This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File:                     hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier:          eLA9Dfqj+cpoXJst76TWesisrgvIqSlaSCsMud03l0U=
Subject key identifier:   04:B1:62:23:2F:BF:0B:8D:C5:7D:31:46:E6:C3:73:38:65:16:CC:2E
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer:       /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial:       019C43C6A22AE74CF9EBBF18ACC30C25F1E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number:          0EC7
Signing time:             Mon 09 Feb 2026 19:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:16 +0000
Files and hashes:         1: YuHJmYFCnAz2SSKMxUmvTY991CE.roa (hash: TOD8ARSMl4ubAqj2aurWlfEhx3SyaroxCxGERNtBcZQ=)
                          2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: 9by2zoLDT0U5udZzTmjtnjOJL897ZOilOQWXNzoXUL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a2:2a:e7:4c:f9:eb:bf:18:ac:c3:0c:25:f1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
        Validity
            Not Before: Feb  9 19:00:16 2026 GMT
            Not After : Feb 10 19:00:16 2026 GMT
        Subject: CN=04b162232fbf0b8dc57d3146e6c373386516cc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:b9:c1:09:7b:55:98:f6:c6:6e:59:08:ed:
                    4a:59:20:84:8a:26:cd:5f:28:d4:a1:9c:45:cc:0d:
                    6a:e7:cf:6b:88:07:3b:cf:11:0e:0d:8d:ff:ae:f8:
                    25:21:e7:47:49:de:8d:bd:c6:0a:e2:e3:2d:7c:1b:
                    43:aa:67:87:99:29:db:6a:f1:00:b7:44:2d:7b:b2:
                    bd:f5:33:15:cb:0a:ea:75:a5:e2:ff:4f:c4:a3:8f:
                    6f:c1:70:3d:e2:e9:8f:9b:12:64:3d:2a:1b:f2:73:
                    64:68:be:d9:92:f7:35:17:e8:1b:46:41:98:45:d1:
                    9f:cb:2c:56:b1:37:ea:40:27:40:ac:d7:5b:cb:eb:
                    ac:c1:20:d5:fb:2e:b6:07:71:fb:f1:f0:2e:98:a0:
                    98:e8:6f:e3:77:a9:3e:48:89:ad:2a:83:c3:ba:4b:
                    8d:7a:ba:8c:36:15:f0:a4:46:e6:6e:74:29:a1:9d:
                    3d:34:19:bb:7d:8c:82:ae:75:6e:45:d1:ee:e3:95:
                    73:87:e0:92:aa:c1:36:78:1f:6d:1a:73:5f:75:be:
                    86:ff:65:ab:0c:4a:70:9f:c4:6c:04:a0:09:b4:fd:
                    21:49:eb:5a:23:45:10:6a:c8:fb:36:82:1c:27:54:
                    f5:7f:90:a9:20:4d:7a:08:d6:22:9c:40:15:e2:7f:
                    f9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B1:62:23:2F:BF:0B:8D:C5:7D:31:46:E6:C3:73:38:65:16:CC:2E
            X509v3 Authority Key Identifier:
                keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:bc:92:de:d2:cf:06:3b:4f:56:59:40:a4:ae:ac:a9:69:
         3d:be:34:ac:3f:a1:9c:24:54:8d:91:c8:a4:6b:ab:98:30:97:
         c9:e3:9f:fb:e5:ac:cf:8c:96:52:f5:6e:13:09:79:b2:0e:a1:
         15:c3:54:89:0d:41:97:49:a7:e4:e3:f6:10:e0:a8:ab:c1:c2:
         28:b7:aa:33:72:0b:73:58:11:73:fc:3b:19:1c:9c:27:c3:30:
         12:7b:c1:f3:2d:9e:ad:9b:07:15:0e:ee:26:40:fe:e9:e5:ea:
         69:e6:d5:56:b2:61:6b:8d:0b:f2:b2:00:b4:d5:d4:2f:2e:3b:
         d0:9d:c1:cc:1e:da:1a:67:4d:fc:e8:13:1d:0e:ac:83:d6:3e:
         aa:c0:b0:f1:e7:c0:b4:bb:aa:9b:07:38:7e:83:d2:b1:eb:1c:
         0c:c6:30:c0:ea:57:ac:df:a7:e2:8e:70:0a:43:ff:6e:e2:1b:
         20:92:7c:24:65:2b:23:2d:ca:55:06:d0:78:73:63:ff:5f:cc:
         2b:86:1b:a7:61:c3:64:6b:1a:6f:a4:36:57:5c:c7:8f:e9:06:
         ed:61:1a:dc:cc:08:82:cd:e7:36:b6:26:f3:52:a4:2a:ec:64:
         fa:1d:58:8c:ec:d3:00:f1:ac:0b:33:bc:0d:9f:40:99:08:d9:
         8d:1a:89:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxqIq50z5678YrMMMJfHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODI1NmFlMzRlNTQ1MjZjNWIyNWFhYzJiOWQ1ZjVmYTg3
ZDA2MWUwHhcNMjYwMjA5MTkwMDE2WhcNMjYwMjEwMTkwMDE2WjAzMTEwLwYDVQQD
EygwNGIxNjIyMzJmYmYwYjhkYzU3ZDMxNDZlNmMzNzMzODY1MTZjYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow25wQl7VZj2xm5ZCO1KWSCEiibN
XyjUoZxFzA1q589riAc7zxEODY3/rvglIedHSd6NvcYK4uMtfBtDqmeHmSnbavEA
t0Qte7K99TMVywrqdaXi/0/Eo49vwXA94umPmxJkPSob8nNkaL7Zkvc1F+gbRkGY
RdGfyyxWsTfqQCdArNdby+uswSDV+y62B3H78fAumKCY6G/jd6k+SImtKoPDukuN
erqMNhXwpEbmbnQpoZ09NBm7fYyCrnVuRdHu45Vzh+CSqsE2eB9tGnNfdb6G/2Wr
DEpwn8RsBKAJtP0hSetaI0UQasj7NoIcJ1T1f5CpIE16CNYinEAV4n/5fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASxYiMvvwuNxX0xRubDczhlFswuMB8GA1UdIwQY
MBaAFIaCVq405UUmxbJarCudX1+ofQYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDIt
Y2JmNjA3MDBlYjkyLzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDItY2JmNjA3MDBlYjky
LzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowO8kt7S
zwY7T1ZZQKSurKlpPb40rD+hnCRUjZHIpGurmDCXyeOf++Wsz4yWUvVuEwl5sg6h
FcNUiQ1Bl0mn5OP2EOCoq8HCKLeqM3ILc1gRc/w7GRycJ8MwEnvB8y2erZsHFQ7u
JkD+6eXqaebVVrJha40L8rIAtNXULy470J3BzB7aGmdN/OgTHQ6sg9Y+qsCw8efA
tLuqmwc4foPSsescDMYwwOpXrN+n4o5wCkP/buIbIJJ8JGUrIy3KVQbQeHNj/1/M
K4Ybp2HDZGsab6Q2V1zHj+kG7WEa3MwIgs3nNrYm81KkKuxk+h1YjOzTAPGsCzO8
DZ9AmQjZjRqJ+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:05 2026 by rpki-client