This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File:                     HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier:          UpOZFnVL8KjOKr80ZHBlLhME5mawKzewwUVcQPYAJZ0=
Subject key identifier:   9B:1B:CB:01:2E:EA:C3:A3:79:60:6F:68:80:32:6E:C9:DC:49:CB:FB
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer:       /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial:       019C4390B930115E185BD5B775265B6CEF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number:          0F47
Signing time:             Mon 09 Feb 2026 18:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:23 +0000
Files and hashes:         1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: tgIdUT4DYRZnCphEA/CscdRVArgS8jedg7ZexO3/VAg=)
                          2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:b9:30:11:5e:18:5b:d5:b7:75:26:5b:6c:ef:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
        Validity
            Not Before: Feb  9 18:01:23 2026 GMT
            Not After : Feb 10 18:01:23 2026 GMT
        Subject: CN=9b1bcb012eeac3a379606f6880326ec9dc49cbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fc:61:2b:b1:a4:ac:6b:84:8a:66:cd:72:e3:
                    0d:41:80:5f:86:aa:62:9e:c5:78:80:d7:03:99:79:
                    46:ee:ff:15:d5:73:5c:a5:cc:0b:81:44:4c:89:3a:
                    1c:7a:f2:35:59:22:12:57:bc:8e:4e:ea:19:87:e4:
                    7f:8f:f6:f9:c9:4b:bd:a1:f5:76:85:a9:d2:a1:74:
                    b5:93:ef:07:d4:6e:0e:a2:d0:55:a1:72:d0:c0:05:
                    f1:f5:ed:d0:2d:c4:de:3f:fc:23:76:c7:25:dd:20:
                    74:0a:d2:33:da:be:08:30:34:77:0a:c0:ce:34:5e:
                    7e:23:f9:98:64:b6:54:39:79:2e:6c:06:3d:d0:3e:
                    f5:f8:2d:66:ff:07:92:af:86:b8:39:81:35:19:93:
                    1d:bd:10:7f:d7:f3:e7:b9:07:30:79:68:9a:27:80:
                    81:70:81:7f:de:2b:2f:9d:07:7c:f2:8d:0d:c7:ff:
                    5a:61:23:1a:d3:cf:53:1c:ba:a6:01:fb:b7:8f:5b:
                    79:cd:f5:3d:54:27:f7:6d:23:5e:99:8d:fe:fd:6c:
                    ae:48:a7:d4:99:82:0e:6b:e1:88:53:01:6d:f6:4b:
                    42:77:51:5c:6f:e6:5a:d9:19:f8:73:e5:45:35:c6:
                    50:1b:3e:37:f4:0d:e4:c0:41:d7:64:5c:1a:e2:49:
                    6c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:CB:01:2E:EA:C3:A3:79:60:6F:68:80:32:6E:C9:DC:49:CB:FB
            X509v3 Authority Key Identifier:
                keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:56:bb:bb:13:56:10:13:05:90:13:67:73:2a:93:b9:e6:5e:
         de:2d:de:67:22:22:29:ee:c3:12:3d:be:c2:44:a5:88:80:4a:
         07:98:43:4d:20:78:f0:21:8e:73:e4:41:79:b0:9e:7a:3b:56:
         ea:da:59:9a:c0:09:c6:c6:3e:42:f5:6f:28:bb:c5:62:bd:c7:
         2d:15:10:2a:a8:2b:c8:d4:e0:2f:ae:a2:79:07:cd:18:e0:ff:
         cf:20:03:6e:ca:ae:d9:c8:04:fb:59:ba:97:f6:98:5b:c9:c2:
         6b:91:3a:e6:9c:4a:b7:b5:d2:36:17:0e:dc:dd:91:cb:fe:84:
         d5:9b:53:be:00:80:3c:ac:3d:bf:8b:63:79:1f:62:58:e6:34:
         83:d0:00:d0:7a:56:0c:ba:7e:c8:c8:53:47:a5:c3:18:a9:ec:
         17:a9:79:c8:46:e0:0d:ab:03:43:dd:c6:32:00:a2:2c:0d:ba:
         97:c6:d3:62:ee:e2:1d:b0:34:b5:1c:dc:70:e7:c3:77:56:0b:
         6a:3c:46:ee:0c:4d:ed:38:35:92:0a:e6:37:2e:bb:54:5d:3c:
         38:d8:25:b6:dd:68:d3:32:2e:41:72:f4:0a:9d:54:13:9f:04:
         05:8b:ea:f1:c3:d3:9e:aa:cb:9d:cc:36:9f:4e:63:a8:3a:f8:
         92:b2:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:40 2026 by rpki-client