This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
File:                     hbYRoLfUM0t6I5XozOew48m4OOg.mft (raw, json)
Hash identifier:          xeUvD3AFd+YyJnu9lvdGpG/v0yLXWp2J6s/zdF14Jq0=
Subject key identifier:   EC:A3:42:E3:39:37:42:C2:02:E5:50:07:9F:B9:04:C1:14:8B:3B:1F
Authority key identifier: 85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8
Certificate issuer:       /CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
Certificate serial:       019C42EB045D58B47283CE16302491ADC0DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
Manifest number:          1318
Signing time:             Mon 09 Feb 2026 15:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:24 +0000
Files and hashes:         1: hbYRoLfUM0t6I5XozOew48m4OOg.crl (hash: mcE6LMlQsL0wzybfWHEWZFU1Juf0sXXj2kqDPDbgWZc=)
                          2: m-rsXaeOpkpdSMqwVTpewPk00d4.roa (hash: rIs/IZogYIqQxOz7ptGPvRo3thst3hZ+JDFL9DxC1k8=)
                          3: x_DMZGJsbuDtxrP8_5aAtJAHah4.roa (hash: MEzmMNL5npMBSYbvubxXk2b9wk818GmjUSqjwh512m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:04:5d:58:b4:72:83:ce:16:30:24:91:ad:c0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b611a0b7d4334b7a2395e8cce7b0e3c9b838e8
        Validity
            Not Before: Feb  9 15:00:24 2026 GMT
            Not After : Feb 10 15:00:24 2026 GMT
        Subject: CN=eca342e3393742c202e550079fb904c1148b3b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:a8:3a:26:6f:13:88:e1:9f:26:c2:3d:44:
                    96:cd:fe:9f:df:36:9a:6f:24:88:69:0e:b8:85:14:
                    4a:5b:d9:b6:3e:48:ca:61:09:00:ac:9f:fe:d1:3f:
                    88:c1:54:b2:b2:a4:94:70:82:d4:3e:db:7a:7e:29:
                    6c:17:11:a8:de:b0:a8:b8:a0:2e:33:aa:7c:25:23:
                    26:b8:71:7d:db:d7:c2:39:94:b1:46:b4:41:82:76:
                    3d:47:d7:12:43:c3:b0:23:d4:b9:32:75:22:28:76:
                    86:59:ef:db:f6:f0:f5:9f:7d:41:88:d3:6c:32:e0:
                    6e:d4:eb:7d:b2:14:2d:d3:d2:43:ba:8b:30:0e:5b:
                    3f:ef:89:86:90:f4:f6:4e:0e:de:1d:a3:a8:89:db:
                    89:a4:b4:f8:09:b1:e6:cd:a7:85:6a:fa:c2:2a:79:
                    75:89:bb:e1:ef:3a:65:42:08:9a:72:2b:1b:3c:92:
                    15:24:c7:2e:66:18:be:2e:10:e2:02:db:29:b1:7b:
                    0f:11:48:76:1a:0e:f3:ea:1d:63:a1:2b:41:70:2b:
                    95:a2:ef:07:32:dc:0a:a1:94:28:c0:7f:b3:96:89:
                    88:fa:89:d2:ab:8d:66:75:01:35:c5:e1:00:e4:cd:
                    05:54:6f:d3:d9:7b:65:af:33:a8:a6:2d:42:9c:3e:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A3:42:E3:39:37:42:C2:02:E5:50:07:9F:B9:04:C1:14:8B:3B:1F
            X509v3 Authority Key Identifier:
