:ef:23:8c:af:11:8b:0b:0f:f2:54:57:47:4c:
         05:2a:2b:61:31:e9:73:c5:69:06:f3:c6:3a:12:1a:8c:2f:5d:
         29:b5:a9:2c:8a:7b:bb:3c:a9:6f:b3:99:47:1b:02:a5:64:23:
         4b:25:3b:cd:e5:69:cc:06:4e:fa:81:c7:f2:ac:e9:7f:42:ec:
         09:bf:84:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2d8xifDOYQg6uri8sbPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm
OWE1YTQwHhcNMjYwMjEwMDAwMDU0WhcNMjYwMjExMDAwMDU0WjAzMTEwLwYDVQQD
Eyg2MDY4ODk5OTZjZDdiNGU5ZjVmZmRjMTcyZTQ0MmVlN2FlNWZkMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6sqMYXOISIQvY0r7mk5a5zyg3Ig
QSB4cTAxCxcJLddk/rfR1I3gj/sDNU/drvzFgvYUZflKip7FMyopSNQh0rCzdcPT
zXeuZa7JrdHK8F8DNczGEzVwraSfkPytMEqrf0W7MBB0sGS2NX1+1gYXA/5Zs6XS
EiwqUzMvGwpJRHghUJy0vP9jTCQ23Eo9xcpEvrZ7OWmnGfujQSTLaac1qpfAbCjs
TPgof/3r7jweOZNI9FjU0NzZZqXAkW9HAe3rFmaoCUV+vrhPOEMgvNq90jybNR4N
6bfnlufFPPK7veiwYBkTpvjq+vHqFE2e3uY03sPlp70GNXEBJURyG1iGhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBoiZls17Tp9f/cFy5ELueuX9OGMB8GA1UdIwQY
MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt
YjQ5ZDg5ZTMwZGRkLzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk
LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifP6mIeC
toZRjZWCRsaVoeSntUtdOR5fehcBjEV4j5G+0RM1kH7YCiP2aOGJb17ilB/c+vGn
3FQPHZXfi7oyKQa4pUo8eguK1CFEUGQlpr2ZCxSV49o3IgZ6SAFhdGxSUep5sJp3
wmkWLC9inHeAXllXeP9GDebxTwpjE75aLS30ZZqRM3aJ3O0U5ZW+zfQsk2yMIJ0D
y6lJAk05oxNjlUkAW4Zi7OflbUsSgo17aWaMUMdcXkJxp4jvI4yvEYsLD/JUV0dM
BSorYTHpc8VpBvPGOhIajC9dKbWpLIp7uzypb7OZRxsCpWQjSyU7zeVpzAZO+oHH
8qzpf0LsCb+Ezg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:20:01 2026 by rpki-client