This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          V2hR3uke9J4KeTyOtNKos5BqjlrCRaCToMZMKaaUnQw=
Subject key identifier:   1F:A0:94:C3:C3:7A:61:D8:D9:55:40:72:ED:F8:CC:5C:AA:30:80:AC
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       019C41D865833E031EA475F97AEF026DE65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          1768
Signing time:             Mon 09 Feb 2026 10:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:26 +0000
Files and hashes:         1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: W5K6W5BN3wncJpnUeEFBmeELmbHyZFjxbwcj0AV912o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:65:83:3e:03:1e:a4:75:f9:7a:ef:02:6d:e6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Feb  9 10:00:26 2026 GMT
            Not After : Feb 10 10:00:26 2026 GMT
        Subject: CN=1fa094c3c37a61d8d9554072edf8cc5caa3080ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:5c:48:ad:b6:9a:43:c0:7c:11:e1:80:d7:
                    f8:23:f6:0d:1b:63:3c:2f:3c:46:52:2d:ec:37:7a:
                    76:d1:0c:54:c7:99:3c:ab:aa:ba:ea:a9:5f:80:3a:
                    15:c8:08:8a:19:c4:03:d4:9a:cb:4d:df:10:49:05:
                    6c:e4:c7:da:46:93:19:f3:a4:46:db:1a:f0:bb:7e:
                    eb:2b:2d:04:d6:ac:df:70:cb:06:97:af:3e:3d:c9:
                    cd:ba:cb:90:e9:13:21:36:1e:ab:34:eb:6c:5d:2c:
                    13:83:8d:02:77:43:e0:5a:9d:6c:47:37:b0:38:ff:
                    a4:6d:b3:64:80:09:0c:b7:6b:60:8f:8d:da:92:37:
                    86:53:b4:60:53:23:45:10:57:d8:34:8a:48:e7:75:
                    11:8e:fb:73:77:6e:8b:38:a6:22:c5:3e:f2:80:ad:
                    d3:8a:1c:ba:7e:0c:ac:b9:17:e4:d4:75:40:cb:bd:
                    f3:6b:04:18:ad:43:57:cd:f3:09:23:5f:d0:17:28:
                    a1:43:41:22:5f:9e:0c:f1:65:94:5d:ce:53:b0:db:
                    4d:4d:8e:fd:cd:5b:a3:b1:fe:6b:30:49:6a:58:b7:
                    7a:d2:3f:a2:3d:16:7f:d5:29:f0:ab:5a:11:2c:a1:
                    c2:5a:41:94:a6:0e:09:6f:ed:d4:c6:de:1d:52:2f:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A0:94:C3:C3:7A:61:D8:D9:55:40:72:ED:F8:CC:5C:AA:30:80:AC
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:8f:94:e9:ca:c3:f0:bd:2a:04:ec:c9:74:b4:36:98:2f:75:
         f2:27:ff:01:5a:18:0e:37:72:65:41:4f:ba:db:81:09:38:63:
         19:7e:fb:76:20:6d:8f:57:a4:62:2c:ea:73:2a:aa:1b:60:ab:
         6e:8e:ff:b1:93:73:a0:08:bc:3f:7c:9d:c1:b9:7c:03:1a:f4:
         d0:22:79:b5:2f:1b:73:8c:ff:e3:72:93:11:a6:bb:43:2e:f4:
         79:07:80:a8:e4:d3:15:d3:01:1d:93:b7:89:65:00:70:49:44:
         9f:07:c7:dd:0e:32:1f:3f:f5:4a:4e:95:ad:16:35:d3:16:9c:
         ed:dd:0e:2c:9d:3e:60:5e:7b:6b:75:08:2c:cd:89:f8:33:27:
         26:bc:e2:1b:3f:b2:9a:76:4e:57:b6:0c:8f:eb:e3:71:e9:63:
         d4:ad:b1:a9:f6:fc:af:d6:f5:13:e0:36:20:a1:dd:57:b5:e0:
         5e:ce:56:48:6e:54:28:2b:52:56:e5:ff:72:e9:90:c3:8d:64:
         49:9d:25:69:7b:00:1a:b5:8d:63:52:cd:ee:a6:4f:4a:43:0c:
         6c:8a:b8:fb:88:7a:56:6c:ab:c4:f3:4a:60:33:54:fc:f7:95:
         1e:b6:15:10:05:78:a2:7a:87:4f:6b:08:aa:f4:b5:a9:b4:ce:
         b1:d9:a7:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2GWDPgMepHX5eu8CbeZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDIyZTE2MmY2ZTZiOTc1NWNlNGNlODQ1MTIwZTYyOTM5
NTA2ZjcwHhcNMjYwMjA5MTAwMDI2WhcNMjYwMjEwMTAwMDI2WjAzMTEwLwYDVQQD
EygxZmEwOTRjM2MzN2E2MWQ4ZDk1NTQwNzJlZGY4Y2M1Y2FhMzA4MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWVcSK22mkPAfBHhgNf4I/YNG2M8
LzxGUi3sN3p20QxUx5k8q6q66qlfgDoVyAiKGcQD1JrLTd8QSQVs5MfaRpMZ86RG
2xrwu37rKy0E1qzfcMsGl68+PcnNusuQ6RMhNh6rNOtsXSwTg40Cd0PgWp1sRzew
OP+kbbNkgAkMt2tgj43akjeGU7RgUyNFEFfYNIpI53URjvtzd26LOKYixT7ygK3T
ihy6fgysuRfk1HVAy73zawQYrUNXzfMJI1/QFyihQ0EiX54M8WWUXc5TsNtNTY79
zVujsf5rMElqWLd60j+iPRZ/1Snwq1oRLKHCWkGUpg4Jb+3Uxt4dUi8hkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+glMPDemHY2VVAcu34zFyqMICsMB8GA1UdIwQY
MBaAFIYCLhYvbmuXVc5M6EUSDmKTlQb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGIt
MDU5ZGJjYzhkY2VmLzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGItMDU5ZGJjYzhkY2Vm
LzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy4+U6crD
8L0qBOzJdLQ2mC918if/AVoYDjdyZUFPutuBCThjGX77diBtj1ekYizqcyqqG2Cr
bo7/sZNzoAi8P3ydwbl8Axr00CJ5tS8bc4z/43KTEaa7Qy70eQeAqOTTFdMBHZO3
iWUAcElEnwfH3Q4yHz/1Sk6VrRY10xac7d0OLJ0+YF57a3UILM2J+DMnJrziGz+y
mnZOV7YMj+vjcelj1K2xqfb8r9b1E+A2IKHdV7XgXs5WSG5UKCtSVuX/cumQw41k
SZ0laXsAGrWNY1LN7qZPSkMMbIq4+4h6VmyrxPNKYDNU/PeVHrYVEAV4onqHT2sI
qvS1qbTOsdmn4w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:19 2026 by rpki-client