This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File:                     y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier:          l6Aks17d6zi3u4FIrLluiMa3EzJXKhubgY7aIYA70GU=
Subject key identifier:   59:F7:25:F2:3D:60:86:BD:0A:B1:CB:8C:6B:3E:A5:1C:50:C9:E5:56
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer:       /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial:       019C43C7058BCE7B9C0AF1CA8C817068F73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number:          12BB
Signing time:             Mon 09 Feb 2026 19:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:42 +0000
Files and hashes:         1: nSDdOSHCspVYpleIhOXCb9rtFXU.roa (hash: DP5yiwIDcmmdgoi5MgA6ERsteJ2t3mRoP7VsaFCdpY0=)
                          2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: pT8+r7NO4L9BtmzvrkshLToE59Wbrwczsuh9sqUI4aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:05:8b:ce:7b:9c:0a:f1:ca:8c:81:70:68:f7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
        Validity
            Not Before: Feb  9 19:00:42 2026 GMT
            Not After : Feb 10 19:00:42 2026 GMT
        Subject: CN=59f725f23d6086bd0ab1cb8c6b3ea51c50c9e556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:67:cb:1b:f5:72:dd:47:ee:30:9e:2d:95:
                    84:37:d3:7e:49:12:00:5d:b2:4d:34:31:65:35:36:
                    ba:fc:40:b9:87:87:02:d0:5c:77:e4:45:96:58:fd:
                    a5:0d:21:ed:e1:98:35:e9:04:fd:0a:57:02:3a:68:
                    a4:96:e2:11:e6:ca:28:36:0c:f0:5c:2e:13:3b:35:
                    a6:a9:c3:60:f1:68:b8:8c:2b:e5:0a:89:8d:ed:21:
                    42:36:d6:28:77:9e:58:c3:cc:0a:86:20:ac:36:cf:
                    b3:1f:4d:cd:c9:d1:f2:e9:24:7c:de:9e:64:bb:47:
                    17:85:32:c5:76:06:44:a5:8c:d8:76:62:15:43:7d:
                    9a:7c:37:1f:32:04:65:ef:59:fb:09:8f:b9:27:f4:
                    4f:3e:cb:ad:c4:a6:80:8f:39:b5:b0:8e:a0:ec:1f:
                    bb:cf:1d:2c:21:23:b2:96:50:de:ac:e2:fd:a5:6d:
                    ca:96:23:4f:b3:9a:05:05:91:9c:82:c7:64:af:c1:
                    26:32:5e:cf:40:b5:e0:73:a4:70:2f:96:26:d3:26:
                    8a:30:01:40:e1:06:9a:b4:9a:52:70:3d:ad:e7:84:
                    5c:71:1a:c3:9a:03:51:79:85:f7:39:5a:30:d0:78:
                    10:3b:e3:55:42:b6:4c:6d:11:57:49:26:a5:ca:d8:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:25:F2:3D:60:86:BD:0A:B1:CB:8C:6B:3E:A5:1C:50:C9:E5:56
            X509v3 Authority Key Identifier:
                keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:be:15:96:84:3b:fc:09:2a:97:14:73:be:a5:38:74:d4:
         a2:38:69:f6:55:1f:f7:f6:a8:5e:91:3a:22:08:37:86:26:c2:
         e9:ee:d0:1b:2f:30:fa:ae:c9:f9:f7:a5:84:9a:78:97:81:e2:
         d4:cf:0f:a1:73:d3:dc:99:fc:ab:42:23:a5:ff:1c:6d:0f:83:
         78:a1:4f:3f:46:22:39:1a:5e:52:a2:c4:95:dd:fb:14:21:d2:
         7a:a4:63:6c:c6:5c:24:24:e6:52:1c:e7:8a:13:e1:7a:e2:c4:
         5a:96:4d:c3:b9:38:ec:cc:0e:64:b3:5c:ac:3e:48:1d:80:ba:
         b5:a3:0e:e4:3b:80:0a:c8:27:72:8a:06:f2:3e:bc:e4:85:9b:
         18:3e:b7:3f:48:31:0e:67:a7:15:03:e6:0a:34:bc:57:a9:9d:
         e0:69:de:bc:7e:d8:20:1f:69:99:c6:fa:b6:bb:f9:fa:7b:5f:
         a4:2e:ec:0a:f6:83:d2:d2:20:15:2b:7d:b0:ca:72:a4:3a:a1:
         8d:7f:6f:ea:f4:ce:44:55:df:e7:fc:3e:2c:45:f0:04:a8:c3:
         b8:1d:dc:b4:98:a9:28:c7:f9:03:56:a4:d6:e5:95:3b:bb:97:
         1c:e3:72:7f:69:69:4f:be:1e:af:14:f0:00:7e:74:ad:37:d4:
         aa:6c:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:37:02 2026 by rpki-client