This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
File:                     HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json)
Hash identifier:          KAXBqSSXSYDKAtI64Ac7dsAaefpH2xL/xLK0OB4dUrQ=
Subject key identifier:   03:D6:0B:06:26:35:82:6E:26:69:B0:FA:2D:8E:42:65:95:C5:9A:A6
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Certificate issuer:       /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial:       019C4133A78041ECA46BD5B498C6D06522B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
Manifest number:          182A
Signing time:             Mon 09 Feb 2026 07:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:30 +0000
Files and hashes:         1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=)
                          2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=)
                          3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=)
                          4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=)
                          5: 7b21kRHbye2v_dmZV5VUK_LJnVA.roa (hash: EN+RdTeUkPgyWw2KZHhbSo6oaTjE7NLfzP0K37REluE=)
                          6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: TGhHaqSCJCE3VNhc4vqLwP4bx9nCUUm7YgNTmTnod30=)
                          7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=)
                          8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=)
                          9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=)
                          10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=)
                          11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=)
                          12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=)
                          13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=)
                          14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=)
                          15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=)
                          16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:a7:80:41:ec:a4:6b:d5:b4:98:c6:d0:65:22:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
        Validity
            Not Before: Feb  9 07:00:30 2026 GMT
            Not After : Feb 10 07:00:30 2026 GMT
        Subject: CN=03d60b062635826e2669b0fa2d8e426595c59aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:28:c1:55:70:20:35:20:4d:b5:09:df:e3:
                    1a:a8:c5:87:8c:31:8f:08:1a:96:c2:55:7e:f5:7d:
                    94:d9:4d:4b:6e:e4:69:e9:5e:7e:b6:5f:73:1c:7d:
                    d9:2f:60:f5:8a:65:2a:05:99:f2:80:87:3a:77:09:
                    e0:db:db:e6:35:c6:89:1a:4c:0d:3b:f4:12:1d:30:
                    c8:cc:69:70:f0:87:22:bd:c8:6c:f6:6c:71:5a:54:
                    01:50:a8:d7:90:55:41:63:a6:a7:4c:54:77:10:a1:
                    28:5c:21:49:7a:5c:73:0b:e1:3f:92:da:6d:84:49:
                    b1:fb:8f:de:01:1e:08:ec:a2:77:2a:8b:d3:e5:a2:
                    eb:1c:26:43:8c:80:ea:a8:d5:c5:9d:1e:e7:a7:52:
                    29:28:16:ae:7e:51:f9:23:df:38:5e:c4:6b:d0:55:
                    7e:69:e2:69:4f:84:39:d4:1e:5a:64:3d:f7:c8:d9:
                    74:d8:4a:0a:1a:30:76:5f:17:4d:92:5e:a5:3d:55:
                    7d:cc:3a:22:b9:28:76:e3:ae:08:54:58:70:30:e9:
                    7b:34:28:4e:26:d0:55:d4:0b:d8:41:a9:44:c9:79:
                    a4:bd:ce:00:48:94:ea:99:c9:ea:2a:8e:24:6a:11:
                    52:db:cd:b4:e0:8b:4f:fb:e1:bb:08:d1:5c:84:dc:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D6:0B:06:26:35:82:6E:26:69:B0:FA:2D:8E:42:65:95:C5:9A:A6
            X509v3 Authority Key Identifier:
                keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:a9:d0:be:48:be:83:fb:a7:76:8d:10:5a:a3:0d:b7:38:
         77:68:4b:0b:59:b9:80:de:68:2e:03:4d:cd:06:2d:58:e1:53:
         7e:2a:15:0d:30:d3:06:cc:98:60:8a:1c:a0:e9:a2:85:ca:53:
         e7:31:5b:92:ad:bf:6c:4b:7c:42:1d:e8:0d:00:d2:22:b9:3d:
         00:ff:82:3a:78:a8:63:af:20:0c:27:f5:c0:ad:19:c6:9e:58:
         46:99:15:87:cf:da:2c:87:8f:b7:ce:fe:8e:db:95:71:d8:53:
         0b:29:eb:b4:68:12:20:8d:e5:4b:21:f0:09:f1:c4:df:ed:32:
         9a:72:47:08:66:3b:27:9b:f1:68:bd:1f:4e:25:11:29:78:8f:
         3f:11:13:64:82:7e:a9:6f:36:99:bb:8e:2b:15:8a:bc:b3:7b:
         d5:9f:ee:7d:eb:a9:4e:b6:0d:35:77:c2:50:1c:6b:5a:07:8e:
         fe:46:4d:3c:c7:9e:9a:2e:cc:bd:a3:a6:c7:fb:85:53:98:01:
         5e:71:2b:95:e3:c9:cd:a2:a9:5f:ac:60:41:c1:26:38:93:95:
         6b:29:de:6e:bb:8b:b2:20:fa:cc:14:cd:c1:bd:ab:1a:81:e5:
         71:d3:15:ce:de:c6:cb:47:31:79:02:0e:f0:0a:00:63:83:12:
         e5:93:58:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM6eAQeyka9W0mMbQZSK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi
Y2RkZmYwHhcNMjYwMjA5MDcwMDMwWhcNMjYwMjEwMDcwMDMwWjAzMTEwLwYDVQQD
EygwM2Q2MGIwNjI2MzU4MjZlMjY2OWIwZmEyZDhlNDI2NTk1YzU5YWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+0owVVwIDUgTbUJ3+MaqMWHjDGP
CBqWwlV+9X2U2U1LbuRp6V5+tl9zHH3ZL2D1imUqBZnygIc6dwng29vmNcaJGkwN
O/QSHTDIzGlw8Icivchs9mxxWlQBUKjXkFVBY6anTFR3EKEoXCFJelxzC+E/ktpt
hEmx+4/eAR4I7KJ3KovT5aLrHCZDjIDqqNXFnR7np1IpKBauflH5I984XsRr0FV+
aeJpT4Q51B5aZD33yNl02EoKGjB2XxdNkl6lPVV9zDoiuSh2464IVFhwMOl7NChO
JtBV1AvYQalEyXmkvc4ASJTqmcnqKo4kahFS28204ItP++G7CNFchNxw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPWCwYmNYJuJmmw+i2OQmWVxZqmMB8GA1UdIwQY
MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt
MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi
LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpGp0L5I
voP7p3aNEFqjDbc4d2hLC1m5gN5oLgNNzQYtWOFTfioVDTDTBsyYYIocoOmihcpT
5zFbkq2/bEt8Qh3oDQDSIrk9AP+COnioY68gDCf1wK0Zxp5YRpkVh8/aLIePt87+
jtuVcdhTCynrtGgSII3lSyHwCfHE3+0ymnJHCGY7J5vxaL0fTiURKXiPPxETZIJ+
qW82mbuOKxWKvLN71Z/ufeupTrYNNXfCUBxrWgeO/kZNPMeemi7MvaOmx/uFU5gB
XnErlePJzaKpX6xgQcEmOJOVaynebruLsiD6zBTNwb2rGoHlcdMVzt7Gy0cxeQIO
8AoAY4MS5ZNY0g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:36 2026 by rpki-client