This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File:                     HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier:          zCN097lFpgJwnXTKMdJGiO46YR+wbnf+lBLyFwuVkU4=
Subject key identifier:   69:27:06:ED:B1:82:AC:66:71:F9:E7:5A:3F:A5:D7:1B:E2:A8:BF:D9
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer:       /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial:       019C42B4A14C3E4F78687E714ECEA0B13323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number:          13A3
Signing time:             Mon 09 Feb 2026 14:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:59 +0000
Files and hashes:         1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: 3+SJObSNoG3UBzJ+ukawcSK2bTiqwrKhz9l3U+LLNfg=)
                          2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:a1:4c:3e:4f:78:68:7e:71:4e:ce:a0:b1:33:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
        Validity
            Not Before: Feb  9 14:00:59 2026 GMT
            Not After : Feb 10 14:00:59 2026 GMT
        Subject: CN=692706edb182ac6671f9e75a3fa5d71be2a8bfd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:0f:bb:16:79:a1:b9:ee:46:72:02:a9:1d:
                    e1:ee:44:f7:db:df:65:ac:0f:45:9d:44:56:72:38:
                    7c:09:fc:95:77:5c:d1:7e:3b:c9:d9:e0:8a:bc:5f:
                    64:33:e5:9b:f3:67:48:94:99:df:ad:33:25:44:6a:
                    0e:74:60:ba:a9:49:83:59:fa:05:cb:79:db:c7:5c:
                    39:9c:c2:d7:bd:d0:56:e1:c1:63:f1:58:d2:41:28:
                    41:e2:14:03:02:71:46:ae:14:6e:0f:b6:2c:91:e1:
                    c7:85:19:f9:27:19:b4:25:93:9b:34:03:70:6f:57:
                    cd:db:85:48:cc:e4:46:e5:b7:3b:ca:86:42:bd:10:
                    27:a0:cc:8d:b8:b9:68:fa:51:76:a4:88:c7:b6:bf:
                    d1:e2:ca:7f:c7:fa:a0:51:d1:5b:ac:69:55:aa:20:
                    ca:e2:39:e9:14:4d:87:5d:00:7a:b4:f7:67:a4:0f:
                    c9:06:48:0d:d8:2f:87:4d:41:b1:d7:cf:33:f1:ab:
                    47:aa:83:b4:f1:c4:b2:42:e8:fb:d2:3f:75:45:da:
                    76:e9:bb:3f:d3:ba:51:3b:e2:5a:81:de:b7:86:43:
                    2f:df:a9:25:67:74:af:1f:43:0c:8e:a9:9d:c4:68:
                    8a:9e:ef:6c:7c:43:a3:62:f1:39:b1:fc:6c:85:a1:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:27:06:ED:B1:82:AC:66:71:F9:E7:5A:3F:A5:D7:1B:E2:A8:BF:D9
            X509v3 Authority Key Identifier:
                keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:ae:f2:0b:ea:90:16:d9:e9:e2:39:fb:7a:b3:8a:19:5e:81:
         3c:de:a3:1b:51:b5:04:c4:79:4c:60:34:a5:bd:c6:d7:32:62:
         ea:3d:d5:84:c8:16:33:56:c4:9e:b5:31:51:7e:bc:07:a4:48:
         a8:b8:17:85:1b:39:f6:95:ae:2c:af:06:b3:be:93:de:7a:4a:
         ae:bf:2a:7a:c0:81:0d:de:69:32:67:52:38:86:63:89:61:de:
         4a:3c:b8:69:0c:a7:f6:15:2c:72:a1:be:4a:d7:3c:38:af:a5:
         47:a3:5b:ab:11:67:a0:67:2e:1d:8d:6d:20:8c:af:1b:20:dd:
         8d:38:1a:97:d0:ac:7f:ab:90:0b:06:c4:a6:21:7d:af:f5:d5:
         35:71:aa:e8:e3:66:25:dc:44:78:98:5a:e5:37:e5:a9:a0:ed:
         96:17:a3:ff:fd:7c:62:49:b4:b8:23:6b:eb:fb:0f:17:aa:a8:
         f2:af:6c:48:b5:70:52:c0:88:4f:f7:dd:ec:ea:d2:a6:c8:16:
         c2:6a:ee:32:7e:00:89:b7:4e:e4:9e:ee:69:ac:f9:e3:da:96:
         9f:f9:85:c3:05:09:e6:44:43:2c:d7:10:4c:0b:78:9e:c2:12:
         ea:11:b9:ab:43:ab:48:f7:13:6b:9e:e6:fc:63:2d:0e:0d:05:
         c0:ff:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:57 2026 by rpki-client