This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File:                     ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier:          1RTpDmXFmVvhJoSXC+IZ7KpUPRoD5UHsmUuxy/evuSo=
Subject key identifier:   37:DD:EE:5D:E4:E0:62:95:F8:F2:9A:7A:57:D5:7E:16:B0:38:49:D3
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer:       /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial:       019C435957E02973BFC81582EE5D2D5E7E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number:          16D6
Signing time:             Mon 09 Feb 2026 17:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:54 +0000
Files and hashes:         1: 10VeRd-dKyjhB82yK0FZfBzYDrU.roa (hash: Q3l/6xX2yJgapH3cvOFve36CvHD208D4sxfTot+xau4=)
                          2: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: 6fHud6HU6kR8+dVjNNffKRlAbNjA6EW98NFS9sHoXnI=)
                          3: l5D9Tvi9Koza2_mxtzxJQq_s-s0.roa (hash: 0MIxUszJignbxKF108EhpKWB6naIZK2n8zx9GIqX7e4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:57:e0:29:73:bf:c8:15:82:ee:5d:2d:5e:7e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
        Validity
            Not Before: Feb  9 17:00:54 2026 GMT
            Not After : Feb 10 17:00:54 2026 GMT
        Subject: CN=37ddee5de4e06295f8f29a7a57d57e16b03849d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:38:f7:bd:b5:57:83:cf:0c:a5:b1:b4:48:
                    c1:da:71:ce:bb:3b:9b:3b:b0:32:f0:f1:83:72:4e:
                    64:3f:9e:04:96:8b:7c:a0:5e:f4:02:62:ca:8d:f0:
                    f5:5c:40:ce:ff:da:2d:3e:df:32:6d:e4:47:6c:23:
                    82:42:ad:03:9a:bc:ec:50:10:23:06:1d:9d:09:1d:
                    a4:e0:ad:c8:ae:93:4c:81:bc:32:4e:0e:16:43:df:
                    cc:b4:10:ef:2f:36:14:18:bf:15:db:04:59:e5:cc:
                    66:dd:6c:6c:da:b3:7b:43:11:c6:b9:c2:48:70:a1:
                    e6:7e:c3:c7:58:65:36:95:65:44:ff:04:4d:ec:fb:
                    9f:3a:b9:51:b8:25:10:3d:53:30:76:6d:b9:ec:ad:
                    a3:5e:d6:27:15:fe:20:40:7b:a7:e8:a7:79:b4:81:
                    df:88:2f:35:22:7a:6d:8a:75:78:36:a2:e9:c2:26:
                    bb:14:4b:84:e6:10:fe:fe:58:1a:a1:b8:94:7e:5f:
                    74:0d:e9:14:e2:2c:5b:56:77:32:d4:c3:0a:8f:12:
                    0f:1c:fa:b8:80:96:1b:b3:b9:44:41:d5:4d:ce:2e:
                    ba:62:cf:5b:17:7f:a1:84:af:9c:be:07:a6:36:25:
                    9e:1a:88:81:93:c0:4c:a3:a0:72:2a:f9:71:3a:cf:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DD:EE:5D:E4:E0:62:95:F8:F2:9A:7A:57:D5:7E:16:B0:38:49:D3
            X509v3 Authority Key Identifier:
                keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:04:7d:e9:d1:0d:b4:08:6c:31:eb:cd:2f:cb:36:3b:50:
         45:28:a8:dd:b7:39:ee:a8:00:ec:f3:2a:11:4b:45:2c:2f:47:
         b0:52:87:75:aa:af:73:cd:a8:13:92:a3:d6:77:16:c8:36:f8:
         68:d8:4f:68:9c:fe:96:4f:b7:52:fb:ba:b8:68:e9:1b:ea:37:
         37:0d:ca:b3:a3:93:e8:13:c9:94:41:89:f1:00:06:b6:03:d4:
         5c:ba:17:a5:3b:8a:50:c2:26:bd:13:65:aa:9e:fc:cb:bf:fc:
         e2:89:24:fc:1a:48:b5:cc:9a:2a:8d:b2:cf:91:3e:07:32:69:
         d3:27:a7:b1:43:ce:9f:ea:1b:4d:ee:e5:4f:aa:7d:30:d2:8e:
         c0:8f:ed:26:d4:64:14:55:7f:b8:d3:7c:10:9e:41:52:eb:cd:
         ae:4e:35:da:cd:00:e9:ae:b8:b9:46:65:83:cb:06:ee:5d:04:
         f1:6a:1d:95:4f:0f:ca:d8:15:59:fe:ff:64:b2:ad:2f:4d:d8:
         f3:22:d0:9d:47:a8:1c:f2:c2:8f:81:11:13:39:05:12:12:40:
         43:be:6c:03:a7:4e:f4:ce:f7:08:d4:83:b8:f6:c0:c6:5d:8d:
         a5:b1:2e:b8:8e:d5:e5:b3:d1:5d:01:23:93:e9:ce:98:82:bf:
         90:1d:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:12:33 2026 by rpki-client