This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File:                     huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier:          ABpQOCr/W7etC+MoYpuEakYD3Ox5srZXE8o1AuNxVtA=
Subject key identifier:   41:E3:6E:3C:99:F9:75:AC:09:F1:24:E3:21:4F:02:D9:CD:80:1C:05
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer:       /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial:       019C42B42E3D5D088442EEA9F9EE80667040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number:          1113
Signing time:             Mon 09 Feb 2026 14:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:30 +0000
Files and hashes:         1: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: tnjrp0FbN9eC20cjF5y3Y/eINWlARdXMzE/fY1wwZG8=)
                          2: rU0QXFNtoWCEtxH8VZt7NQjfBkk.roa (hash: DX5PpK5nvqYsY6Lg/VDy96ASHQyrvBhk9m8SNvIdQJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:2e:3d:5d:08:84:42:ee:a9:f9:ee:80:66:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
        Validity
            Not Before: Feb  9 14:00:30 2026 GMT
            Not After : Feb 10 14:00:30 2026 GMT
        Subject: CN=41e36e3c99f975ac09f124e3214f02d9cd801c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:a0:75:3c:c4:a8:a4:2d:0d:78:74:0f:d1:
                    d9:bc:98:62:36:5f:2f:07:32:41:eb:bb:ed:05:5a:
                    9e:60:d1:71:c3:6c:75:3e:d7:aa:ef:5d:6a:0d:71:
                    4b:d5:cf:2d:d2:1e:de:d5:11:eb:a2:57:c7:5e:37:
                    84:2c:df:4c:96:38:c7:ff:e7:91:c1:dc:08:e9:9e:
                    44:0e:8b:fb:e1:97:48:5f:84:1b:9a:58:ab:f7:bd:
                    16:d6:97:0f:4f:10:6d:f0:04:7c:59:8d:0f:e0:92:
                    68:87:a8:ff:cd:6e:61:44:d7:ac:9e:f3:ec:4d:70:
                    78:29:31:13:17:82:fb:0e:a5:9b:34:1f:d4:13:97:
                    a1:69:c0:ed:b1:6b:2b:06:6c:03:2b:05:63:70:7b:
                    6c:42:3a:a5:07:51:fc:f9:4f:55:69:2a:82:c2:5f:
                    ab:82:bc:8a:2d:35:07:4f:c9:54:a6:44:74:db:1a:
                    1b:fe:e7:65:04:42:a8:4d:fc:16:8c:66:d1:c4:ee:
                    11:f4:d8:6f:ac:80:2f:f2:03:d6:5b:fc:ce:0d:bd:
                    e5:ca:8a:4d:7b:39:bf:47:97:f8:ab:2a:52:ee:96:
                    3e:72:11:f5:8f:8d:fc:83:ba:bb:c0:c0:41:e4:96:
                    f3:33:f6:fa:45:70:2d:ac:4a:07:d7:ec:9c:a1:12:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:6E:3C:99:F9:75:AC:09:F1:24:E3:21:4F:02:D9:CD:80:1C:05
            X509v3 Authority Key Identifier:
                keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:c6:a8:85:84:04:13:2f:d8:83:db:f7:b8:ab:70:41:3a:
         8b:cb:d3:16:fd:81:85:28:8a:4d:42:f9:2b:e8:33:97:d0:5e:
         a0:18:66:33:fe:51:48:73:e5:be:83:da:ac:48:04:e7:da:76:
         e7:c5:35:a2:51:50:5c:b2:24:4e:d6:5c:95:72:c8:a2:5e:3e:
         71:9e:1f:06:30:c4:45:d9:54:a7:d9:78:5a:40:fe:71:9b:88:
         d0:fd:00:5b:fd:e7:6e:49:89:58:f5:b7:65:34:56:29:e9:7f:
         f6:05:f7:e0:e1:f3:b8:c2:dd:df:01:a9:ed:fb:a1:a6:b7:b3:
         27:df:31:35:4b:6a:60:25:c4:ba:2f:7e:9f:fc:58:3a:9c:76:
         5f:08:d4:51:17:e2:0d:9f:fe:38:4d:30:28:98:23:f9:c7:70:
         52:fb:89:7c:a7:20:4c:78:08:b4:7b:59:ef:0c:bb:a1:00:d4:
         4e:03:97:40:1b:ac:0b:f8:ce:a4:db:a0:5b:5e:c5:69:98:bd:
         6c:b9:d6:f0:87:b2:ea:94:8b:10:b1:f1:3a:98:07:d4:50:d7:
         cf:79:70:bb:f7:b4:55:88:55:50:ab:60:cc:da:8e:d7:af:a2:
         b9:7d:2c:b3:ab:32:c6:71:e8:d0:47:6e:8d:9d:d4:75:ed:df:
         8e:3f:96:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtC49XQiEQu6p+e6AZnBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZTFhYmE2MDBjZGU1ZWMzMTgzMTliMTU1OTRiNjhhYjk2
Yzk1NmMwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD
Eyg0MWUzNmUzYzk5Zjk3NWFjMDlmMTI0ZTMyMTRmMDJkOWNkODAxYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PigdTzEqKQtDXh0D9HZvJhiNl8v
BzJB67vtBVqeYNFxw2x1Pteq711qDXFL1c8t0h7e1RHrolfHXjeELN9MljjH/+eR
wdwI6Z5EDov74ZdIX4Qbmlir970W1pcPTxBt8AR8WY0P4JJoh6j/zW5hRNesnvPs
TXB4KTETF4L7DqWbNB/UE5ehacDtsWsrBmwDKwVjcHtsQjqlB1H8+U9VaSqCwl+r
gryKLTUHT8lUpkR02xob/udlBEKoTfwWjGbRxO4R9NhvrIAv8gPWW/zODb3lyopN
ezm/R5f4qypS7pY+chH1j438g7q7wMBB5JbzM/b6RXAtrEoH1+ycoRKutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHjbjyZ+XWsCfEk4yFPAtnNgBwFMB8GA1UdIwQY
MBaAFIbhq6YAzeXsMYMZsVWUtoq5bJVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNjg0NWQtMWMzYy00OGQ2LWE2YjIt
ZDYwNWM1M2EzNWJlLzEvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lNjg0NWQtMWMzYy00OGQ2LWE2YjItZDYwNWM1M2EzNWJl
LzEvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNTGqIWE
BBMv2IPb97ircEE6i8vTFv2BhSiKTUL5K+gzl9BeoBhmM/5RSHPlvoParEgE59p2
58U1olFQXLIkTtZclXLIol4+cZ4fBjDERdlUp9l4WkD+cZuI0P0AW/3nbkmJWPW3
ZTRWKel/9gX34OHzuMLd3wGp7fuhprezJ98xNUtqYCXEui9+n/xYOpx2XwjUURfi
DZ/+OE0wKJgj+cdwUvuJfKcgTHgItHtZ7wy7oQDUTgOXQBusC/jOpNugW17FaZi9
bLnW8Iey6pSLELHxOpgH1FDXz3lwu/e0VYhVUKtgzNqO16+iuX0ss6syxnHo0Edu
jZ3Ude3fjj+WKg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:35 2026 by rpki-client