This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File:                     HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier:          xagIRcaFrKNcGQYuOSdeNCL7dV00CtYzg2GNzauusiU=
Subject key identifier:   3C:71:4A:28:AE:83:A4:7E:A0:9A:2D:3C:FB:96:71:02:3B:3D:FB:8E
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer:       /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial:       019C42104444C76133565A30579063351AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number:          0471
Signing time:             Mon 09 Feb 2026 11:01:28 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:28 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:28 +0000
Files and hashes:         1: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: QDYOt2Yl6rVtRrTV+mqPoKm2LfqYDD91qOPGaabbh8w=)
                          2: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (hash: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY=)
                          3: jIIHIKwEzlntc0Vy_0Y1xdxljqM.roa (hash: RKwW62ZY+qUagcWd9OQWWCF2AiuU+GfnzsEEdx/g/7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:44:44:c7:61:33:56:5a:30:57:90:63:35:1a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
        Validity
            Not Before: Feb  9 11:01:28 2026 GMT
            Not After : Feb 10 11:01:28 2026 GMT
        Subject: CN=3c714a28ae83a47ea09a2d3cfb9671023b3dfb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:cd:b6:c3:b9:e5:0f:4b:bb:e1:a4:e1:99:
                    99:ad:81:cf:d5:93:29:20:95:77:29:56:bb:98:00:
                    b0:82:01:72:f1:de:c9:5e:29:7e:44:a9:4f:ea:37:
                    be:2d:42:91:52:1a:80:ab:46:a3:fe:eb:cc:d1:ec:
                    a1:cd:d7:67:e4:e9:66:f2:58:18:56:b1:66:fc:5f:
                    2d:3a:fc:1a:99:22:4f:04:5b:8a:95:9e:38:9a:8b:
                    cd:d0:81:eb:16:c4:5d:fe:e0:77:2c:55:c8:34:6d:
                    df:b6:8a:76:ad:54:d4:bb:83:ea:36:b7:f2:1f:da:
                    5e:9f:96:40:8b:e4:83:10:27:61:65:dc:4b:7f:a1:
                    a2:27:fc:bd:2b:fe:5d:a7:d9:38:4e:1f:aa:2f:2f:
                    cd:db:27:fd:b4:38:c4:97:24:11:51:94:19:47:11:
                    b3:fa:a7:7d:c3:d3:4f:cd:28:5a:cb:4a:51:47:23:
                    0c:c8:18:c8:c0:51:50:64:b6:8e:1a:41:25:dd:cf:
                    b4:0a:5b:0e:96:60:8d:7c:b2:71:e7:3f:d9:ae:57:
                    80:27:3b:64:6a:c6:24:32:99:0b:6d:81:e2:85:84:
                    d9:e7:dd:c8:8e:ad:35:e0:3a:37:86:66:98:39:65:
                    d4:2e:18:ef:ff:0a:a7:78:f1:5a:b3:8d:dd:28:d1:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:71:4A:28:AE:83:A4:7E:A0:9A:2D:3C:FB:96:71:02:3B:3D:FB:8E
            X509v3 Authority Key Identifier:
                keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:ca:f3:f8:7e:9a:bb:51:5a:a6:79:c1:6a:a3:f7:e7:98:2e:
         e8:9e:7c:85:f2:44:f6:3d:1e:23:77:f3:01:c7:ab:93:08:1a:
         c4:1f:02:fd:f3:ed:75:53:55:bb:7e:15:a4:0c:9b:3d:3f:44:
         25:93:c2:20:6b:3d:65:e0:05:48:4d:6a:d1:a1:4e:78:b8:79:
         f7:0c:0e:73:4b:3d:f6:66:e5:ad:5a:7a:1d:eb:86:e3:96:25:
         22:a2:b0:15:2e:b4:fc:d8:87:d2:01:a8:f4:dd:a9:1a:54:0e:
         fa:cd:94:3f:ff:69:cd:65:b4:92:d8:b6:82:5d:e1:be:b1:5a:
         c5:5f:44:98:0c:39:91:be:e3:3d:37:c7:a9:05:f1:c5:e3:12:
         cc:7b:65:02:47:e6:c1:cd:c5:76:fc:6e:4b:57:24:66:9c:85:
         dd:8e:62:b7:28:eb:90:a1:de:04:37:f0:96:31:48:57:4f:43:
         fd:91:02:6c:d4:46:63:ef:59:f7:b1:f2:52:3f:56:11:27:ec:
         50:61:c3:6c:15:46:fd:0f:ea:f3:bb:4f:93:b8:7f:a2:e9:17:
         94:c8:b9:2e:95:ae:28:51:bf:91:da:e5:a3:da:97:86:a1:38:
         1f:3d:c5:18:5f:eb:3b:5b:26:de:8a:f2:f7:d4:66:5d:14:4b:
         1f:d7:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:48 2026 by rpki-client