This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File:                     HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier:          ly0bTDyN74HiaE+lYlduffLr3it0SzPwSz7bt7QCq08=
Subject key identifier:   02:1C:F5:BB:EB:05:03:B4:73:D5:9F:BF:B0:14:BE:0C:56:6D:38:8A
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer:       /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial:       019C439006EB43C52D4FB01A81C3B66E2A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number:          170E
Signing time:             Mon 09 Feb 2026 18:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:38 +0000
Files and hashes:         1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: +E8qewqn/d2+qQ0wCWLppRIxOlQBQX2xdicTmXTQtYw=)
                          2: XZdZ3QdqZkyYtFe6KuyRNBgkaUk.roa (hash: WFUH9QQhsuK7yi+HSNyW0FR+h8Iicrop+bexARdD/MU=)
                          3: j3lX8yQWL8LBKoz7Er2avujRZnQ.roa (hash: E4CQ6y9yaKiqNoiUV3Ybil719Gat8U/Ov4bwRDJRzts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:06:eb:43:c5:2d:4f:b0:1a:81:c3:b6:6e:2a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
        Validity
            Not Before: Feb  9 18:00:38 2026 GMT
            Not After : Feb 10 18:00:38 2026 GMT
        Subject: CN=021cf5bbeb0503b473d59fbfb014be0c566d388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:3f:78:49:ff:92:27:e4:46:80:ab:a9:e5:
                    ec:85:85:12:c8:79:f7:a2:68:19:c8:8b:9e:13:5b:
                    31:32:d2:1e:97:86:96:27:1f:17:44:fc:5d:54:79:
                    97:88:a4:bb:d8:b3:34:d7:19:cb:53:d4:b9:e4:0c:
                    6c:24:fd:45:bd:09:c8:0e:fc:5a:9d:66:65:99:81:
                    9a:53:c8:7e:55:7b:8f:d8:ed:80:cf:8e:4b:d8:fa:
                    d4:b8:c5:f2:c1:eb:57:20:80:4a:4a:7b:62:ba:14:
                    01:dd:bf:3c:4d:f6:ed:f3:6f:c2:12:1c:42:07:02:
                    38:de:9f:32:37:d4:f2:64:1e:74:17:2d:5d:6c:98:
                    d6:2b:7a:03:e2:57:3e:2c:80:6f:5c:c5:6c:44:e4:
                    2e:f5:fa:19:81:e5:7c:d8:90:0f:6e:8c:b5:de:62:
                    21:2a:8f:4e:95:e7:60:44:01:5d:58:f3:8f:b3:1a:
                    3d:db:46:f7:cf:c5:3e:c0:29:bf:c5:a6:ff:04:50:
                    e9:d4:ad:66:93:d8:57:f1:93:b1:d3:a1:b4:40:94:
                    6c:18:0e:6e:79:05:3c:f9:ab:be:f8:8d:13:46:73:
                    6f:35:62:6f:7d:d9:4d:39:a9:0a:6f:c6:01:f7:cb:
                    1d:cf:ff:b2:81:b9:8b:21:15:93:78:f1:cf:cb:5e:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1C:F5:BB:EB:05:03:B4:73:D5:9F:BF:B0:14:BE:0C:56:6D:38:8A
            X509v3 Authority Key Identifier:
                keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:77:27:56:a3:c0:c7:4f:88:d5:8c:0a:0f:03:ea:62:7a:
         f4:b3:6f:ff:13:f6:04:5e:64:35:70:b3:35:0b:08:5a:3e:f8:
         56:0e:5f:d0:10:42:dd:01:76:a6:cd:24:b4:87:4d:5e:12:80:
         e6:33:29:3e:bb:ed:d6:2f:1c:b9:35:2b:f3:4b:92:da:cd:0d:
         a6:9e:93:22:99:e5:3f:92:d0:37:f9:36:86:13:eb:55:30:2c:
         3d:64:3a:e6:96:27:20:0e:de:74:93:80:0a:ad:7c:a2:08:00:
         65:84:a0:f6:dd:8d:50:d5:bc:6a:c6:f9:cd:62:3d:be:36:d7:
         e3:2a:e0:0f:43:66:14:a6:c6:c0:16:f1:d4:92:8e:89:b8:91:
         56:47:92:5f:07:6c:82:26:d9:74:83:c9:72:6e:17:3f:28:ef:
         cd:9f:4a:b8:8b:08:6d:5d:04:6a:a0:e1:ec:87:04:1f:37:c9:
         11:72:38:56:1d:bd:fc:80:84:b0:b5:49:d6:07:b5:e0:27:d2:
         dd:cc:53:ef:fc:73:de:78:3d:dd:42:a9:c8:c2:8b:4d:b3:ad:
         89:88:ea:90:5f:02:50:a7:f6:e8:6b:59:da:26:71:92:10:d7:
         4e:41:a3:ff:b9:0e:d2:e1:f6:0c:42:03:d4:d7:21:bb:96:73:
         56:1e:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:22 2026 by rpki-client