This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File:                     yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier:          0OR3GRGM1BS+RjFcq4bIv1Cf+30oE/fYDgyfeIpBktw=
Subject key identifier:   C7:16:5B:E3:C6:27:5C:27:13:2B:65:52:E5:E7:47:F4:18:7D:8E:38
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer:       /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial:       019C43226C804CF36F8B273B1A5FF50AD73E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number:          029D
Signing time:             Mon 09 Feb 2026 16:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:55 +0000
Files and hashes:         1: DOL6_bM0cayFn6lDHZcPsYXxrCI.roa (hash: SL51iqqDzym7zDZje/TntRQN14HmuoWDKSbYF6rNrYk=)
                          2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: omMnb+Dr+AemgMu7nwqSCTF2EEUy9W6RMq7krzdbH9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6c:80:4c:f3:6f:8b:27:3b:1a:5f:f5:0a:d7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
        Validity
            Not Before: Feb  9 16:00:55 2026 GMT
            Not After : Feb 10 16:00:55 2026 GMT
        Subject: CN=c7165be3c6275c27132b6552e5e747f4187d8e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:ce:6c:80:b7:9f:05:dd:cd:09:6d:f3:9b:
                    e0:f0:cb:5a:ea:e8:2c:6e:05:26:34:8a:5d:28:e7:
                    ee:06:f8:d7:24:54:bc:65:ae:d1:f5:9b:82:48:cb:
                    74:24:a6:bc:31:02:4f:42:cc:7b:7f:91:ca:0c:3e:
                    3c:d2:db:de:92:19:d3:7f:33:53:58:1f:9e:2c:75:
                    e8:d0:3f:f5:c3:18:34:6c:01:c3:18:0b:61:a8:02:
                    65:09:02:1f:6c:43:a6:83:b5:9a:66:94:85:71:1d:
                    1f:0a:d8:db:17:68:e6:23:77:d9:e9:2d:83:2f:ed:
                    f8:7d:df:09:7f:45:f1:dc:33:80:f4:23:db:4c:d6:
                    2d:c2:1d:d7:8e:be:1c:90:a0:8c:55:6a:6c:bd:de:
                    d1:92:35:20:ba:df:f2:9b:a0:4e:ec:e6:c9:b2:3f:
                    e2:a2:48:2c:d3:7b:da:82:fb:05:46:d4:55:b0:5a:
                    de:2b:23:02:1b:b5:fb:16:20:54:54:b5:f4:33:ee:
                    03:04:04:8b:8b:ce:45:ab:c6:78:e2:d0:f2:40:d7:
                    9a:e8:1c:62:f1:51:2f:e2:a8:66:38:21:54:ba:d4:
                    45:31:2f:9d:67:da:49:50:1c:54:01:99:6e:13:f1:
                    f5:8f:8f:29:a6:f3:20:3c:e3:e5:60:ef:ca:6f:0b:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:16:5B:E3:C6:27:5C:27:13:2B:65:52:E5:E7:47:F4:18:7D:8E:38
            X509v3 Authority Key Identifier:
                keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:7f:13:61:30:4d:c8:5b:88:99:28:14:bf:35:d5:c5:02:
         43:12:6a:09:1c:3a:1a:49:a5:9c:65:40:5c:6d:ae:0e:2e:da:
         3a:f3:a8:7f:cb:48:4c:70:bf:bf:e7:ce:89:4c:f5:d4:04:84:
         91:16:f5:89:0b:b3:91:06:f6:f2:74:d0:c4:35:51:11:ee:62:
         57:22:e1:92:28:b8:77:19:75:81:4f:f0:6c:58:c0:de:98:37:
         d7:ed:63:c0:0e:73:c6:55:90:5c:1b:36:10:64:15:3a:bf:20:
         27:ec:07:0d:67:77:d1:09:95:c0:81:0f:44:10:97:6f:60:d8:
         3a:89:95:0b:99:d4:8a:8d:51:b2:22:08:e7:09:35:80:68:eb:
         29:21:d2:6f:c2:ad:3f:f2:2c:b8:d2:cf:9c:67:29:b0:19:65:
         06:d7:59:e7:00:30:af:58:f6:f0:c6:68:79:6a:43:0d:c7:09:
         60:65:87:58:6b:5a:6a:01:23:d9:da:f9:e9:07:31:b4:e0:be:
         cf:9f:30:e2:44:85:17:34:a3:cd:81:fa:34:08:e8:d3:23:29:
         d7:43:f5:c1:f0:8d:a0:bc:30:8c:38:c6:17:a5:82:ea:ac:a5:
         d3:55:61:8e:97:f6:b7:99:5c:d9:ec:ed:7f:01:a2:4a:f6:25:
         ad:c5:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:04 2026 by rpki-client