This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File:                     hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier:          hGl9eIywqvS1XiYPT7S3a1HBfj+PO8ozYYV5fh9F4qk=
Subject key identifier:   B3:41:AA:6C:91:43:6C:34:B4:F0:C7:7F:21:71:28:E9:2F:F4:C6:D2
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer:       /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial:       019C43C6A279ADC2B0A2A5D39796995480E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number:          0C24
Signing time:             Mon 09 Feb 2026 19:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:17 +0000
Files and hashes:         1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: qHxnIYvv+RZy6owvLKdv/uCDHwu4hw0UjMWWPA07hck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a2:79:ad:c2:b0:a2:a5:d3:97:96:99:54:80:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
        Validity
            Not Before: Feb  9 19:00:17 2026 GMT
            Not After : Feb 10 19:00:17 2026 GMT
        Subject: CN=b341aa6c91436c34b4f0c77f217128e92ff4c6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:d6:b0:d7:a2:00:d8:ca:5e:b6:ca:4c:1e:
                    b8:2f:a5:98:69:1b:a5:4f:ad:5d:5a:db:95:5b:c0:
                    54:96:a3:c3:67:5a:87:50:eb:12:7e:64:51:43:33:
                    fd:cb:d8:0b:57:5e:6d:43:83:f5:a8:d0:b4:04:d1:
                    08:4b:73:81:5a:1a:6f:7c:c0:8d:ca:89:f8:c5:8c:
                    4b:e6:14:b5:3a:fc:0e:98:b2:a9:3d:a6:dd:65:96:
                    dc:d2:7e:f5:91:1e:9e:7b:98:6f:73:8d:8a:3e:b3:
                    a8:b1:26:ee:3a:c0:22:ac:5f:49:7e:5e:16:88:14:
                    97:65:60:bc:16:47:24:38:b1:6a:b5:a4:ec:f1:e5:
                    1f:ab:be:26:8a:8d:83:25:32:6b:0f:40:5d:ec:e5:
                    81:8f:6b:6b:bf:df:d8:c6:26:5e:78:23:f7:00:be:
                    b0:9d:4f:29:28:06:c5:30:64:14:c1:3b:0f:c0:6e:
                    dd:ea:af:45:5d:68:22:7b:68:22:e3:fd:80:fa:7b:
                    dc:9a:dc:79:51:65:f6:1b:33:0f:ae:ad:20:97:8e:
                    d6:8a:df:52:a1:dd:88:14:f2:cf:57:23:39:d9:25:
                    b1:5d:24:57:1f:8d:68:aa:e9:5e:94:9d:8d:fc:fc:
                    71:c8:04:04:7d:07:79:11:a1:8a:e0:9a:bf:58:97:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:AA:6C:91:43:6C:34:B4:F0:C7:7F:21:71:28:E9:2F:F4:C6:D2
            X509v3 Authority Key Identifier:
                keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:f0:db:0b:9a:10:2c:e6:23:c6:e9:9c:b6:d8:6d:a7:e3:
         7f:8b:53:db:14:09:4e:2d:e3:03:9d:67:b2:66:13:7d:dc:8c:
         05:9b:75:67:f9:8c:2d:05:a7:4d:30:bf:03:a9:9d:8f:87:f6:
         65:88:5b:c1:fa:58:59:d1:8c:dc:3a:69:85:94:46:a9:ea:c3:
         98:08:d1:a6:dc:3a:f3:1a:ef:b1:61:18:64:5d:10:01:f5:d9:
         2b:e8:0e:3f:92:e3:96:d0:f6:19:1c:21:63:f9:d3:57:b2:79:
         ce:2e:5f:c3:59:68:9e:78:5c:04:0e:dd:1e:af:57:92:fd:70:
         01:0d:a5:5e:7d:95:16:cf:f6:a7:68:d1:7e:dc:f4:31:a5:34:
         c8:fc:df:e2:56:77:1e:3d:02:17:d4:d2:8d:ae:bd:70:81:f9:
         f3:cc:31:1f:50:ea:bc:d4:7e:99:20:74:e5:8a:4c:6e:9e:4d:
         87:4d:fb:f7:03:45:b0:e6:93:7f:4f:d6:d0:22:00:44:b1:fb:
         c4:ae:8d:f3:9d:16:e2:a0:61:2d:25:6c:48:17:00:b6:f6:fe:
         94:6d:63:8a:01:7a:55:a6:e7:75:56:18:41:b7:79:22:2d:5d:
         6c:b8:99:24:4f:88:52:f8:c4:fb:fa:ba:40:7a:9b:93:4e:dd:
         6d:b0:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:38 2026 by rpki-client