This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File:                     H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier:          y1Y/IYrGkEtUjfUp1+0EB/Dz7Zvlv0CW3WFc8CTmsJA=
Subject key identifier:   AB:34:67:92:78:83:74:18:9D:58:93:ED:40:89:96:68:E7:73:7B:3B
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer:       /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial:       019C43900009D69EFADD1D8D29B2716ED9FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:36 +0000
Files and hashes:         1: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: OuFwW74DX8ROub7S5r4OiUMDO90V5ZTBsck0DeFS/R0=)
                          2: T6n7EDa7L7y2Likx1LJt9fY0e84.roa (hash: 1EysGC86dcCWQcka9wvraq3MLvlF/xfglQjOwZsEyRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:00:09:d6:9e:fa:dd:1d:8d:29:b2:71:6e:d9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
        Validity
            Not Before: Feb  9 18:00:36 2026 GMT
            Not After : Feb 10 18:00:36 2026 GMT
        Subject: CN=ab346792788374189d5893ed40899668e7737b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:d9:04:18:87:3f:b2:77:93:ac:38:f5:73:
                    50:b9:e0:45:a8:be:6c:e4:53:ef:ee:34:50:3a:b5:
                    c1:27:e6:f8:d1:51:17:6d:01:8d:86:d9:ee:1b:48:
                    76:bd:b8:1c:cf:3c:49:bd:de:f7:14:e9:1b:9f:21:
                    f2:ac:93:aa:1c:98:55:97:e0:93:b0:4c:a9:3a:fd:
                    22:d0:c2:02:cb:f2:ff:af:99:60:46:f3:38:48:5d:
                    c9:ac:46:c6:39:26:92:28:2f:c7:2c:b2:e6:b7:6c:
                    42:0e:36:ca:5d:97:53:fa:3d:63:d6:cd:d8:cb:72:
                    f4:e9:8a:67:0b:81:42:55:06:65:01:c4:bc:8a:64:
                    fb:5e:e2:52:43:7d:53:ff:02:74:79:8e:2c:4a:af:
                    3d:ba:71:a4:74:85:e3:fe:73:98:66:e5:63:25:bc:
                    e6:2d:4a:22:07:1c:91:29:57:98:0b:f1:3a:3a:90:
                    f6:d3:78:ae:fe:23:36:5a:1a:e5:fc:f8:24:56:07:
                    c0:70:98:6a:b9:c6:08:f0:7d:0e:72:7a:ba:c3:cb:
                    7e:cf:f1:ef:96:c5:e8:b7:a9:df:b1:3a:f4:d6:46:
                    ff:2a:13:ea:80:07:13:6e:04:e5:b0:65:0e:08:62:
                    b5:c4:d7:1d:d3:49:55:43:e0:f9:57:a5:c9:d4:58:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:67:92:78:83:74:18:9D:58:93:ED:40:89:96:68:E7:73:7B:3B
            X509v3 Authority Key Identifier:
                keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:26:ae:f1:5f:0f:28:04:85:53:e1:46:4d:c3:cc:60:ec:a5:
         fd:47:21:27:69:c9:e1:87:09:96:ae:b4:23:21:de:8d:bb:d2:
         79:52:e4:83:f9:a3:b0:b1:9e:40:95:1e:6b:d9:b0:4a:62:ec:
         32:bb:a3:cf:73:91:41:c7:fa:9f:32:47:a3:72:f9:20:f5:b3:
         95:0f:f2:bb:68:04:b4:66:19:5b:56:7d:2b:03:2e:27:78:f3:
         37:bf:2e:51:62:bf:5d:56:81:06:31:43:6b:d2:14:e5:51:27:
         7b:10:43:d9:d2:d0:1f:0f:ca:7a:5f:8f:39:db:61:77:03:61:
         a9:17:c3:a7:b3:af:3b:7f:77:ac:42:65:b9:cb:ab:3a:8f:8b:
         34:17:cb:6f:49:bb:a9:d4:83:9d:e8:8b:70:6e:af:8b:ee:c3:
         27:91:6b:8e:30:4e:26:d1:ad:fe:ee:3a:57:45:d9:b5:e0:1d:
         e8:6a:87:64:1c:f3:0e:60:f7:d9:43:3a:55:47:aa:9f:7c:f4:
         d1:84:7a:0d:02:ed:21:0f:8b:6b:6a:77:0d:07:b1:e2:34:3a:
         7d:29:45:41:9f:b3:fd:2a:99:eb:0d:38:b0:83:92:9f:bb:67:
         98:e3:2f:a0:ea:b6:1c:d4:70:b0:6b:9c:f4:e1:46:89:77:1f:
         2c:54:d8:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkAAJ1p763R2NKbJxbtn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZmE3Zjc3MmIzMjNiMjRkYmU2OWQzZjNhY2Y3NTVlNjlk
NjAxY2QwHhcNMjYwMjA5MTgwMDM2WhcNMjYwMjEwMTgwMDM2WjAzMTEwLwYDVQQD
EyhhYjM0Njc5Mjc4ODM3NDE4OWQ1ODkzZWQ0MDg5OTY2OGU3NzM3YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ7ZBBiHP7J3k6w49XNQueBFqL5s
5FPv7jRQOrXBJ+b40VEXbQGNhtnuG0h2vbgczzxJvd73FOkbnyHyrJOqHJhVl+CT
sEypOv0i0MICy/L/r5lgRvM4SF3JrEbGOSaSKC/HLLLmt2xCDjbKXZdT+j1j1s3Y
y3L06YpnC4FCVQZlAcS8imT7XuJSQ31T/wJ0eY4sSq89unGkdIXj/nOYZuVjJbzm
LUoiBxyRKVeYC/E6OpD203iu/iM2Whrl/PgkVgfAcJhqucYI8H0Ocnq6w8t+z/Hv
lsXot6nfsTr01kb/KhPqgAcTbgTlsGUOCGK1xNcd00lVQ+D5V6XJ1FiPCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKs0Z5J4g3QYnViT7UCJlmjnc3s7MB8GA1UdIwQY
MBaAFB/6f3crMjsk2+adPzrPdV5p1gHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDZiMzgtNzZlYy00NzJlLWE5NGIt
ODcwMzRmOWZjZTYxLzEvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MDZiMzgtNzZlYy00NzJlLWE5NGItODcwMzRmOWZjZTYx
LzEvSF9wX2R5c3lPeVRiNXAwX09zOTFYbW5XQWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSau8V8P
KASFU+FGTcPMYOyl/UchJ2nJ4YcJlq60IyHejbvSeVLkg/mjsLGeQJUea9mwSmLs
Mrujz3ORQcf6nzJHo3L5IPWzlQ/yu2gEtGYZW1Z9KwMuJ3jzN78uUWK/XVaBBjFD
a9IU5VEnexBD2dLQHw/Kel+POdthdwNhqRfDp7OvO393rEJlucurOo+LNBfLb0m7
qdSDneiLcG6vi+7DJ5FrjjBOJtGt/u46V0XZteAd6GqHZBzzDmD32UM6VUeqn3z0
0YR6DQLtIQ+La2p3DQex4jQ6fSlFQZ+z/SqZ6w04sIOSn7tnmOMvoOq2HNRwsGuc
9OFGiXcfLFTY/w==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:25 2026 by rpki-client