This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
File:                     EHgHwlGJFROPVVEjYFwBM9_btPo.mft (raw, json)
Hash identifier:          T0bI0FiXed6sWJglQJO8QuGVBozbbYhLnNcxYwVdiE8=
Subject key identifier:   14:3C:83:FE:F0:FA:DF:48:88:EC:5F:37:12:CB:0A:9E:67:C9:79:36
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Certificate issuer:       /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial:       019C397AE60FFC362FA436D5C66D2BD8BD99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
Manifest number:          180D
Signing time:             Sat 07 Feb 2026 19:01:21 +0000
Manifest this update:     Sat 07 Feb 2026 19:01:21 +0000
Manifest next update:     Sun 08 Feb 2026 19:01:21 +0000
Files and hashes:         1: Ak7xCfYZ94WpFcy69R3EY5zxAfs.roa (hash: KMBeoo3V9b7HNS5xPrK/Qejr6Hp4pvP3hZ9BHsdOLDE=)
                          2: EHgHwlGJFROPVVEjYFwBM9_btPo.crl (hash: RhUVJehTbdaaDnD9Lvy7F2lO2xs3FR2F1oFmNmTsmLE=)
                          3: OA6POnkqSmxP_dnzNwpmYYzavz8.roa (hash: kX8yEulbOjRkpob8aF431Ln0/YwvLU/L28eJTVYnKTI=)
                          4: TTS80Z1y-A6Wn6RHS9U2VwA1dAI.roa (hash: XaSvFikEZpf+bViNQBT/sXuBrCkdNvMkMtL8XShKIh8=)
                          5: XxEZsYZPdK3SWZkomBsTv8LFNVg.roa (hash: tM6CB687KapDIQ9ieiEYJfXEzIc4ztoUppntZfCjT5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:39:7a:e6:0f:fc:36:2f:a4:36:d5:c6:6d:2b:d8:bd:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
        Validity
            Not Before: Feb  7 19:01:21 2026 GMT
            Not After : Feb  8 19:01:21 2026 GMT
        Subject: CN=143c83fef0fadf4888ec5f3712cb0a9e67c97936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:72:a7:9f:7c:c6:42:26:b9:33:a6:a6:4a:a9:
                    b5:c0:b0:be:62:23:f0:7d:a9:d2:f1:97:af:80:30:
                    49:5e:0d:62:8e:80:cf:ea:b6:08:24:c9:bc:a9:11:
                    f6:2d:01:15:42:5e:0f:e8:a2:73:bf:ad:c3:a8:71:
                    48:b9:dc:27:d4:cb:0c:f2:62:1f:4c:51:80:46:23:
                    e6:7c:2f:c4:7d:b2:83:f0:81:c6:e2:4d:4e:d8:e1:
                    6a:e9:f7:f6:d0:ec:09:f5:ba:12:10:43:7c:2e:c1:
                    f8:b7:d1:dd:60:fb:bc:3f:d6:53:40:ff:aa:90:4b:
                    32:e7:77:38:3b:db:6c:99:2b:6a:00:3c:96:a7:36:
                    e8:91:7f:f7:21:45:04:b1:8a:43:d6:b3:11:fa:65:
                    b4:f2:50:76:d4:3d:8d:37:37:de:77:12:66:2e:95:
                    61:f0:2c:e9:53:3c:ed:0c:57:cf:fa:4b:8f:10:59:
                    2d:ac:67:1b:5d:91:dc:b7:8a:64:50:15:15:0f:e0:
                    ba:54:8d:71:67:6e:b5:f8:47:78:0e:0b:06:31:cd:
                    db:7a:40:43:6c:70:12:a6:e5:51:44:32:d7:3d:7a:
                    47:69:c9:ee:a6:ab:ad:e5:cf:d9:55:52:9b:92:37:
