This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File:                     Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier:          C8DeEGYMbe41Xn8yvo0OowpluNqkAh83TY3yKHiFkr8=
Subject key identifier:   6C:C5:BE:33:07:F1:64:D5:FF:2C:19:1A:D9:18:EE:09:98:34:C8:72
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer:       /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial:       019C42EB18052CC48FFB79332460E55AB621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 15:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:29 +0000
Files and hashes:         1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: 4BQF3uBgO8/aB6DGK5QlapTf3e57b1FM2cJ1dSXK2Xs=)
                          2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:18:05:2c:c4:8f:fb:79:33:24:60:e5:5a:b6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
        Validity
            Not Before: Feb  9 15:00:29 2026 GMT
            Not After : Feb 10 15:00:29 2026 GMT
        Subject: CN=6cc5be3307f164d5ff2c191ad918ee099834c872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:3e:28:87:04:34:41:98:b9:3e:3c:6d:fa:
                    13:fb:48:34:92:83:1a:1a:a6:97:0b:00:97:0f:88:
                    d0:0e:f7:18:a8:a1:18:51:c9:ee:03:a6:91:9a:47:
                    88:b1:32:d5:e0:a5:58:b2:5b:f3:9f:93:7e:d3:a9:
                    91:a9:65:c0:aa:c5:8c:b0:f1:19:e3:d9:6a:f7:de:
                    99:29:8f:61:8c:43:3a:10:e7:21:c9:fa:79:33:32:
                    b0:08:a0:a2:d9:65:cf:36:59:39:8a:1b:4e:14:e1:
                    a6:ad:30:d6:af:5a:58:7d:41:d2:65:e3:34:af:6c:
                    8d:b1:31:6b:5d:54:08:29:23:27:af:f3:09:9b:92:
                    05:f7:ab:85:50:63:5c:2c:8d:76:9d:85:27:28:cc:
                    9f:53:24:3a:30:77:40:80:fd:5d:79:71:f9:7e:ea:
                    0d:dc:43:48:b1:83:d9:ff:2a:fc:0b:92:b9:2a:27:
                    4b:04:f7:70:d7:bc:37:3e:f9:dc:37:65:e7:60:91:
                    11:c8:7a:c2:91:ad:01:08:da:f6:a5:40:3c:5d:29:
                    a6:dc:3f:a6:9f:64:eb:19:d2:e7:2c:61:88:d0:50:
                    e2:15:67:71:0f:66:88:0d:d0:66:96:09:0a:cc:e2:
                    3f:a3:a9:82:ce:6c:c1:07:77:aa:ba:ba:66:5d:e4:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:BE:33:07:F1:64:D5:FF:2C:19:1A:D9:18:EE:09:98:34:C8:72
            X509v3 Authority Key Identifier:
                keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:d4:fe:85:3b:0c:cd:0c:d2:dc:91:c3:33:89:d5:de:0c:
         f5:4b:d6:61:84:a1:9c:b6:6e:1e:af:be:b2:6b:dd:a4:f7:50:
         cf:92:ba:df:dd:83:27:85:58:3b:c0:4c:69:97:6f:83:ed:29:
         b7:1a:4d:cb:97:00:9b:4c:24:ac:ca:5c:9d:09:1f:2b:9f:0a:
         1b:c4:97:af:d7:78:ce:5f:d4:57:7c:de:cb:7c:92:e2:1f:07:
         e9:d3:47:85:79:df:5f:ab:09:07:6d:ac:86:5f:e2:f3:65:94:
         22:00:a0:e0:f2:9c:e7:48:86:50:d7:cf:6d:b5:60:da:4b:ee:
         9a:8f:a9:76:95:8e:87:38:c3:58:3d:fb:c7:52:5b:78:05:93:
         a4:d2:9a:18:b7:5c:8c:c1:38:f4:a8:37:d0:0e:60:00:e7:4e:
         e2:dd:3a:3a:3e:ac:4c:c7:13:2e:66:58:e7:ca:0a:e5:82:9b:
         bc:c4:81:51:e0:75:63:01:a9:de:06:08:98:71:a9:ff:27:9a:
         df:17:1b:9d:15:0f:f2:a3:2f:8c:98:db:ff:57:9b:9e:b2:4d:
         af:49:75:75:4d:26:5d:76:ea:81:e1:83:36:f1:2b:02:c7:b2:
         fb:7d:e2:da:c1:76:37:0b:31:74:7f:b7:64:29:61:6d:4f:b3:
         a1:38:1e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6xgFLMSP+3kzJGDlWrYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh
NjZkMTgwHhcNMjYwMjA5MTUwMDI5WhcNMjYwMjEwMTUwMDI5WjAzMTEwLwYDVQQD
Eyg2Y2M1YmUzMzA3ZjE2NGQ1ZmYyYzE5MWFkOTE4ZWUwOTk4MzRjODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvik+KIcENEGYuT48bfoT+0g0koMa
GqaXCwCXD4jQDvcYqKEYUcnuA6aRmkeIsTLV4KVYslvzn5N+06mRqWXAqsWMsPEZ
49lq996ZKY9hjEM6EOchyfp5MzKwCKCi2WXPNlk5ihtOFOGmrTDWr1pYfUHSZeM0
r2yNsTFrXVQIKSMnr/MJm5IF96uFUGNcLI12nYUnKMyfUyQ6MHdAgP1deXH5fuoN
3ENIsYPZ/yr8C5K5KidLBPdw17w3PvncN2XnYJERyHrCka0BCNr2pUA8XSmm3D+m
n2TrGdLnLGGI0FDiFWdxD2aIDdBmlgkKzOI/o6mCzmzBB3equrpmXeQCXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzFvjMH8WTV/ywZGtkY7gmYNMhyMB8GA1UdIwQY
MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt
NWViZDhlYWVlMmM2LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2
LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvHU/oU7
DM0M0tyRwzOJ1d4M9UvWYYShnLZuHq++smvdpPdQz5K6392DJ4VYO8BMaZdvg+0p
txpNy5cAm0wkrMpcnQkfK58KG8SXr9d4zl/UV3zey3yS4h8H6dNHhXnfX6sJB22s
hl/i82WUIgCg4PKc50iGUNfPbbVg2kvumo+pdpWOhzjDWD37x1JbeAWTpNKaGLdc
jME49Kg30A5gAOdO4t06Oj6sTMcTLmZY58oK5YKbvMSBUeB1YwGp3gYImHGp/yea
3xcbnRUP8qMvjJjb/1ebnrJNr0l1dU0mXXbqgeGDNvErAsey+33i2sF2NwsxdH+3
ZClhbU+zoTgeBA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:59 2026 by rpki-client