This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
File:                     HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json)
Hash identifier:          Krn4k5f8Nn48ZLXozUtNqTzZkg7H62HkwALADTGXONk=
Subject key identifier:   06:CE:24:7F:D5:6B:76:7F:6A:54:A3:7E:10:4E:A1:D5:E9:A2:34:93
Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE
Certificate issuer:       /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
Certificate serial:       019C4246A2C389161915381B07E460B63164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
Manifest number:          116C
Signing time:             Mon 09 Feb 2026 12:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:51 +0000
Files and hashes:         1: CvlT8XgWCNuSSaYILqFrDUnlk8Q.roa (hash: /PY60x69f1RFb1+VeQA4srQb3VpoSBgqHMBssXQXw/A=)
                          2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: a/ILXoWKPGsd7GiZXegOFvEoE0IombBaOVfIKIBhr8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a2:c3:89:16:19:15:38:1b:07:e4:60:b6:31:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe
        Validity
            Not Before: Feb  9 12:00:51 2026 GMT
            Not After : Feb 10 12:00:51 2026 GMT
        Subject: CN=06ce247fd56b767f6a54a37e104ea1d5e9a23493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ff:42:c5:a9:5a:4a:fd:eb:5f:45:7c:9f:44:
                    93:23:d4:8a:c9:c3:da:d0:32:fc:ce:3e:6e:0d:0a:
                    a1:55:41:6c:c5:6b:d8:80:54:48:9b:a0:70:c1:3a:
                    1a:e0:89:7e:f2:8f:f6:cb:f9:ee:33:e6:f4:fb:50:
                    8f:a4:25:90:df:50:3f:2b:c8:3d:79:1c:36:27:b1:
                    b9:18:76:c2:d9:a8:35:d1:05:ac:02:f8:bc:5b:f9:
                    9c:b4:48:c5:56:bf:13:cc:31:d4:e1:7f:96:25:57:
                    2c:26:a3:cc:22:7b:17:dc:64:d6:76:4d:65:94:45:
                    33:93:55:68:3c:e0:2a:d0:9f:28:71:c3:5d:da:6a:
                    dd:fe:cf:96:8b:fd:0f:10:7e:dc:6b:8f:42:dc:c2:
                    3a:e8:39:aa:b1:a9:48:a1:f1:c2:4e:31:32:52:e8:
                    ef:6d:5a:77:92:d5:81:81:c4:8f:b5:9d:03:d7:cf:
                    30:2c:90:c2:36:4f:b8:94:c5:80:30:0d:1d:e1:02:
                    44:72:59:82:b1:ab:ed:bb:82:4c:b0:5f:a4:21:2c:
                    95:5c:de:27:bb:c3:67:6c:46:89:82:2a:04:a2:2a:
                    da:b1:0c:f3:5e:93:b1:39:f3:c3:41:ef:39:73:d2:
                    0e:92:5f:a2:68:5b:81:b7:a7:57:1c:e7:f0:23:29:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:24:7F:D5:6B:76:7F:6A:54:A3:7E:10:4E:A1:D5:E9:A2:34:93
            X509v3 Authority Key Identifier:
                keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6e:3d:e0:49:c9:f7:f3:05:7d:be:12:8f:df:cf:d2:76:ed:
         7b:2c:90:71:0d:c6:84:4a:e5:6f:b9:b1:92:a1:c1:1f:3b:2c:
         23:f9:70:1d:93:34:f4:be:21:e9:fb:87:9d:38:1f:81:54:30:
         ed:f4:0a:d6:90:45:a2:cd:9e:28:8b:26:0f:15:66:5e:39:8f:
         d0:af:a9:29:ae:cf:14:dd:bd:99:c6:7e:80:07:72:d3:cc:5a:
         59:0d:58:b5:e9:80:aa:0e:81:6f:ee:4c:4d:61:f5:ab:b4:c0:
         2a:fe:a0:08:23:cc:ce:ff:d1:ae:9a:ec:55:0c:42:7f:92:45:
         76:9b:c4:31:0e:d3:89:bb:2f:8c:dc:35:5f:50:95:a2:8b:53:
         45:f4:d3:b8:12:60:a1:1f:f8:cf:5b:0a:15:37:5f:72:a7:e2:
         db:f6:69:74:ca:e6:fd:20:84:0c:95:5d:f9:8a:f7:0a:3e:b9:
         b5:b7:b4:96:b9:15:e3:72:32:06:93:3a:3a:28:74:34:7e:56:
         3a:ca:f2:46:27:93:ff:b2:25:41:d2:2f:5b:25:12:32:12:96:
         43:9c:36:2e:48:30:c8:04:0b:35:a1:f3:97:69:0f:b4:1c:f6:
         fb:01:f3:10:10:d6:a3:ec:dd:fd:6c:a4:5c:0a:3c:d9:b4:97:
         23:00:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:50 2026 by rpki-client