                    1d:5f:bb:d8:53:15:db:89:d5:1a:51:14:15:62:2f:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:83:FE:F0:FA:DF:48:88:EC:5F:37:12:CB:0A:9E:67:C9:79:36
            X509v3 Authority Key Identifier:
                keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:e5:0d:f7:03:46:cc:7e:3c:7a:4f:9e:8d:94:fc:7f:47:
         2d:79:6c:ca:2c:e1:b2:e5:0c:90:4b:5d:02:e5:43:96:23:c7:
         4e:82:ac:80:3f:8f:29:9d:a5:63:9f:fc:7d:cd:e0:0a:f8:5e:
         0d:bf:8c:08:12:2b:65:84:fd:d2:16:7c:b0:61:39:04:2d:9c:
         e1:3e:50:46:ac:08:f1:1c:de:55:5c:e2:f0:6f:0c:13:7d:51:
         77:74:11:d3:e6:3d:ff:2f:b9:5c:0a:c0:db:e9:31:ec:db:14:
         d2:23:f5:2e:06:59:7a:34:4e:6f:ec:ad:5e:6e:79:4a:40:2b:
         38:28:ce:e6:2b:a5:57:d9:8b:74:85:98:0f:c8:f7:29:f6:f0:
         1f:e5:00:74:bf:46:1d:45:67:70:4e:a7:c9:6b:73:ec:79:1f:
         9c:50:18:d1:18:46:af:ef:13:80:63:ed:e1:d6:42:0f:0f:6e:
         f5:dd:b6:0e:09:de:bb:80:2b:2a:3d:e6:f8:68:c0:77:4b:0d:
         d8:e3:7e:39:4b:f3:e7:96:cf:47:97:ac:bc:27:28:6b:37:63:
         75:5a:f4:f8:14:92:da:5a:64:48:0d:ca:5b:88:17:62:3a:35:
         8a:b5:bb:c6:d7:a5:60:30:cc:de:7e:40:32:d1:cf:dd:2c:e9:
         4f:4b:37:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZw5euYP/DYvpDbVxm0r2L2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzgwN2MyNTE4OTE1MTM4ZjU1NTEyMzYwNWMwMTMzZGZk
YmI0ZmEwHhcNMjYwMjA3MTkwMTIxWhcNMjYwMjA4MTkwMTIxWjAzMTEwLwYDVQQD
EygxNDNjODNmZWYwZmFkZjQ4ODhlYzVmMzcxMmNiMGE5ZTY3Yzk3OTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnKnn3zGQia5M6amSqm1wLC+YiPw
fanS8ZevgDBJXg1ijoDP6rYIJMm8qRH2LQEVQl4P6KJzv63DqHFIudwn1MsM8mIf
TFGARiPmfC/EfbKD8IHG4k1O2OFq6ff20OwJ9boSEEN8LsH4t9HdYPu8P9ZTQP+q
kEsy53c4O9tsmStqADyWpzbokX/3IUUEsYpD1rMR+mW08lB21D2NNzfedxJmLpVh
8CzpUzztDFfP+kuPEFktrGcbXZHct4pkUBUVD+C6VI1xZ261+Ed4DgsGMc3bekBD
bHASpuVRRDLXPXpHacnupqut5c/ZVVKbkjcdX7vYUxXbidUaURQVYi9/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ8g/7w+t9IiOxfNxLLCp5nyXk2MB8GA1UdIwQY
MBaAFBB4B8JRiRUTj1VRI2BcATPf27T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTIt
ZjlhYzE1ZTY2Mzg2LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yODYwYTQtM2I5NC00Mjc0LWEzYTItZjlhYzE1ZTY2Mzg2
LzEvRUhnSHdsR0pGUk9QVlZFallGd0JNOV9idFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPrlDfcD
Rsx+PHpPno2U/H9HLXlsyizhsuUMkEtdAuVDliPHToKsgD+PKZ2lY5/8fc3gCvhe
Db+MCBIrZYT90hZ8sGE5BC2c4T5QRqwI8RzeVVzi8G8ME31Rd3QR0+Y9/y+5XArA
2+kx7NsU0iP1LgZZejROb+ytXm55SkArOCjO5iulV9mLdIWYD8j3KfbwH+UAdL9G
HUVncE6nyWtz7HkfnFAY0RhGr+8TgGPt4dZCDw9u9d22Dgneu4ArKj3m+GjAd0sN
2ON+OUvz55bPR5esvCcoazdjdVr0+BSS2lpkSA3KW4gXYjo1irW7xtelYDDM3n5A
MtHP3SzpT0s38g==
-----END CERTIFICATE-----
Generated at Sat Feb 7 22:01:59 2026 by rpki-client