This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File:                     HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier:          PtrIwvvsPfXy7RLA6V/lQD+38b15vmoDelc+AJH0U98=
Subject key identifier:   CE:B4:68:45:3A:98:D5:1D:BC:2B:DF:EB:41:0E:05:BA:F4:17:4E:C0
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer:       /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial:       019C4321F11A56DD7427719EE52C91D4763D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number:          17C0
Signing time:             Mon 09 Feb 2026 16:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:23 +0000
Files and hashes:         1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: an9TeEqlFjPEbLcgZC7JGI4MCo+0hiUUHZ4BmBfgw+U=)
                          2: X7eK9U4PlRZQI-Mybd4-wYNS5Bc.roa (hash: vCZNrQKnlEPBX/vu4m7xI1KpR04Prr3wUQp8NNxZ4c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:f1:1a:56:dd:74:27:71:9e:e5:2c:91:d4:76:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
        Validity
            Not Before: Feb  9 16:00:23 2026 GMT
            Not After : Feb 10 16:00:23 2026 GMT
        Subject: CN=ceb468453a98d51dbc2bdfeb410e05baf4174ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a3:4c:7d:52:8b:37:ef:4c:9f:d0:0f:c3:23:
                    d5:3d:92:4e:c3:15:f6:c3:14:d5:f3:d8:5c:2b:fc:
                    82:6a:08:e6:dc:e8:c9:bc:71:72:b4:8f:3f:42:d7:
                    b5:c1:0b:23:79:00:72:19:f6:2f:11:79:61:75:a7:
                    b4:44:eb:a4:02:ec:55:0f:77:67:41:c7:cf:b1:8b:
                    3a:21:bb:2e:02:a9:13:af:56:8e:eb:c2:a3:d1:1d:
                    2e:2c:00:e3:6a:80:78:e6:92:c7:68:d4:5f:e8:5c:
                    43:d7:94:8c:45:31:67:4e:94:ef:d0:ef:2b:b1:85:
                    04:76:c2:7f:4f:c2:9a:4f:46:55:d9:3a:66:9f:f7:
                    ce:08:d8:d3:98:70:bd:77:f2:71:10:5b:84:f8:04:
                    2e:0e:e6:79:0f:35:03:e7:28:3b:9d:1f:71:cd:fe:
                    8e:f0:8b:1e:fd:5e:ff:e0:78:af:b5:35:cb:16:c3:
                    df:d9:08:64:e3:4f:45:e2:0c:e4:a3:86:1e:9a:12:
                    b7:6a:15:c4:7f:15:23:22:f0:18:48:12:a1:17:65:
                    a9:1b:99:18:03:51:55:77:35:95:7c:04:bf:2d:94:
                    38:35:6e:2c:07:2c:76:df:1c:ea:06:af:49:5f:61:
                    f0:03:17:39:90:e6:89:f0:b3:d5:55:6c:f2:22:29:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B4:68:45:3A:98:D5:1D:BC:2B:DF:EB:41:0E:05:BA:F4:17:4E:C0
            X509v3 Authority Key Identifier:
                keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:73:9c:b2:c8:66:8b:95:96:02:34:67:fc:26:cc:8e:51:
         bc:5e:f8:c6:19:7d:13:85:df:9d:f7:0b:02:a8:2c:48:d9:db:
         45:c3:30:e1:dc:39:81:ef:d1:8a:2e:9a:e8:6b:75:9a:72:de:
         af:ec:11:2a:6e:46:30:41:8c:d0:c5:34:18:60:a6:2d:7d:d3:
         42:d9:4f:e7:5e:89:95:78:63:c3:c6:8d:b1:2b:5e:57:cb:f3:
         1a:2c:b9:fc:a8:94:33:1b:b1:18:19:6a:17:42:1f:c2:60:2d:
         ad:39:b8:7e:2f:98:b8:10:bb:71:4b:92:99:85:16:94:f2:0c:
         27:3c:44:f7:9c:e0:8a:df:cc:62:0c:1a:ea:c0:20:78:60:ca:
         78:5d:5b:cb:ae:24:c9:a6:d3:a1:f3:c1:e9:33:2a:0b:5b:b6:
         64:0b:3b:04:71:66:36:8b:90:42:c7:57:b2:fe:93:e8:ea:b1:
         34:29:22:2d:de:da:d4:c3:f7:18:eb:be:22:4c:75:49:86:53:
         74:21:eb:63:20:a4:9f:e0:1b:01:0b:8f:36:5b:ca:f1:8f:8e:
         ae:06:2e:df:6d:e9:e6:88:02:71:79:55:b6:44:06:f7:50:6a:
         00:1f:17:da:ba:0e:53:fe:66:12:0b:d9:f0:0a:32:31:98:ca:
         79:e0:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:22 2026 by rpki-client