This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File:                     Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier:          BSjpo3IG3Hv0yGhMSek4152DhpZc6AauhouiymrKxLY=
Subject key identifier:   B4:0B:9E:B4:21:EF:F2:D6:42:E6:5B:B8:F2:92:E6:62:07:56:E8:74
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer:       /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial:       019C42EB23E94595F236B78EF328EE9C6BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number:          1154
Signing time:             Mon 09 Feb 2026 15:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:32 +0000
Files and hashes:         1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: 23GEMFvVxUXedjRLId20jR0Rl4ZmA/wqfk3UuAnkjuc=)
                          2: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (hash: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:23:e9:45:95:f2:36:b7:8e:f3:28:ee:9c:6b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
        Validity
            Not Before: Feb  9 15:00:32 2026 GMT
            Not After : Feb 10 15:00:32 2026 GMT
        Subject: CN=b40b9eb421eff2d642e65bb8f292e6620756e874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:fb:32:28:e6:17:79:1f:67:b5:24:91:1e:
                    e1:0d:ff:8d:8c:ce:fd:a7:36:38:1d:b6:78:61:b2:
                    e9:49:8a:64:d9:17:cb:b2:e5:fa:0a:d1:4d:d2:7a:
                    da:f3:cc:68:5f:6b:90:5a:64:46:8d:6c:b4:af:e9:
                    95:7d:e4:8b:e2:68:38:73:d2:c6:d9:81:de:9c:ad:
                    9b:f6:33:79:34:01:9d:ba:cf:56:82:e8:87:43:df:
                    f4:6d:fa:42:bb:4c:d9:d0:eb:76:6c:a9:ed:e0:b6:
                    55:dc:10:01:e7:45:2e:aa:e0:d1:ed:78:45:68:65:
                    7b:7c:7e:dd:ea:45:9a:98:15:41:79:92:2f:e7:14:
                    4b:eb:b3:ea:21:6d:fd:31:6b:27:8b:b3:eb:2e:6f:
                    9d:9b:e5:43:0a:f4:b9:8f:84:3b:08:9c:c5:6f:2e:
                    53:64:0e:e0:2e:b6:65:64:81:67:24:f3:ce:eb:a6:
                    e8:2d:19:b1:45:dd:76:83:43:69:2c:9c:ae:32:16:
                    d1:1e:19:ec:0c:90:c1:be:c1:da:0f:7a:95:a0:e7:
                    e1:3d:df:0c:89:4d:a3:33:d8:f9:a3:a1:49:5c:94:
                    00:a9:b2:bc:e7:48:cd:21:ed:d0:ab:e8:7a:e9:2e:
                    f8:14:f4:f7:2d:c6:07:ea:32:3a:15:50:8a:91:2c:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:9E:B4:21:EF:F2:D6:42:E6:5B:B8:F2:92:E6:62:07:56:E8:74
            X509v3 Authority Key Identifier:
                keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:61:da:5a:95:7a:c1:64:ce:e4:3d:98:dd:d8:44:c6:9a:
         b1:01:fd:74:4e:91:50:64:d0:2a:f2:8c:e7:61:04:ae:db:6f:
         e3:33:95:87:0d:c2:35:a5:af:61:3c:f9:ec:f2:f0:23:a0:60:
         80:aa:4a:de:a2:de:4f:04:49:ae:94:70:9b:3e:7e:3a:85:44:
         f1:23:a1:e4:43:d9:e8:d1:84:12:cf:0b:06:81:0b:e4:dc:96:
         da:31:3c:f0:5c:71:c1:b1:81:b3:6f:b9:3c:b0:6f:28:65:cc:
         38:78:e6:86:07:72:b6:08:f7:ec:e2:78:f5:93:92:53:bc:ee:
         ee:05:26:fe:6d:ef:74:cf:26:ad:f6:8d:cc:67:e9:2d:2d:7d:
         6f:60:c2:f5:58:bf:b7:74:f9:f1:55:80:d2:fb:43:82:cf:77:
         ed:51:c8:b0:6d:5b:24:bb:28:93:a6:f6:d7:0e:f2:58:4f:53:
         15:d3:a2:89:84:f5:32:1c:42:30:1e:07:99:c0:af:81:41:0c:
         25:ec:8b:9e:65:21:13:8c:3c:aa:76:76:bd:0f:94:e1:9c:4b:
         09:e8:9d:0b:50:57:67:99:74:0f:c0:14:c2:38:73:9f:62:d7:
         4f:cc:07:c1:b6:86:05:47:98:9a:57:70:2f:f5:14:a5:cd:78:
         82:95:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:07 2026 by rpki-client