                keyid:85:B6:11:A0:B7:D4:33:4B:7A:23:95:E8:CC:E7:B0:E3:C9:B8:38:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbYRoLfUM0t6I5XozOew48m4OOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9d563d-c470-43b3-82bb-88cb4e7106ea/1/hbYRoLfUM0t6I5XozOew48m4OOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:ea:73:b9:0c:c2:19:37:71:61:43:9d:6e:44:16:59:13:
         1d:fa:c7:69:7b:05:1c:5c:8e:c4:df:f7:2c:d2:c1:e9:a7:ef:
         64:7b:d7:42:01:0a:08:7b:14:9e:b1:88:d1:c0:c7:f7:d7:f6:
         dd:0e:93:25:a8:36:f2:02:8a:2a:ea:4f:04:60:7f:37:e0:90:
         0d:c2:2f:55:8e:d1:33:5b:11:50:be:dd:74:af:44:9d:1a:8e:
         bd:29:77:85:04:03:a4:09:53:60:cd:98:3b:d4:4c:e2:41:d1:
         ec:3b:a0:e0:85:99:33:47:71:d9:de:c9:e3:cd:7f:f5:35:1d:
         28:14:d5:03:14:86:d8:8a:88:8e:8a:06:fd:5c:e1:8b:0c:d6:
         81:e4:77:98:14:b9:80:10:0d:bd:b0:75:f4:d6:2c:a7:fe:8c:
         30:bb:ce:d3:c0:b3:07:4f:08:7f:fb:0c:bd:ab:32:6a:19:b1:
         19:8a:77:7f:4b:c5:3c:91:b1:02:ea:b6:3a:e0:3e:3f:bc:8a:
         ac:0c:54:26:a3:b3:fd:c6:67:e2:0b:54:f1:66:98:1e:7c:bc:
         96:71:49:33:0c:e3:31:65:20:e8:b8:48:1a:86:77:75:b6:ba:
         e6:59:84:db:87:86:a5:3d:8c:45:c3:4c:01:09:ea:df:13:fe:
         89:34:6b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6wRdWLRyg84WMCSRrcDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjYxMWEwYjdkNDMzNGI3YTIzOTVlOGNjZTdiMGUzYzli
ODM4ZTgwHhcNMjYwMjA5MTUwMDI0WhcNMjYwMjEwMTUwMDI0WjAzMTEwLwYDVQQD
EyhlY2EzNDJlMzM5Mzc0MmMyMDJlNTUwMDc5ZmI5MDRjMTE0OGIzYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAOoOiZvE4jhnybCPUSWzf6f3zaa
bySIaQ64hRRKW9m2PkjKYQkArJ/+0T+IwVSysqSUcILUPtt6filsFxGo3rCouKAu
M6p8JSMmuHF929fCOZSxRrRBgnY9R9cSQ8OwI9S5MnUiKHaGWe/b9vD1n31BiNNs
MuBu1Ot9shQt09JDuoswDls/74mGkPT2Tg7eHaOoiduJpLT4CbHmzaeFavrCKnl1
ibvh7zplQgiacisbPJIVJMcuZhi+LhDiAtspsXsPEUh2Gg7z6h1joStBcCuVou8H
MtwKoZQowH+zlomI+onSq41mdQE1xeEA5M0FVG/T2XtlrzOopi1CnD5YWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyjQuM5N0LCAuVQB5+5BMEUizsfMB8GA1UdIwQY
MBaAFIW2EaC31DNLeiOV6MznsOPJuDjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmIt
ODhjYjRlNzEwNmVhLzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZDU2M2QtYzQ3MC00M2IzLTgyYmItODhjYjRlNzEwNmVh
LzEvaGJZUm9MZlVNMHQ2STVYb3pPZXc0OG00T09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv/qc7kM
whk3cWFDnW5EFlkTHfrHaXsFHFyOxN/3LNLB6afvZHvXQgEKCHsUnrGI0cDH99f2
3Q6TJag28gKKKupPBGB/N+CQDcIvVY7RM1sRUL7ddK9EnRqOvSl3hQQDpAlTYM2Y
O9RM4kHR7Dug4IWZM0dx2d7J481/9TUdKBTVAxSG2IqIjooG/VzhiwzWgeR3mBS5
gBANvbB19NYsp/6MMLvO08CzB08If/sMvasyahmxGYp3f0vFPJGxAuq2OuA+P7yK
rAxUJqOz/cZn4gtU8WaYHny8lnFJMwzjMWUg6LhIGoZ3dba65lmE24eGpT2MRcNM
AQnq3xP+iTRrQQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:29 2026 by rpki-client