This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File:                     hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier:          tk+Rb9l+nJ2c9CNTgt4SNpWNT4B7Q+ZFG0CRmzk1kAo=
Subject key identifier:   8F:2D:21:CE:87:36:A2:56:2D:A2:5D:5E:9C:0E:AC:1D:62:71:79:F1
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer:       /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial:       019C4434B13CF718CEA97D54DA93CD19B2F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number:          16A5
Signing time:             Mon 09 Feb 2026 21:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:29 +0000
Files and hashes:         1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
                          2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: U4NgrvrN88TqKv7DIAiLYZLCLNhbN8YVoKPVv1zUWw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:b1:3c:f7:18:ce:a9:7d:54:da:93:cd:19:b2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
        Validity
            Not Before: Feb  9 21:00:29 2026 GMT
            Not After : Feb 10 21:00:29 2026 GMT
        Subject: CN=8f2d21ce8736a2562da25d5e9c0eac1d627179f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:98:b5:0c:e4:a6:ba:e2:86:b4:33:9c:4f:
                    dc:bf:bb:16:72:ce:b4:ac:3b:04:7d:c8:90:29:4a:
                    99:b8:67:c1:d4:10:76:0c:20:cb:81:23:4a:a9:5d:
                    d0:6a:1d:03:a3:e3:e5:82:3c:78:d2:e1:5a:2e:ff:
                    82:00:61:cd:18:11:70:dd:54:46:a2:60:ff:4b:9e:
                    a3:d2:74:ba:2b:e2:68:05:b7:2f:cc:c1:01:59:8b:
                    a1:93:5e:8e:c3:89:9f:d7:f1:34:46:b8:a9:48:d0:
                    50:78:9d:c0:be:f2:b6:c4:f7:a3:9a:5e:6c:0a:48:
                    14:13:05:7a:14:51:9f:09:89:78:5c:61:68:58:85:
                    15:17:b6:06:d9:e4:48:62:ae:a1:b3:83:7c:4c:05:
                    88:bf:65:55:b0:b7:81:32:58:ba:58:fa:ac:da:51:
                    b0:2e:5b:18:40:33:6d:b3:d7:63:53:63:8d:eb:70:
                    48:81:b6:f4:85:91:7c:cc:d0:de:e0:a7:4b:a2:5e:
                    de:d4:a8:3b:57:57:a9:f8:92:c9:f1:fc:5b:74:99:
                    a0:44:58:59:f3:e3:c6:24:09:d9:02:6b:ce:f6:b4:
                    b0:28:c7:8e:5e:be:7f:0d:71:a4:1a:74:e5:ac:72:
                    f6:55:8d:c6:17:6e:9c:c7:5d:7b:17:41:54:4d:42:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:21:CE:87:36:A2:56:2D:A2:5D:5E:9C:0E:AC:1D:62:71:79:F1
            X509v3 Authority Key Identifier:
                keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:2d:3c:66:a6:4a:6f:01:3c:1a:33:6c:a7:4c:26:0b:88:
         2e:23:51:79:ae:29:c8:22:0c:0d:47:79:00:0d:9c:8a:a7:be:
         e0:35:c1:da:e2:8f:0e:1d:40:f1:a4:b7:8d:0c:6c:ed:34:2f:
         e5:98:91:87:12:47:4c:c2:8e:46:3f:86:12:5f:37:15:f1:26:
         7a:8e:f6:f0:fe:83:81:31:db:e9:aa:cf:bc:3b:3a:84:3e:63:
         8e:14:b5:df:c5:9c:e2:cb:14:8f:f5:30:31:9a:ed:f9:2a:b6:
         56:e5:53:98:95:ff:77:c1:b7:cc:04:6e:13:a2:c3:99:24:4c:
         93:0d:10:61:e1:9f:93:bc:0f:e3:86:7c:cc:58:73:f7:fc:2a:
         f9:c1:13:9a:06:3f:9e:b2:a4:15:e2:63:18:4d:de:1c:69:88:
         50:c1:f6:1b:0c:02:dc:9f:3a:4b:91:16:31:fd:4f:ff:ed:82:
         9e:7a:a2:7a:39:b6:b8:19:42:3e:8a:1f:4f:e1:74:fc:b0:e9:
         c7:fc:17:e1:6b:e2:7c:55:03:0b:6c:51:b6:4b:c0:c0:ae:27:
         be:1d:89:e6:4d:d1:8e:d9:00:76:59:9e:39:4e:a6:dd:01:41:
         4a:af:45:3f:41:93:6d:28:b7:b1:e4:35:ac:c8:00:49:fd:23:
         e2:b5:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:59 2026 by rpki-client