This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File:                     hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier:          a+B6dsCe4w6thYfYmBKg1pgtYeBw215Q/iSLmXKEfE8=
Subject key identifier:   B4:67:9E:D3:99:03:DE:EB:9A:A8:0D:60:F5:D0:E3:7C:CE:B2:CF:7F
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer:       /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial:       019C43C703A93FF16B0622B9FD65BCC58F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 19:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:41 +0000
Files and hashes:         1: VlpI70dDa3SXtasYtMfEiBmSD6c.roa (hash: ZCpP7KsMiePX2xsWWMvyuZvFGbNzVM1llSJjyzmPYlQ=)
                          2: cuqHyO4V93ncme-J7Fr8-_3DTvU.roa (hash: RSEzdn3Ri0wlzenvwY/b18Rq2sLeWzRaHbLOuqaUorY=)
                          3: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: WZKSHQ6IvMXAMvGl1zsEYwBuqMnIvZv1OIPVfT7AWno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:03:a9:3f:f1:6b:06:22:b9:fd:65:bc:c5:8f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
        Validity
            Not Before: Feb  9 19:00:41 2026 GMT
            Not After : Feb 10 19:00:41 2026 GMT
        Subject: CN=b4679ed39903deeb9aa80d60f5d0e37cceb2cf7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:ab:71:df:e4:1b:e9:da:87:f8:38:04:a2:
                    22:fd:8c:c1:19:64:6e:fb:5b:f5:b4:a4:49:24:9b:
                    34:f4:29:55:32:82:31:79:f0:b8:89:96:97:11:cd:
                    43:0d:46:f4:f8:0f:92:cc:69:6c:8d:10:bb:95:59:
                    61:24:16:ce:00:9e:1d:c5:d8:05:32:77:64:f3:77:
                    13:d5:50:58:92:f5:86:ad:eb:0b:47:db:54:3e:f6:
                    ea:c9:89:3b:41:08:dc:6e:a5:d3:bb:e0:8c:fd:08:
                    e6:6f:ee:25:be:11:b2:f8:8e:a5:3b:89:35:9c:6d:
                    0f:97:eb:89:e6:3f:ca:43:a9:69:92:02:f9:d4:f7:
                    29:e4:f6:1c:7c:08:ac:8c:3d:dc:a4:f1:b4:bb:30:
                    fe:3e:c8:f4:ab:18:fa:40:7e:5b:40:6a:39:ba:9e:
                    c4:03:da:0c:be:3c:cf:49:bc:22:14:ec:29:a4:ce:
                    18:48:ea:dd:d9:da:2b:2c:35:1d:53:20:55:44:60:
                    78:1e:1a:b1:16:f6:ad:b8:0d:83:ed:da:9a:10:67:
                    f8:ab:27:85:97:90:e1:6c:f8:a5:42:61:dd:ef:77:
                    c0:b9:95:52:96:cc:94:27:20:3e:ef:e1:31:f8:00:
                    3a:48:29:6b:d6:cb:6d:8a:80:df:73:64:15:5a:55:
                    7e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:67:9E:D3:99:03:DE:EB:9A:A8:0D:60:F5:D0:E3:7C:CE:B2:CF:7F
            X509v3 Authority Key Identifier:
                keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:3e:33:9a:a7:0c:f8:1a:a5:03:a4:8d:6e:b3:f1:50:b6:
         e5:6f:da:7f:90:ff:3a:bc:68:1f:16:82:98:5f:63:87:65:91:
         bc:0e:de:07:d8:74:7c:11:1f:20:7b:f6:40:dd:a8:aa:ba:1c:
         11:17:2e:d0:98:50:69:a6:b1:ea:c6:54:0f:8c:67:15:38:02:
         e1:59:f1:42:13:c9:98:a4:28:0c:b3:db:a3:47:f9:cb:fd:28:
         4f:23:33:5b:e1:c0:ae:9a:33:6d:aa:61:75:ae:6a:ea:9a:52:
         49:94:42:c6:b2:06:7b:09:1a:c2:bc:41:7c:1d:1b:fd:01:7a:
         f0:06:77:72:03:32:ad:fc:b5:e2:26:38:d2:46:24:4d:f7:72:
         b9:d1:37:af:24:e8:99:ba:d7:e2:58:26:68:f0:ae:97:f6:b9:
         e0:b1:c0:bc:fa:8c:b6:25:5a:ac:de:cc:e9:d0:cd:0a:df:a2:
         d6:f0:24:ec:31:17:45:44:1c:59:c3:17:67:87:d6:80:45:f6:
         3a:5d:85:dc:5a:c8:a5:34:ee:6a:18:62:9b:28:7b:82:bc:cc:
         9f:54:f2:e6:45:d6:3f:2b:eb:6c:14:f4:96:e6:f1:f4:fd:02:
         0d:16:92:da:8b:7c:c9:45:f7:a0:fc:d0:9a:dd:7c:5c:1d:83:
         68:ba:18:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:48 2026 by rpki-client