This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File:                     H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier:          3Av7/Iiry8wycB6OieSr8eLq7G40dLmSfJm2Ire9jsg=
Subject key identifier:   C0:9D:5F:04:2D:F3:B6:CD:FE:5C:AB:FA:41:E2:8C:23:34:1E:55:76
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer:       /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial:       019C42462A7956D15E953AB9D726AC707C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 12:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:20 +0000
Files and hashes:         1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
                          2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: nALm86BBApEOvAG6tbXTATQyJzwSP51ngIfQthvseXw=)
                          3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:2a:79:56:d1:5e:95:3a:b9:d7:26:ac:70:7c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
        Validity
            Not Before: Feb  9 12:00:20 2026 GMT
            Not After : Feb 10 12:00:20 2026 GMT
        Subject: CN=c09d5f042df3b6cdfe5cabfa41e28c23341e5576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:18:2d:c7:29:1b:fb:8f:4e:f9:33:db:89:
                    08:fd:20:50:31:da:55:de:2e:87:c0:db:6e:d0:f2:
                    5a:ab:55:aa:64:11:05:e1:cf:fa:25:77:5a:0a:5e:
                    35:ed:20:f1:f8:18:31:aa:bd:f4:bc:85:0d:8a:45:
                    4f:b4:dd:f0:01:f4:61:6d:77:31:4d:7a:7c:38:5c:
                    02:01:a5:eb:aa:cf:d3:9c:46:73:9e:8b:e7:89:d2:
                    f6:17:d3:c6:2d:d5:ee:be:f8:85:95:20:54:b9:4e:
                    8b:3c:b0:ab:45:10:98:5b:4d:d7:6c:84:39:d6:54:
                    c4:51:34:d6:4c:03:79:7e:90:9f:14:4c:46:2e:af:
                    8a:8e:36:c9:99:dd:a1:76:34:41:f5:8b:dc:d9:10:
                    6b:4a:6a:29:57:f2:b7:f8:28:c2:10:82:8b:78:16:
                    0f:8d:dd:cd:08:61:8c:63:96:65:79:9c:45:b2:f8:
                    c2:ca:b0:b7:88:39:05:a2:77:05:b4:82:43:6e:9e:
                    39:79:20:8e:20:92:f6:27:f9:8e:e9:8c:9f:75:0b:
                    ce:6e:58:3d:60:89:bd:88:87:83:83:a6:39:f2:1e:
                    4b:e4:8e:43:59:ce:d4:d4:c9:71:e3:82:11:eb:33:
                    d7:21:54:31:2b:03:61:9e:d1:f2:72:b2:c5:a1:29:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9D:5F:04:2D:F3:B6:CD:FE:5C:AB:FA:41:E2:8C:23:34:1E:55:76
            X509v3 Authority Key Identifier:
                keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:21:35:74:4b:ae:38:32:52:53:b7:a9:5c:2e:45:77:d0:e8:
         cb:6d:4e:a0:3f:af:53:53:2e:7a:d5:5f:31:2e:af:46:47:35:
         1f:bd:ef:57:7f:f5:ee:88:41:bb:8b:92:bf:0c:0c:c3:b3:76:
         a9:9c:4e:99:db:46:c3:7e:90:a5:23:3a:4d:34:aa:41:85:44:
         98:5d:85:5c:58:db:b3:38:ff:c8:bf:86:26:63:51:ed:c1:b9:
         0a:92:28:6d:30:ef:69:c3:4f:58:05:65:02:5e:3f:95:d4:40:
         4b:72:a8:f5:3f:c8:4d:7c:af:a7:36:ed:d0:4d:1b:65:b1:b5:
         a4:42:14:60:27:02:c7:8b:b6:4f:6c:15:0a:a8:d2:b7:b7:7e:
         b6:a9:ae:e1:52:ce:27:68:3e:4d:58:be:b4:56:0a:5c:26:42:
         80:b0:07:de:b0:11:a3:ed:f1:ec:b9:28:f3:9e:79:be:f3:7a:
         46:17:30:6d:9b:3d:32:96:35:af:57:a8:5f:28:d8:76:b6:fb:
         c9:6e:20:0d:ac:a2:18:99:8c:4e:63:a3:3c:20:6a:e3:9c:da:
         bd:fc:94:1f:96:af:68:c8:78:85:1b:e5:19:9d:c0:21:ca:a7:
         f8:75:55:0a:d8:05:2f:61:52:5a:fc:82:5c:3e:ff:4b:a2:e8:
         1d:b9:4f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRip5VtFelTq51yascHwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk
ZGRmMzUwHhcNMjYwMjA5MTIwMDIwWhcNMjYwMjEwMTIwMDIwWjAzMTEwLwYDVQQD
EyhjMDlkNWYwNDJkZjNiNmNkZmU1Y2FiZmE0MWUyOGMyMzM0MWU1NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI0YLccpG/uPTvkz24kI/SBQMdpV
3i6HwNtu0PJaq1WqZBEF4c/6JXdaCl417SDx+Bgxqr30vIUNikVPtN3wAfRhbXcx
TXp8OFwCAaXrqs/TnEZznovnidL2F9PGLdXuvviFlSBUuU6LPLCrRRCYW03XbIQ5
1lTEUTTWTAN5fpCfFExGLq+KjjbJmd2hdjRB9Yvc2RBrSmopV/K3+CjCEIKLeBYP
jd3NCGGMY5ZleZxFsvjCyrC3iDkFoncFtIJDbp45eSCOIJL2J/mO6YyfdQvOblg9
YIm9iIeDg6Y58h5L5I5DWc7U1Mlx44IR6zPXIVQxKwNhntHycrLFoSnrdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCdXwQt87bN/lyr+kHijCM0HlV2MB8GA1UdIwQY
MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It
YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4
LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCE1dEuu
ODJSU7epXC5Fd9Doy21OoD+vU1MuetVfMS6vRkc1H73vV3/17ohBu4uSvwwMw7N2
qZxOmdtGw36QpSM6TTSqQYVEmF2FXFjbszj/yL+GJmNR7cG5CpIobTDvacNPWAVl
Al4/ldRAS3Ko9T/ITXyvpzbt0E0bZbG1pEIUYCcCx4u2T2wVCqjSt7d+tqmu4VLO
J2g+TVi+tFYKXCZCgLAH3rARo+3x7Lko8555vvN6RhcwbZs9MpY1r1eoXyjYdrb7
yW4gDayiGJmMTmOjPCBq45zavfyUH5avaMh4hRvlGZ3AIcqn+HVVCtgFL2FSWvyC
XD7/S6LoHblPYw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:07 2026 by rpki-client