This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File:                     ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier:          L4rSXhCHNCOcYv7i8MBZWUCknFeb6rFI7ornRItflyU=
Subject key identifier:   EC:42:DE:2F:1A:AF:09:E1:02:FE:8D:5C:99:4B:5A:F6:9A:52:87:C7
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer:       /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial:       019C446B930C3F78B91FA4327CC51F3BFA80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 22:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:26 +0000
Files and hashes:         1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
                          2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: ge5jKc0yqtchcotfhxYLXEu05zmuK+iNBkaPVW9ssZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:93:0c:3f:78:b9:1f:a4:32:7c:c5:1f:3b:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
        Validity
            Not Before: Feb  9 22:00:26 2026 GMT
            Not After : Feb 10 22:00:26 2026 GMT
        Subject: CN=ec42de2f1aaf09e102fe8d5c994b5af69a5287c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:7d:37:e9:47:51:ae:73:39:70:55:19:6d:
                    c1:79:3c:09:55:e7:54:82:7c:72:c0:51:a2:88:50:
                    2f:90:fd:83:c4:99:89:a9:0b:dd:3c:bf:42:9e:98:
                    d1:87:99:3e:eb:d6:2b:07:89:9a:f2:4a:ba:d7:a8:
                    7a:aa:1b:aa:d3:99:0e:50:68:fd:46:86:c7:fa:b8:
                    f0:1c:80:eb:56:9e:1c:76:30:6f:1b:85:aa:b9:22:
                    e9:f3:72:fc:b7:17:f3:14:4a:ac:86:c9:7c:41:ad:
                    5c:3c:72:44:ed:b4:b5:34:c8:c6:d7:88:06:bb:cd:
                    97:7a:50:7d:fd:70:30:8a:11:f9:c2:17:ac:ed:f0:
                    fe:80:21:64:f9:7f:b2:48:78:2b:37:b0:34:bf:f2:
                    47:95:a2:f9:49:bb:60:d5:fb:f7:22:93:99:e8:b5:
                    70:00:2a:1f:a6:c8:26:fe:fe:be:0d:1d:a9:fa:27:
                    f5:ff:64:b3:24:a2:67:8d:1b:f0:ec:a8:b7:53:4c:
                    90:5b:e2:76:2e:07:09:42:64:7f:38:d1:18:64:1c:
                    44:75:13:6d:e3:6c:c7:c2:82:61:34:f4:d4:67:3a:
                    6c:d2:c4:84:38:75:4d:c2:95:e4:b5:44:10:48:79:
                    40:ea:8a:50:a3:62:a0:90:7e:db:8e:2c:cf:f5:3f:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:42:DE:2F:1A:AF:09:E1:02:FE:8D:5C:99:4B:5A:F6:9A:52:87:C7
            X509v3 Authority Key Identifier:
                keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:3d:3b:12:26:a2:37:81:74:15:e4:ca:f2:a5:92:b2:82:
         7b:62:7e:0d:bc:6f:2a:c7:5a:04:8b:01:2d:b6:97:68:ed:84:
         26:4a:c1:46:46:ef:42:85:b2:5d:62:d3:e4:c3:ec:0c:bb:02:
         24:d7:da:ce:32:63:81:6e:2f:fd:93:1d:36:75:13:9d:58:f4:
         e6:9a:a5:3d:04:2c:1f:d5:2e:76:52:f2:13:9b:7d:66:ca:5c:
         a0:c7:83:33:ae:f6:c2:a0:ce:a1:82:81:d0:3d:59:b5:5e:e8:
         0c:b8:1c:64:f8:cc:14:b1:8c:a9:29:17:e1:45:64:a2:b0:76:
         11:04:27:8f:7d:37:6a:65:ed:85:a6:8d:8a:b2:03:a9:7c:75:
         7a:ff:35:10:0a:c8:9f:d3:e7:a7:68:f3:85:18:71:2f:99:fc:
         30:a2:cf:68:48:74:b4:06:c9:51:74:9d:48:41:52:b2:1b:e9:
         0d:b7:16:9f:d9:9c:a7:ef:8a:93:88:1a:6a:5a:1b:5a:91:a0:
         a6:85:0e:df:bd:95:15:d1:fc:ad:02:aa:b8:8c:aa:ab:7d:ad:
         6f:dd:de:22:5e:75:cd:fb:c2:79:8f:e4:82:c1:f7:ca:65:06:
         39:e3:e2:34:9a:fa:42:f0:09:c6:4f:c6:98:c1:03:a4:df:fc:
         c7:32:96:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:32:44 2026 by rpki-client