This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
File:                     HQXcdA9vS7W8SwM4fptHUwhQdDw.mft (raw, json)
Hash identifier:          7219rBB+LwtKZ4qZjmm3DuR4G/V2TjLRDaLg+3k51l4=
Subject key identifier:   DE:66:85:E5:2A:12:C1:D3:A5:69:4C:1C:CC:81:7F:79:3D:DB:43:79
Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
Certificate issuer:       /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Certificate serial:       019C42B4A0D140055C651C56B6018FE4D6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
Manifest number:          C0
Signing time:             Mon 09 Feb 2026 14:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:59 +0000
Files and hashes:         1: EACCpkJUe6xsP4_nCRlj7NVGBLc.roa (hash: cbbyB5SvosFwqsVBAsWwnY8rZFf7hG0lJZ2R8+Yzr20=)
                          2: H3pYhN3aP-4mmqKhhpci3ig1tCA.roa (hash: 4vAvKOvcUAX6c1K5Wxm9Dj65zDW/pqpYSeloWgjaCn4=)
                          3: HQXcdA9vS7W8SwM4fptHUwhQdDw.crl (hash: lyZVcwk9LHGPBxWzRp6Ui/ZH+8CwPBAAvnFpHShTPCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:a0:d1:40:05:5c:65:1c:56:b6:01:8f:e4:d6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
        Validity
            Not Before: Feb  9 14:00:59 2026 GMT
            Not After : Feb 10 14:00:59 2026 GMT
        Subject: CN=de6685e52a12c1d3a5694c1ccc817f793ddb4379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:b3:60:2a:fc:07:17:57:e5:e7:9e:8c:30:
                    7a:6d:ff:79:04:4b:48:7d:61:6b:0f:41:9c:d3:18:
                    0f:0c:08:ee:fb:0d:47:84:95:ba:ca:10:1c:ed:e5:
                    4c:3b:ca:d6:ef:4a:50:8f:d8:d5:a4:b0:ca:97:25:
                    02:fb:e3:68:7a:e8:f3:a9:4e:7f:1e:ff:e9:2d:8c:
                    94:a5:93:6b:40:0f:36:8a:3e:2e:d1:04:33:0a:74:
                    6e:35:89:46:e9:c9:2b:25:25:a6:cf:d6:f1:8d:68:
                    7e:92:2a:e8:60:2a:b2:e4:83:66:3a:e8:05:b7:07:
                    e5:1e:60:36:fa:35:60:57:31:9b:74:b8:91:a2:20:
                    12:70:28:dc:e1:32:56:4f:0f:d4:30:5d:84:fd:09:
                    b4:91:b2:66:fe:20:d5:fe:50:0e:74:4e:c4:cf:f0:
                    98:a0:58:01:27:ee:e0:ad:30:e4:b6:95:4c:23:78:
                    63:28:02:6d:49:89:60:bf:29:37:61:55:10:75:a7:
                    8a:69:e4:62:eb:1f:ac:0c:b4:19:50:45:45:79:c6:
                    99:17:da:96:fb:2c:06:fb:b3:ad:96:a6:46:4b:70:
                    34:91:f7:bb:49:ab:4b:f0:87:39:2b:4c:fb:bf:e4:
                    61:1a:ca:00:c0:e2:c7:d9:f3:e2:d0:a2:fb:62:ff:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:66:85:E5:2A:12:C1:D3:A5:69:4C:1C:CC:81:7F:79:3D:DB:43:79
            X509v3 Authority Key Identifier:
                keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:13:6f:17:de:37:fb:f3:67:59:c4:cb:af:34:44:65:8d:8e:
         65:ec:11:ed:c3:9f:23:c2:52:21:18:eb:8c:af:15:45:e5:97:
         ed:2c:c0:75:e4:b3:e0:1b:fe:0c:fb:a7:c6:17:53:f3:01:33:
         38:f8:b6:4e:ab:40:bc:9d:d3:d9:83:d7:b5:d3:4d:7f:2e:22:
         b3:13:69:f3:7e:b8:37:6b:df:a8:d6:c5:a4:4c:df:41:cf:a2:
         42:06:1e:13:47:a3:95:a5:be:f6:6b:bc:52:d5:ee:8e:5b:b4:
         e4:7f:51:49:4e:ac:2a:89:24:5c:1c:35:52:31:e5:60:2e:d2:
         8f:a1:e2:b6:ed:1e:fa:5e:7b:d5:78:b3:4e:53:b2:84:4c:3e:
         fa:79:0c:c2:85:83:75:54:6c:2d:96:71:9e:d1:01:37:fb:fc:
         eb:b2:6b:65:0e:07:a2:93:97:44:67:77:80:40:a5:90:df:63:
         ae:4e:ad:88:84:95:81:c5:49:7a:22:ae:68:3c:40:9c:d4:ec:
         a7:f2:43:40:3b:56:be:ff:71:8c:15:cf:c5:4e:ef:2e:96:1c:
         58:0f:ad:b3:11:c1:98:80:64:43:8a:01:ef:e2:9e:bb:78:a4:
         1a:f2:fe:77:fe:48:c8:cc:b3:6e:f7:43:9a:5a:d0:92:7e:11:
         99:cd:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:28 2026 by rpki-client