This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
File:                     HVceK9tBEuxdazpkuxe_CygP5uE.mft (raw, json)
Hash identifier:          rQy543S5LUuOs7SGdMoW/wgAlZCRO9Z/gRJewisYEUA=
Subject key identifier:   FE:F2:46:0D:89:AD:63:10:48:15:16:5D:8E:96:D2:8A:EA:B3:DA:D8
Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
Certificate issuer:       /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Certificate serial:       019C43226F449B63120DF257D29F114DB00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
Manifest number:          0F96
Signing time:             Mon 09 Feb 2026 16:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:55 +0000
Files and hashes:         1: HVceK9tBEuxdazpkuxe_CygP5uE.crl (hash: OAOb99qUr/wx/c/6m8DgCtnYeaY8sB4PW9gHBMi5lu0=)
                          2: WgW7_1NWoWpm4jNdRh3wAV6b-iQ.roa (hash: VRgHLs3EnvMZ31H9FL0qZ2OCVPVRz1uxVc4Bjt1PMc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6f:44:9b:63:12:0d:f2:57:d2:9f:11:4d:b0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
        Validity
            Not Before: Feb  9 16:00:55 2026 GMT
            Not After : Feb 10 16:00:55 2026 GMT
        Subject: CN=fef2460d89ad63104815165d8e96d28aeab3dad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:f7:2b:dd:86:e5:94:c9:b9:34:e8:ed:89:
                    6c:eb:64:60:01:8f:69:88:f1:5f:6f:6e:d7:89:5b:
                    96:6b:d8:99:20:5a:c9:66:b2:d6:89:30:e3:e8:f3:
                    d3:4a:5c:0a:a3:75:81:3a:b8:ba:fe:ab:37:b7:c9:
                    2b:5c:e0:80:94:ff:2f:6a:00:9c:26:ed:3b:73:b0:
                    a1:79:05:d1:19:eb:1e:46:af:28:40:92:ab:c6:38:
                    c1:61:54:44:d6:1b:fa:07:28:d1:ca:ec:59:8f:d8:
                    98:09:55:ce:ba:3b:47:f3:fd:e7:97:e0:92:3a:e9:
                    97:0e:1e:41:00:a1:e3:b5:68:77:58:c4:5e:dd:aa:
                    ca:31:92:a4:03:96:b0:12:e4:99:95:73:9d:ca:d8:
                    52:dc:e1:d7:d6:17:7d:29:ba:7f:5a:13:1e:1b:70:
                    74:2a:a4:b5:9c:77:7c:ef:ca:44:27:25:c6:bb:8a:
                    7b:f0:e4:4b:d3:fe:c2:93:83:3e:42:d7:b3:3c:f5:
                    a4:e2:ef:33:04:7e:43:cd:26:7f:5c:0c:b6:c0:47:
                    b0:a0:8a:ff:34:13:bc:51:85:23:4c:a7:6d:d6:2c:
                    34:40:75:68:bc:65:0b:c6:4f:13:58:06:7b:af:9b:
                    ba:87:b1:52:28:c7:52:f8:de:23:df:9c:e4:ae:37:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F2:46:0D:89:AD:63:10:48:15:16:5D:8E:96:D2:8A:EA:B3:DA:D8
            X509v3 Authority Key Identifier:
                keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:fb:84:d4:f8:03:89:1e:0e:08:a7:58:2a:38:6c:74:73:
         ed:97:32:ac:66:33:a0:b6:2a:53:a7:04:9a:93:70:8e:b6:aa:
         10:ad:2e:cf:d8:ad:b0:f7:5b:99:fe:03:8a:ab:03:a9:d1:b5:
         cd:43:61:bc:01:1e:ef:d7:f9:18:09:0e:fd:74:50:21:e3:99:
         12:6e:bb:bb:e2:08:7f:8e:ea:93:6b:42:bd:70:1a:6f:9e:df:
         92:c7:a3:53:a6:ab:d7:d7:28:7f:0b:fe:06:87:2a:df:ab:fd:
         bd:1f:f5:64:1e:87:6e:68:2b:ff:a2:e8:67:8d:60:69:c0:ec:
         4a:c1:e5:25:80:d3:ae:9c:d3:00:ad:aa:c0:78:29:5b:e3:b6:
         76:57:ed:2d:0e:c7:67:15:fe:e9:fa:b3:f0:a5:63:0d:90:3d:
         10:d7:73:57:b6:ce:9b:f5:75:f1:dc:4e:83:76:49:fd:26:db:
         3b:47:8e:e9:46:cd:80:2a:ae:ed:99:62:74:36:1a:db:c8:2e:
         be:8a:18:8e:5c:10:30:50:bc:51:8b:0e:92:b2:6e:40:83:a1:
         6f:36:da:43:0a:0d:68:40:8d:f0:98:99:d5:d8:fc:68:16:b4:
         4c:27:b2:7e:eb:62:f2:ff:60:c6:ec:a0:29:38:84:f7:2b:0c:
         9c:45:f1:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIm9Em2MSDfJX0p8RTbANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTcxZTJiZGI0MTEyZWM1ZDZiM2E2NGJiMTdiZjBiMjgw
ZmU2ZTEwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD
EyhmZWYyNDYwZDg5YWQ2MzEwNDgxNTE2NWQ4ZTk2ZDI4YWVhYjNkYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3f3K92G5ZTJuTTo7Yls62RgAY9p
iPFfb27XiVuWa9iZIFrJZrLWiTDj6PPTSlwKo3WBOri6/qs3t8krXOCAlP8vagCc
Ju07c7CheQXRGeseRq8oQJKrxjjBYVRE1hv6ByjRyuxZj9iYCVXOujtH8/3nl+CS
OumXDh5BAKHjtWh3WMRe3arKMZKkA5awEuSZlXOdythS3OHX1hd9Kbp/WhMeG3B0
KqS1nHd878pEJyXGu4p78ORL0/7Ck4M+QtezPPWk4u8zBH5DzSZ/XAy2wEewoIr/
NBO8UYUjTKdt1iw0QHVovGULxk8TWAZ7r5u6h7FSKMdS+N4j35zkrjedIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7yRg2JrWMQSBUWXY6W0orqs9rYMB8GA1UdIwQY
MBaAFB1XHivbQRLsXWs6ZLsXvwsoD+bhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUt
ZGIyNTcyZGFjYjQ1LzEvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUtZGIyNTcyZGFjYjQ1
LzEvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez77hNT4
A4keDginWCo4bHRz7ZcyrGYzoLYqU6cEmpNwjraqEK0uz9itsPdbmf4DiqsDqdG1
zUNhvAEe79f5GAkO/XRQIeOZEm67u+IIf47qk2tCvXAab57fksejU6ar19cofwv+
Bocq36v9vR/1ZB6Hbmgr/6LoZ41gacDsSsHlJYDTrpzTAK2qwHgpW+O2dlftLQ7H
ZxX+6fqz8KVjDZA9ENdzV7bOm/V18dxOg3ZJ/SbbO0eO6UbNgCqu7ZlidDYa28gu
vooYjlwQMFC8UYsOkrJuQIOhbzbaQwoNaECN8JiZ1dj8aBa0TCeyfuti8v9gxuyg
KTiE9ysMnEXxng==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:44 2026 by rpki-client