This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          oqM4tJ69zWVkevDAQ/mGozjeuzrUgvDOsvEYBtYP83k=
Subject key identifier:   3B:67:C1:BE:04:94:0F:56:7B:3D:E0:A2:5E:78:4D:CD:72:7C:15:80
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019C41D89A2E12F45510FEA03AA64AC420FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          182A
Signing time:             Mon 09 Feb 2026 10:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:40 +0000
Files and hashes:         1: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (hash: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: l0BeILtdGalOWLScDcUs16lbCTcukBj9SLqoiTJBhuY=)
                          3: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=)
                          4: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
                          5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
                          6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
                          7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:9a:2e:12:f4:55:10:fe:a0:3a:a6:4a:c4:20:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Feb  9 10:00:40 2026 GMT
            Not After : Feb 10 10:00:40 2026 GMT
        Subject: CN=3b67c1be04940f567b3de0a25e784dcd727c1580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:de:aa:9c:38:88:64:79:c2:ff:46:66:42:
                    d2:86:06:13:bb:1f:86:32:2c:2a:b9:e9:83:84:c5:
                    d5:ec:a5:bd:07:c9:7c:18:92:05:5e:c6:57:27:5f:
                    d1:74:65:4c:da:c4:0f:c0:a7:01:0c:07:7a:5a:a3:
                    49:8b:99:fe:85:b8:bc:c6:4d:ef:61:17:81:28:46:
                    e5:1a:0b:ae:29:1d:0f:fe:8d:de:15:e6:01:1b:24:
                    bb:fa:b2:03:4a:bb:2b:a6:13:0a:cb:9d:1d:62:02:
                    bc:14:02:d6:95:b7:40:bb:01:32:29:f0:19:b2:f8:
                    41:66:aa:46:c6:8e:10:1a:d7:fd:9c:a9:6d:64:31:
                    ed:3b:c4:88:4a:5c:5b:d4:10:41:53:6f:48:d5:0c:
                    d3:4b:7e:4e:72:f7:44:bf:9d:ad:0e:27:61:57:e7:
                    5c:69:8f:69:05:98:25:28:cf:c2:2f:64:4a:40:37:
                    54:5d:3f:52:30:ff:10:d7:a6:25:98:dc:a8:a6:76:
                    18:ad:65:09:7b:54:e4:0b:e2:18:4e:ec:f1:cb:91:
                    ea:eb:3b:a4:e1:88:75:d8:37:ea:e7:a0:d3:0a:53:
                    2d:12:3e:cf:aa:eb:e7:57:b7:58:8f:9d:08:7a:5e:
                    a1:e2:bc:88:d8:e7:71:03:8c:d1:b9:dd:c4:cf:41:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:C1:BE:04:94:0F:56:7B:3D:E0:A2:5E:78:4D:CD:72:7C:15:80
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3e:79:a0:2b:e4:e4:5e:d6:53:7d:ea:24:1b:2d:c5:34:52:
         f9:35:91:c4:34:6f:49:8e:e0:b7:0f:00:82:50:1c:ef:4e:4a:
         98:df:2c:0b:7d:d7:3c:1d:79:9e:b3:e0:cf:9c:a3:d6:86:7b:
         0f:1f:a8:77:18:ad:b9:51:80:a5:53:75:c9:da:64:3e:dc:e4:
         35:42:a7:95:b9:9b:c6:cd:5a:89:3a:8d:39:61:7c:af:d7:5d:
         23:69:f3:6d:e8:40:ac:fc:d8:f9:47:37:dc:91:9c:7f:c2:45:
         cc:15:d6:92:4c:23:d0:f0:2a:b4:20:ae:a1:51:2b:34:c3:7b:
         db:85:18:ae:ee:5e:0c:e3:b9:9d:71:bd:44:ad:f5:04:df:af:
         c2:d2:00:3f:8a:cf:e1:30:7c:51:59:b5:5f:79:0b:e0:d4:88:
         32:ee:84:3b:c4:0a:26:cf:3d:13:f7:49:a4:fa:85:a9:ea:ab:
         42:ef:05:f5:38:3c:a1:2b:21:b1:fe:87:51:2e:69:e6:41:56:
         f7:3c:1c:64:62:e4:0f:4d:0f:5e:6b:b7:94:1b:32:72:66:55:
         13:f6:46:84:c8:12:bc:6e:5b:4a:a3:0a:4e:63:ef:00:95:be:
         b3:53:ef:eb:61:79:b8:09:c7:ac:f8:a1:a6:12:1a:42:7c:37:
         4b:40:d4:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2JouEvRVEP6gOqZKxCD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj
ZmJhMzQwHhcNMjYwMjA5MTAwMDQwWhcNMjYwMjEwMTAwMDQwWjAzMTEwLwYDVQQD
EygzYjY3YzFiZTA0OTQwZjU2N2IzZGUwYTI1ZTc4NGRjZDcyN2MxNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaTeqpw4iGR5wv9GZkLShgYTux+G
MiwquemDhMXV7KW9B8l8GJIFXsZXJ1/RdGVM2sQPwKcBDAd6WqNJi5n+hbi8xk3v
YReBKEblGguuKR0P/o3eFeYBGyS7+rIDSrsrphMKy50dYgK8FALWlbdAuwEyKfAZ
svhBZqpGxo4QGtf9nKltZDHtO8SISlxb1BBBU29I1QzTS35OcvdEv52tDidhV+dc
aY9pBZglKM/CL2RKQDdUXT9SMP8Q16YlmNyopnYYrWUJe1TkC+IYTuzxy5Hq6zuk
4Yh12Dfq56DTClMtEj7PquvnV7dYj50Iel6h4ryI2OdxA4zRud3Ez0HmPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtnwb4ElA9Wez3gol54Tc1yfBWAMB8GA1UdIwQY
MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt
YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm
LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUD55oCvk
5F7WU33qJBstxTRS+TWRxDRvSY7gtw8AglAc705KmN8sC33XPB15nrPgz5yj1oZ7
Dx+odxituVGApVN1ydpkPtzkNUKnlbmbxs1aiTqNOWF8r9ddI2nzbehArPzY+Uc3
3JGcf8JFzBXWkkwj0PAqtCCuoVErNMN724UYru5eDOO5nXG9RK31BN+vwtIAP4rP
4TB8UVm1X3kL4NSIMu6EO8QKJs89E/dJpPqFqeqrQu8F9Tg8oSshsf6HUS5p5kFW
9zwcZGLkD00PXmu3lBsycmZVE/ZGhMgSvG5bSqMKTmPvAJW+s1Pv62F5uAnHrPih
phIaQnw3S0DUJg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:35 2026 by rpki-client