This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File:                     hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier:          iGce4ufCFN8HB0L2Sm1v1jvYAXizQtdOlv7zLFsBFj8=
Subject key identifier:   8B:B8:61:EB:DE:AC:7A:88:51:F6:00:8E:8B:2B:5A:A0:4E:22:06:8B
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer:       /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial:       019C42B472F009127B49B6A55136AA929505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:47 +0000
Files and hashes:         1: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: 95D5Gnq+i1gO/3zjM1+kX7WrmKuovqu0iTPJA+mZliA=)
                          2: xd4uF5A-A5iD95Zuer1EQgUg4c4.roa (hash: zL8osWE5mYbHuTzixEhig2aehz5wUK5OJXXALOyQ/Ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:72:f0:09:12:7b:49:b6:a5:51:36:aa:92:95:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
        Validity
            Not Before: Feb  9 14:00:47 2026 GMT
            Not After : Feb 10 14:00:47 2026 GMT
        Subject: CN=8bb861ebdeac7a8851f6008e8b2b5aa04e22068b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:45:8a:7b:00:4a:7c:42:96:95:cf:d8:39:
                    c1:da:f1:95:ab:0f:b9:2e:9a:70:84:25:37:bb:f2:
                    9e:0b:2f:66:69:db:e2:06:c8:8b:50:56:ab:f1:79:
                    0f:f0:bc:d3:1a:5a:82:2b:10:53:f7:c7:60:8b:81:
                    fe:6d:90:7b:dd:06:de:af:86:53:a8:0c:3d:61:31:
                    24:40:db:4a:1c:b4:88:5a:57:98:63:20:f3:89:35:
                    03:64:21:37:dc:84:01:f6:0a:0c:33:09:0d:97:67:
                    c1:ec:d7:15:f6:e6:e7:14:93:02:a5:c1:e6:88:2c:
                    9d:ef:2b:7c:3a:9f:98:8f:80:e3:fb:3d:fd:84:60:
                    8a:3b:d9:83:8d:b0:fa:5c:b4:63:4f:9f:0c:3f:9f:
                    e8:27:1e:c4:30:d6:94:1e:de:60:93:67:88:cd:e4:
                    1b:68:17:3d:3f:6c:d4:1e:10:31:bf:b5:21:3e:40:
                    11:c7:82:35:b5:ab:e4:72:90:75:83:ce:2a:bc:dc:
                    00:6e:0f:59:da:59:9e:a5:55:de:49:4b:21:4f:b5:
                    b1:cc:33:6a:35:1f:d0:82:a0:fd:63:f8:7c:f6:4c:
                    9c:79:61:57:71:b3:12:fb:27:ee:16:8f:bd:bc:1f:
                    51:40:be:85:7b:9c:29:49:a4:3c:47:e2:b3:62:46:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B8:61:EB:DE:AC:7A:88:51:F6:00:8E:8B:2B:5A:A0:4E:22:06:8B
            X509v3 Authority Key Identifier:
                keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:90:c8:31:7a:50:b8:89:ea:d8:04:90:19:6d:3f:e3:3d:
         43:19:c5:fd:4e:90:23:3d:92:55:a2:93:e2:af:9d:4e:40:63:
         ef:09:38:11:15:0d:ab:bb:c4:d4:7a:6c:df:d1:0d:64:21:10:
         c8:a0:fb:cc:7a:ba:26:f7:70:71:d1:b4:2e:21:d2:bc:ec:a6:
         eb:bf:c6:48:79:97:a4:1b:5c:7e:cc:3a:20:40:1b:7a:27:9d:
         29:28:35:77:46:f2:df:98:ba:f8:b1:ba:35:cc:af:8a:2e:3a:
         c7:7b:4e:28:56:cd:c1:b7:3f:68:1f:5c:c7:60:98:e0:de:46:
         a2:8c:b1:33:64:39:4a:23:e2:d9:29:1a:bb:3d:ba:47:0a:7e:
         7e:d8:26:a0:5a:63:49:d2:29:2a:d5:47:7a:9f:a8:0d:a5:3c:
         88:59:5a:37:16:ae:28:c2:ba:81:79:3d:ff:a4:c6:2d:a0:75:
         7b:d3:ba:be:64:04:f0:bd:2c:51:e9:48:fa:8c:a5:d7:56:ee:
         34:3f:20:5f:31:dc:ec:be:28:bf:c6:ba:31:ad:c2:ab:df:0b:
         9f:40:9e:bc:6f:07:a9:bd:ab:41:5e:d4:73:29:15:1d:21:88:
         56:9e:1c:2f:a6:ed:98:ca:e3:af:9e:da:56:05:b0:ce:b0:76:
         57:6d:01:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtHLwCRJ7SbalUTaqkpUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MTA2YmZhMDIzZjE3Y2Y2ZDY3ZWFjOWZkZDI4NjhhNzJm
NzY2ODAwHhcNMjYwMjA5MTQwMDQ3WhcNMjYwMjEwMTQwMDQ3WjAzMTEwLwYDVQQD
Eyg4YmI4NjFlYmRlYWM3YTg4NTFmNjAwOGU4YjJiNWFhMDRlMjIwNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s5FinsASnxClpXP2DnB2vGVqw+5
LppwhCU3u/KeCy9madviBsiLUFar8XkP8LzTGlqCKxBT98dgi4H+bZB73Qber4ZT
qAw9YTEkQNtKHLSIWleYYyDziTUDZCE33IQB9goMMwkNl2fB7NcV9ubnFJMCpcHm
iCyd7yt8Op+Yj4Dj+z39hGCKO9mDjbD6XLRjT58MP5/oJx7EMNaUHt5gk2eIzeQb
aBc9P2zUHhAxv7UhPkARx4I1tavkcpB1g84qvNwAbg9Z2lmepVXeSUshT7WxzDNq
NR/QgqD9Y/h89kyceWFXcbMS+yfuFo+9vB9RQL6Fe5wpSaQ8R+KzYkZaUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu4YeverHqIUfYAjosrWqBOIgaLMB8GA1UdIwQY
MBaAFIQQa/oCPxfPbWfqyf3Shopy92aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYt
YjYyNmQ1NzQ2ZDEzLzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYtYjYyNmQ1NzQ2ZDEz
LzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnOQyDF6
ULiJ6tgEkBltP+M9QxnF/U6QIz2SVaKT4q+dTkBj7wk4ERUNq7vE1Hps39ENZCEQ
yKD7zHq6JvdwcdG0LiHSvOym67/GSHmXpBtcfsw6IEAbeiedKSg1d0by35i6+LG6
Ncyvii46x3tOKFbNwbc/aB9cx2CY4N5GooyxM2Q5SiPi2Skauz26Rwp+ftgmoFpj
SdIpKtVHep+oDaU8iFlaNxauKMK6gXk9/6TGLaB1e9O6vmQE8L0sUelI+oyl11bu
ND8gXzHc7L4ov8a6Ma3Cq98Ln0CevG8Hqb2rQV7UcykVHSGIVp4cL6btmMrjr57a
VgWwzrB2V20BKQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:50 2026 by rpki-client