This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File:                     hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier:          35HidldEOahdKNovWSDTE4ITjMjSgVNwI3NH9pLxWgo=
Subject key identifier:   83:D6:BE:B5:12:96:77:D6:9B:9C:BD:D3:3D:5E:D2:24:2A:5F:28:63
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer:       /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial:       019C4246A9E4A632EA8329A783F92016C40D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number:          090A
Signing time:             Mon 09 Feb 2026 12:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:53 +0000
Files and hashes:         1: Ac2g8HVyNDYwzqmo6Q0KVIwOBDo.roa (hash: Um65HfZZDJKesTmcrahWX7j2iQcfK801xXJSJGbgafE=)
                          2: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: g2G+nIvdHPXJxQskTcuafiIpcwMLCokCiVlXctpp+kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a9:e4:a6:32:ea:83:29:a7:83:f9:20:16:c4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
        Validity
            Not Before: Feb  9 12:00:53 2026 GMT
            Not After : Feb 10 12:00:53 2026 GMT
        Subject: CN=83d6beb5129677d69b9cbdd33d5ed2242a5f2863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:67:01:87:db:9e:19:1b:3a:1b:c0:ff:d1:
                    f6:77:2d:fc:7a:a6:09:e0:ab:35:2e:e8:50:49:c4:
                    33:16:17:7b:61:b2:31:df:a5:6e:90:4c:9e:02:56:
                    fd:57:60:04:e4:89:d1:2f:2f:98:d9:f4:5e:44:3a:
                    a8:84:8c:cc:f3:85:30:fa:5e:c0:d6:79:00:d0:bd:
                    36:99:b9:1b:fc:ba:e2:ee:cc:b5:57:bc:dd:d5:1f:
                    b4:43:87:60:bb:a1:d5:c2:ef:d0:5a:5f:bc:f2:0f:
                    0f:d2:87:72:ab:a7:ac:20:63:fe:07:31:f5:18:a7:
                    ae:c5:88:32:1c:d5:96:96:f0:85:83:3c:d8:c2:52:
                    89:3a:f3:26:64:5c:d2:e2:db:f0:65:58:6f:af:ef:
                    82:33:60:d8:4b:ed:a1:d3:bd:ae:fd:b2:49:ac:54:
                    04:33:30:d0:51:34:9a:a7:77:50:57:a6:9f:21:3b:
                    1b:d6:e8:c1:3c:b4:35:a0:c2:a7:2c:f0:56:09:23:
                    47:26:df:29:38:fe:47:3e:db:53:dc:62:84:a2:b5:
                    c2:f5:95:04:5b:e8:db:6d:b2:69:1c:80:84:8a:29:
                    e6:3d:07:c5:b6:77:9b:78:48:cb:3a:7e:e7:7b:4a:
                    7f:9c:1a:53:3f:29:40:c3:82:e5:b2:b3:41:54:dd:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D6:BE:B5:12:96:77:D6:9B:9C:BD:D3:3D:5E:D2:24:2A:5F:28:63
            X509v3 Authority Key Identifier:
                keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:72:4e:5b:b8:c9:8d:07:ce:a2:7e:d5:15:1c:bf:38:b2:55:
         9b:a0:40:67:01:b8:ab:db:f8:62:db:e0:06:a7:33:3b:e1:ea:
         c6:06:4c:27:ea:97:a1:db:62:03:60:19:f2:32:e5:e3:d8:bb:
         2b:25:95:69:7a:6b:41:6c:3c:b0:5f:48:5d:77:58:12:70:7e:
         e5:97:d7:2b:6c:89:3e:5f:87:19:fb:be:c2:bd:d3:46:2f:8d:
         cd:05:0b:00:b8:64:ec:41:59:40:5a:e3:6c:c8:bb:ba:db:60:
         bf:6c:f0:9c:28:b5:d0:1a:19:78:e3:51:78:28:18:35:0a:bf:
         4d:1f:25:70:36:9b:af:f3:1b:b5:12:46:53:df:c5:a2:17:55:
         4d:66:cb:6c:27:f9:6c:d7:1f:31:c0:88:31:04:5c:9f:9f:78:
         2e:dc:2b:e8:0d:6f:73:09:00:3c:4a:b6:42:8d:31:29:be:e5:
         44:b6:71:a0:88:be:77:01:d5:62:40:9c:9b:de:f0:32:43:1e:
         ce:c3:d6:1a:76:31:c2:d0:52:1e:ba:ea:b0:71:b4:f0:4e:84:
         36:db:52:c3:b7:e3:24:a6:02:c6:05:e1:84:7b:4e:39:2b:2c:
         9a:f0:c4:ac:67:01:88:ae:92:db:81:58:b9:27:a0:b5:8e:df:
         65:89:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:38 2026 by rpki-client