This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File:                     RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier:          oF2atwS01cg52UkheOLgJgCJVpUfvAXzu6skBIZSwjA=
Subject key identifier:   A1:CC:82:DD:6E:09:AF:4B:85:8D:9D:F0:B7:35:2B:89:83:27:B5:13
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer:       /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial:       019C4322D6189746AFE4DBB460D922CC8A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number:          06E8
Signing time:             Mon 09 Feb 2026 16:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:22 +0000
Files and hashes:         1: LH31eWblzc9N88J9ihjcAEm2GSU.roa (hash: aA7SpWPZXBL5dHzOmD7+zSVA2s9TImnC5p7oJrbvDXA=)
                          2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: /7yE+WSDwDUlId1aay+uMVtNl4+Rc6Pjv7VkHdtlLzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:d6:18:97:46:af:e4:db:b4:60:d9:22:cc:8a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
        Validity
            Not Before: Feb  9 16:01:22 2026 GMT
            Not After : Feb 10 16:01:22 2026 GMT
        Subject: CN=a1cc82dd6e09af4b858d9df0b7352b898327b513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:52:0b:aa:bd:e1:dd:85:8f:3e:a7:e2:68:
                    4f:5c:67:aa:18:23:95:63:4e:84:2d:fd:a4:57:31:
                    6a:a0:07:4a:0c:99:e7:b7:fb:fc:a0:7e:ab:22:df:
                    30:f5:53:38:05:4a:2d:d2:9b:8f:28:57:0f:6c:49:
                    0b:6d:cc:be:ce:38:9a:60:d3:32:b3:d9:9f:05:54:
                    3b:b7:06:3c:66:b5:b0:00:58:93:d0:21:aa:a9:de:
                    e9:75:2d:9a:d1:92:36:77:d2:5f:fc:71:22:39:84:
                    34:ac:fb:88:7d:b7:ee:5b:be:d3:fa:80:27:8d:2d:
                    16:c6:c2:52:89:ac:f6:c9:27:ad:4f:97:70:fe:bd:
                    85:60:f6:ea:26:3e:6f:6d:55:7b:a6:44:6c:82:a9:
                    b6:a3:ea:5a:52:50:25:da:f4:4a:f2:9f:fb:38:e4:
                    d8:f1:d7:d5:a3:72:07:4d:40:36:23:b6:0d:fa:dc:
                    6f:07:df:4e:d9:6b:6a:78:eb:ea:1e:94:66:38:d4:
                    f1:53:8e:3d:88:d2:d7:ed:ba:b6:82:94:bf:b9:c4:
                    d4:28:91:34:7b:28:19:9e:ac:2b:1e:4e:de:df:36:
                    87:74:fd:51:d4:e2:95:b5:f6:74:13:65:1a:fa:fb:
                    8e:68:5e:44:8a:51:bb:1b:3a:d8:c9:41:5a:aa:c9:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:82:DD:6E:09:AF:4B:85:8D:9D:F0:B7:35:2B:89:83:27:B5:13
            X509v3 Authority Key Identifier:
                keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:f3:5a:ed:4f:c0:45:2c:f0:c9:eb:be:9a:45:cb:c4:3d:
         2f:29:a4:92:07:84:e3:7b:28:e1:39:81:d6:4f:24:70:02:0d:
         69:c8:6c:dd:e4:f7:1f:85:5a:ca:dc:01:5a:b8:ff:3f:ce:68:
         a8:14:48:62:a0:b1:65:12:ac:d4:f5:85:80:bb:32:9f:c3:53:
         67:e9:96:ca:0d:7c:f6:82:3e:b0:d5:ce:a2:ed:a7:4a:1f:a1:
         66:83:64:e4:96:24:c1:c2:e6:ae:c0:76:71:6e:42:a4:23:eb:
         99:60:ad:25:c1:ca:c8:3e:f1:4d:25:c2:88:a0:a7:49:23:9c:
         41:f9:24:34:cc:de:b0:7e:1d:85:9a:5f:6b:50:f6:e1:07:22:
         f5:35:06:ec:92:6d:55:73:cc:b0:4f:15:ba:e8:f8:8d:84:b0:
         7d:b9:09:b6:00:24:95:d7:d8:7b:d8:c8:77:0c:5f:ba:a9:25:
         2a:23:9c:57:49:36:00:45:f4:a4:1e:52:f1:bb:62:47:7c:fe:
         9b:db:f4:2d:7a:cd:9e:74:fb:7f:01:ba:35:0d:ed:4d:f7:7d:
         7d:aa:f0:5b:1b:29:6f:cb:a3:f1:f7:df:69:33:f8:d0:92:ba:
         4c:e3:91:48:ca:78:60:38:1b:78:de:f1:2d:1b:19:1e:7a:7a:
         9e:6d:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:50 2026 by rpki-client