This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File:                     H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier:          HNCvovT84LTSKR19aaDYD/6FKOKufRaWKw+Gi+534Lg=
Subject key identifier:   23:D1:D4:75:F8:BF:C4:FD:8F:40:4F:1F:F9:08:18:F5:03:AF:73:A6
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       019C2BBF200A2CF090E191C0D442873394D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number:          1822
Signing time:             Thu 05 Feb 2026 03:01:11 +0000
Manifest this update:     Thu 05 Feb 2026 03:01:11 +0000
Manifest next update:     Fri 06 Feb 2026 03:01:11 +0000
Files and hashes:         1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=)
                          2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=)
                          3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=)
                          4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=)
                          5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=)
                          6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=)
                          7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: ZQ+Q3hBGO7AQMPWKnDXqMvJudJiOb3DuNcz1YsK0S8A=)
                          8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=)
                          9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=)
                          10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=)
                          11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=)
                          12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=)
                          13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=)
                          14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=)
                          15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=)
                          16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=)
                          17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=)
                          18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=)
                          19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=)
                          20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=)
                          21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=)
                          22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=)
                          23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=)
                          24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=)
                          25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=)
                          26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=)
                          27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=)
                          28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=)
                          29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=)
                          30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=)
                          31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=)
                          32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=)
                          33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=)
                          34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=)
                          35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2b:bf:20:0a:2c:f0:90:e1:91:c0:d4:42:87:33:94:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Feb  5 03:01:11 2026 GMT
            Not After : Feb  6 03:01:11 2026 GMT
        Subject: CN=23d1d475f8bfc4fd8f404f1ff90818f503af73a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:4d:29:f9:78:41:26:35:1a:5f:5b:c9:15:
                    fb:f8:28:0a:a8:3d:95:05:28:fd:e5:25:47:d3:fc:
                    35:08:60:0b:da:c0:48:b7:21:44:88:2c:72:03:ff:
                    a0:a2:7e:32:a3:b5:57:90:61:cc:37:d3:bd:7d:f9:
                    e6:76:58:87:2d:0d:5c:66:fa:9a:15:8f:4f:17:6c:
                    48:e0:29:54:ba:90:44:07:31:29:a7:9b:34:98:8a:
                    61:4d:69:9c:c5:bb:87:65:3c:c2:77:d0:b4:af:c5:
                    c2:e4:4c:04:e7:cf:ae:77:93:01:6f:01:a1:f2:15:
                    9a:dc:3a:16:59:9d:d3:74:6d:52:f4:cd:c0:80:c2:
                    25:ea:0c:f9:65:fb:e9:6a:1a:c4:08:7f:b4:10:b4:
                    dd:b2:f2:0a:b0:b9:50:d0:a9:35:93:1b:74:02:e9:
                    7d:51:7f:eb:cc:2b:2e:f5:2f:dc:dc:31:9c:8e:a9:
                    04:b1:cf:09:69:5b:e7:39:67:b3:bf:fa:51:eb:6a:
                    a8:ef:ef:46:4f:4f:aa:5f:0c:89:6d:b9:cb:45:63:
                    39:b8:db:14:aa:84:5d:3f:b8:73:10:cb:2b:9a:c4:
                    db:e7:74:5b:89:55:60:25:50:8f:f7:12:f6:6b:7a:
                    49:4f:3c:72:28:34:d2:9a:a5:00:59:ce:b6:58:61:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D1:D4:75:F8:BF:C4:FD:8F:40:4F:1F:F9:08:18:F5:03:AF:73:A6
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:1e:ce:06:e0:75:2f:64:12:22:97:90:3f:98:a5:3b:31:
         a7:44:ae:b1:bc:fc:d0:89:32:e2:4c:1c:17:98:4e:38:33:e6:
         e6:1a:8e:68:47:f7:ce:dc:76:fb:84:75:be:8c:b8:01:a0:40:
         ec:87:7e:22:c8:b1:51:12:71:39:27:ac:a7:0e:5b:cd:ef:c2:
         c7:a8:cb:eb:b1:f9:be:6c:44:91:fc:32:0b:47:b0:f6:e2:cc:
         1c:3d:f2:5b:7a:c6:f3:5b:ef:9f:13:6c:7e:1d:49:ff:68:19:
         4a:bc:f1:fe:5b:71:22:a4:23:06:f6:8f:10:fa:db:0e:7d:a4:
         81:ef:65:48:7e:c9:a1:0c:5b:a9:c4:72:4b:06:e9:85:93:58:
         7a:aa:16:75:c5:44:fc:7c:65:38:94:e7:16:97:40:55:84:30:
         ee:59:c0:55:fc:fa:52:0c:28:b2:07:c7:54:a1:ac:5f:67:87:
         e0:50:57:f1:12:3a:10:61:ae:c6:c0:4d:af:e7:ec:a7:af:78:
         df:a3:50:78:10:83:6a:49:d6:9d:dd:d3:91:b1:52:cb:21:8c:
         d6:35:1f:c9:5d:4f:21:d2:13:32:94:d6:10:1c:e4:54:b9:d1:
         34:4e:58:08:53:b0:d1:fb:b4:a0:03:f7:64:67:f6:9d:cf:35:
         33:2c:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 12:24:00 2026 by rpki-client