This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
File:                     hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json)
Hash identifier:          VZ7cJ6fnOcERjYZ6Wzv9T42at+WC34R6NMkgt3Yg3vY=
Subject key identifier:   8B:0B:49:D0:68:06:FF:BC:0D:EC:28:82:F9:7C:FF:12:0E:B3:B7:FD
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       019C42EBA095F5CE197BC50C13547945F11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
Manifest number:          1434
Signing time:             Mon 09 Feb 2026 15:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:04 +0000
Files and hashes:         1: DzxlgYolYmYrOw6dLtHYtuvzTW4.roa (hash: snxX9+Dmsgw6Tf7GTwWvTcPR+yOEzI9Wj8zN8W2eCBE=)
                          2: OQLmyHIHKnOQqtsOG6o6hyfLKFE.roa (hash: OAPut5klxvnwxvXekYncRq9ZTcquwuK9N/4Pis2RPnI=)
                          3: SU9l9n5tTaHoiwwtJtq99KggAas.roa (hash: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs=)
                          4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: Mbehpyap4g2S7IrnTiWVLSdhBcLVX9moQ8bj8OXf2Gw=)
                          5: y18u9oMcyFjkgl_LFXqULX8NytA.roa (hash: B5vX5oLv2822UN69f2wG7jEHSe1FzIcV1zpP+Ish8P8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:a0:95:f5:ce:19:7b:c5:0c:13:54:79:45:f1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: Feb  9 15:01:04 2026 GMT
            Not After : Feb 10 15:01:04 2026 GMT
        Subject: CN=8b0b49d06806ffbc0dec2882f97cff120eb3b7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:9c:64:6b:b8:44:5e:3b:f0:b7:0e:be:83:
                    bf:f3:c1:33:18:ca:55:c4:80:86:4c:7d:24:d1:c4:
                    94:a0:a0:73:3f:7a:80:8c:5e:af:2a:e8:92:93:6e:
                    4c:2e:e2:71:f4:1c:ad:46:30:fa:35:b9:dc:c7:96:
                    ff:9d:df:9d:6d:9f:31:45:53:ef:f1:0e:1c:48:e5:
                    7d:eb:d2:8b:c9:d9:12:44:90:88:27:97:e7:bc:58:
                    6e:d3:3b:8c:b7:94:79:08:24:df:e6:57:0c:db:61:
                    96:a0:3d:c9:1b:40:a9:70:dd:8a:f0:02:9b:c4:38:
                    de:ee:1d:4c:4b:ba:a2:4a:58:ab:14:fc:57:85:22:
                    3e:00:5b:20:a2:f5:56:08:d0:6b:63:c2:fc:0d:10:
                    2e:97:57:db:be:6f:92:15:ba:66:94:b3:54:d8:c3:
                    63:c1:da:3d:06:f0:5d:05:a2:2e:4d:22:3f:0d:34:
                    9f:8c:b4:67:ae:2a:31:b9:da:f6:58:4e:e1:c0:6d:
                    c5:a4:10:23:f7:33:9e:08:64:95:99:a7:89:01:f2:
                    d9:01:eb:4a:b0:27:bf:0f:17:b6:c7:aa:60:ed:48:
                    31:b7:7a:05:d6:5a:97:a8:6a:0e:64:fe:e5:58:f2:
                    d4:2f:16:f8:b7:d0:5d:e4:d8:1e:86:83:f8:eb:e1:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0B:49:D0:68:06:FF:BC:0D:EC:28:82:F9:7C:FF:12:0E:B3:B7:FD
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:95:04:73:a7:19:f2:16:13:45:14:93:0e:22:aa:6a:54:f5:
         ca:f2:33:91:c7:a2:e1:e7:da:71:59:de:14:cb:53:de:b2:26:
         94:44:62:d2:a0:5f:95:88:5a:de:12:d2:6b:63:55:a8:d3:bc:
         64:f1:45:94:b3:7c:7d:55:9c:60:f4:bf:40:77:cb:96:c6:93:
         5b:56:f5:65:04:cd:ea:9d:38:9f:88:a0:cf:2b:f5:6b:d1:48:
         ec:95:ed:d3:2f:77:16:18:26:2f:10:6c:d0:4f:0d:77:e7:cf:
         98:bf:18:02:0d:1a:52:86:70:9b:73:6c:78:d5:b8:eb:f0:1a:
         9f:75:40:51:e6:43:19:9c:9d:1f:1c:20:f1:1a:f9:55:fc:29:
         8d:d9:d4:9d:aa:48:f2:ed:d5:69:f4:33:a5:f0:85:7d:97:08:
         b1:4a:2d:31:43:8c:df:54:4f:05:03:86:eb:df:d4:f9:2c:9d:
         9f:9f:5f:4a:ab:9e:37:f0:20:84:c9:96:ce:76:7a:0e:be:5b:
         6f:09:05:12:7d:86:19:83:7d:4f:14:6b:63:a8:6b:a7:df:f3:
         5e:83:b8:a0:14:67:3d:27:dd:c3:40:1e:65:b0:2c:a5:e2:52:
         f0:0c:9d:e5:89:87:e7:3d:b9:44:e2:8e:8a:9a:1c:98:a1:97:
         25:46:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:35 2026 by rpki-client