This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File:                     y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier:          92Zgz6Q0xo5ZTFmG1em8lMAzBrYv+s878Rj6M/x4W4s=
Subject key identifier:   D9:4E:A8:2C:5B:5F:0A:06:79:F2:CD:80:4F:D1:C7:D9:66:4A:49:AA
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer:       /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial:       019C439001DD09C8166DF8C5B0A0B8682863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number:          0D3A
Signing time:             Mon 09 Feb 2026 18:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:36 +0000
Files and hashes:         1: roqAbM7IFMtztGev_KtwvL7oqjk.roa (hash: ydWNX4Xyz0BhXsi9KhsO32ou0TfatpBXfKo/DL2J1qw=)
                          2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: BnIEJrVFatkqqeGzs/Dqw47Rpph104ROKAVF2P+IMGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:01:dd:09:c8:16:6d:f8:c5:b0:a0:b8:68:28:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
        Validity
            Not Before: Feb  9 18:00:36 2026 GMT
            Not After : Feb 10 18:00:36 2026 GMT
        Subject: CN=d94ea82c5b5f0a0679f2cd804fd1c7d9664a49aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:f6:74:b7:bb:83:19:fb:3d:26:06:c2:63:
                    0f:80:0b:d1:28:c8:08:f1:9b:24:b9:79:49:b3:41:
                    b6:0f:8a:37:94:75:0c:bb:36:eb:46:1c:30:f6:ba:
                    d8:c2:8a:68:62:b4:d9:31:49:cf:97:ff:13:09:b1:
                    ae:01:e9:20:e7:b2:ac:58:ae:89:15:80:fa:8c:a5:
                    71:8f:3b:8a:fe:f3:ae:ad:85:1d:35:99:48:63:c6:
                    bb:30:3c:ab:b7:b3:bf:b7:d1:d6:76:12:45:81:01:
                    b3:2a:7f:bc:ec:f5:93:8a:a9:74:8d:b5:c3:2a:28:
                    af:52:c8:3f:46:78:8f:9b:05:28:e0:22:31:93:b6:
                    cf:bd:33:d8:1e:1a:5e:c3:34:a8:80:6d:80:95:fa:
                    29:63:21:df:2c:de:55:e6:63:9b:16:1b:3f:1a:c6:
                    e7:bf:8f:dc:15:51:32:3c:f6:76:0e:f5:9d:0b:01:
                    eb:03:71:38:da:22:43:17:28:c6:ad:c2:fd:18:30:
                    d0:78:56:09:c3:6a:e5:7e:bb:75:1c:f6:e9:60:66:
                    3b:15:a9:f8:28:c6:87:c7:cb:04:c1:12:6b:ac:f2:
                    86:c4:56:5d:0d:7b:9b:a5:00:33:ef:99:7b:1e:c5:
                    02:a9:97:03:ed:3d:c4:89:cb:a3:85:82:79:d8:18:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4E:A8:2C:5B:5F:0A:06:79:F2:CD:80:4F:D1:C7:D9:66:4A:49:AA
            X509v3 Authority Key Identifier:
                keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:a0:93:b0:b0:7f:4d:b2:c7:e6:ea:27:40:f7:a6:06:26:
         b2:9b:91:d4:a1:a5:46:45:f5:49:b7:bc:ec:6c:83:9b:58:c7:
         4e:fb:60:f6:73:27:3d:9e:cb:08:aa:b3:fe:71:df:6c:b1:b8:
         21:06:6e:23:4c:4f:41:0a:b9:c9:0b:4b:6d:e7:28:41:fe:00:
         b7:f1:b6:05:3b:05:8c:21:11:4c:88:b7:46:20:fd:35:84:df:
         61:19:74:c5:bf:4f:b5:6c:37:0b:35:3c:b3:99:4f:01:1d:24:
         db:a9:fe:d8:3c:3d:1b:75:ef:0f:86:58:96:51:4f:d6:b1:44:
         30:e3:d7:54:0a:6a:1a:06:f0:d9:c6:47:1a:f4:5b:67:a0:88:
         fb:80:94:b7:66:0a:fe:69:60:07:52:67:33:a0:8c:f9:e8:c4:
         9c:8f:59:0c:c5:8b:b2:2b:6a:b7:99:00:62:7b:4d:66:cc:f6:
         0d:41:1e:2f:0a:58:2f:de:73:8c:8d:f6:9e:8b:a4:ac:bd:35:
         19:e4:08:b5:32:46:0c:2f:41:b8:4f:69:b5:a2:44:bc:f7:67:
         cc:a3:f6:6c:48:92:d6:4d:45:ea:6e:fa:00:a1:66:ba:70:18:
         67:37:d4:58:c5:08:66:42:fc:ea:c6:73:8b:55:27:7a:b0:b0:
         4c:3a:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:34 2026 by rpki-client