This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File:                     rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier:          HvtJD3XDIKItfA7jGZlyKDxSohtN1Ar/ekgDX4U4zQ8=
Subject key identifier:   C5:76:4B:A1:D4:8B:81:F9:F9:B8:EC:8A:28:62:3F:C6:22:91:A2:5F
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer:       /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial:       019C4390BB55F10625EB07041EE64AA98562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number:          1825
Signing time:             Mon 09 Feb 2026 18:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:24 +0000
Files and hashes:         1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=)
                          2: HOQgDGpmkekCim3x5F8I9zAUeqI.roa (hash: APa++J/yausGprAIdzd9v9TnFhQUsORY2w2EDIGBbfg=)
                          3: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=)
                          4: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=)
                          5: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=)
                          6: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=)
                          7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=)
                          8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: 7tt+4qqET3D87zVtuN8g/jypGGyAQ1AK68YV5xI4NDs=)
                          9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=)
                          10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:bb:55:f1:06:25:eb:07:04:1e:e6:4a:a9:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
        Validity
            Not Before: Feb  9 18:01:24 2026 GMT
            Not After : Feb 10 18:01:24 2026 GMT
        Subject: CN=c5764ba1d48b81f9f9b8ec8a28623fc62291a25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:29:0a:d0:95:84:c3:49:ee:90:cc:17:c4:
                    11:f1:33:64:89:db:7b:e4:9a:70:69:c3:09:eb:cd:
                    b6:19:6f:81:21:3d:44:b4:3e:ca:6b:38:71:c2:d6:
                    83:93:5c:f3:be:0e:c3:1a:ce:74:05:77:09:46:c8:
                    2e:ae:be:99:e0:09:01:31:05:29:c5:d5:4f:6b:44:
                    0b:d3:5c:0c:41:eb:96:44:7f:dd:38:0d:59:5c:df:
                    dd:48:18:90:fd:24:e1:3f:40:19:36:b8:68:6b:8f:
                    38:6b:de:1c:66:5c:f6:49:dd:ab:5f:07:85:7f:1f:
                    db:2f:68:54:24:3c:97:4e:c8:44:a8:f9:d2:5e:55:
                    44:3d:d6:d5:1f:d8:ec:e0:bf:0a:b4:52:c1:13:38:
                    0b:1f:99:30:e3:a3:c7:61:27:18:b9:ca:74:03:cc:
                    52:6b:42:0a:d2:dd:35:8b:04:a0:94:b5:c3:8b:bd:
                    d3:8b:24:49:03:8e:a9:90:f6:f6:67:4e:7c:6a:24:
                    69:bd:77:cf:8c:4d:ff:5c:0d:5c:93:2c:a9:b6:c6:
                    58:d0:85:87:b8:80:a3:bc:7d:29:68:cc:e1:b8:7a:
                    a7:17:ef:98:4f:43:ff:08:35:ee:44:20:52:a9:0b:
                    eb:a1:28:09:af:cb:7f:91:ef:76:1f:01:56:92:21:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:76:4B:A1:D4:8B:81:F9:F9:B8:EC:8A:28:62:3F:C6:22:91:A2:5F
            X509v3 Authority Key Identifier:
                keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:7d:24:9a:11:d0:b8:01:04:3e:cc:c9:7d:12:f9:b5:af:
         7c:20:6a:60:84:84:ef:7f:69:13:de:6a:c9:37:1a:7e:3d:a3:
         d7:78:78:df:64:e1:30:4b:a7:ac:b9:64:37:f8:f4:00:e2:60:
         fc:df:f9:1d:c9:53:88:34:a7:5c:7d:20:d4:c8:97:ab:7c:56:
         b9:11:f4:0d:91:1b:f0:a4:98:06:96:9f:5a:b9:c6:67:b4:e5:
         40:48:f2:91:75:27:af:1a:9c:8e:bf:cb:27:a5:ec:89:15:55:
         60:7e:d3:fa:8c:42:49:dd:e4:b4:5a:df:37:f5:41:94:45:c5:
         b2:1b:ef:1c:f7:95:2e:ba:bf:d4:4b:b3:17:08:0b:05:74:58:
         7b:62:35:8e:6b:42:12:17:0d:d2:0c:bf:bd:2c:59:93:02:58:
         f0:a8:f9:dd:a9:3f:2e:f9:94:77:46:8d:87:da:6a:db:df:80:
         e8:bc:a9:d8:77:79:41:13:6d:80:80:13:45:0d:4d:e3:09:50:
         0c:df:ab:5e:d6:00:8c:34:13:ed:52:a6:b2:d8:55:e9:70:19:
         f8:80:fe:2b:54:51:18:85:a9:e9:9c:80:65:fa:9f:ea:27:5d:
         c2:eb:cd:fb:3f:61:5d:f7:68:a3:7f:30:11:d5:3b:2d:04:a2:
         c4:18:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:31 2026 by rpki-client