This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File:                     HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier:          551TzrRAGsWXvXqrKEK0ZF4lU2O85cGEEntK8vU7/zs=
Subject key identifier:   FD:F6:DB:CF:5F:4A:ED:55:48:6D:87:38:1D:75:0B:A2:60:A0:08:04
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer:       /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial:       019C4358D295833CFFFCFF85C6465734ED2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number:          0426
Signing time:             Mon 09 Feb 2026 17:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:20 +0000
Files and hashes:         1: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: rZW7Nkvwo0CJwnU3kbLfO6fjsxeFgreJ3MSZkoaxH/c=)
                          2: XvJvaUc4gaJUToQ76MM1kHVGNGU.roa (hash: NE/4IfdQ6s0w4LuquGmioWt3Qf9HyX4cZ81awfNlomU=)
                          3: m9orr3_HDB2VIxsnO3nw4fOWGlA.roa (hash: IDz4lKOdFmT1RLfeCHLt7gBIXRdFVo8h3QOhQHPZfWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d2:95:83:3c:ff:fc:ff:85:c6:46:57:34:ed:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
        Validity
            Not Before: Feb  9 17:00:20 2026 GMT
            Not After : Feb 10 17:00:20 2026 GMT
        Subject: CN=fdf6dbcf5f4aed55486d87381d750ba260a00804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:63:86:5f:7b:4d:20:95:5e:46:52:16:76:
                    ff:13:c2:ff:bd:c0:f8:a0:87:68:3f:65:7b:a7:fb:
                    77:2e:ba:f3:97:0f:cc:08:76:db:8d:8d:d8:9d:a9:
                    65:7d:9b:63:6e:fc:77:9c:0e:f2:17:60:1c:e9:eb:
                    75:a4:11:5f:1e:06:3e:c5:3d:e4:25:c9:ed:ff:20:
                    14:a0:54:a1:7b:bf:13:07:62:31:ba:b5:5e:e8:42:
                    6a:b3:ce:38:99:4e:c5:56:2e:59:7a:31:d2:27:61:
                    e1:b7:73:93:3d:5b:b6:a6:f4:48:28:c8:a9:9e:6c:
                    a4:50:21:f6:28:b2:3b:e4:7f:b3:a6:2f:b9:65:09:
                    dc:fc:db:83:a2:c9:92:1a:be:e0:52:48:ba:51:f6:
                    3f:26:0d:ae:20:ed:55:c9:e9:15:89:4f:52:0f:16:
                    87:38:a0:c9:b3:64:46:d0:75:fb:32:68:cf:74:53:
                    cd:99:14:10:53:c9:41:6a:12:f2:8c:51:7a:0e:36:
                    83:e0:9a:83:fa:85:f4:dd:48:c7:16:bf:ea:29:62:
                    ee:24:91:05:2f:13:17:7f:c4:85:18:c2:44:af:e7:
                    ec:00:e1:11:37:0a:73:79:fa:0c:46:f1:3d:ca:4e:
                    42:31:43:d9:69:2b:76:19:12:df:2c:b4:64:cc:6e:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F6:DB:CF:5F:4A:ED:55:48:6D:87:38:1D:75:0B:A2:60:A0:08:04
            X509v3 Authority Key Identifier:
                keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:05:8a:0a:85:84:e4:7f:17:e8:05:34:05:88:38:ea:3c:92:
         a3:a5:d9:34:34:3e:ac:3b:7c:fd:71:37:8d:51:9a:93:c7:4b:
         14:ea:38:28:51:cb:41:c0:9d:7a:85:8d:0a:c7:7b:48:04:f4:
         1c:ae:96:f5:02:a4:ed:d6:88:72:59:c3:0f:69:c8:99:45:c5:
         6a:fd:5b:d7:2d:87:2b:ba:47:54:06:e3:e9:96:21:cb:85:70:
         a9:e9:a9:29:73:01:53:4d:17:fd:9e:5d:b8:e0:11:ae:69:ed:
         f0:07:42:e6:84:90:c0:24:e9:b5:6a:37:70:89:27:ea:2b:89:
         12:75:30:c5:6f:4e:ca:2c:d7:97:4e:95:17:9e:50:1b:ba:e5:
         8c:13:5e:da:be:fd:1b:68:2e:db:ca:e0:63:17:e1:1d:fa:9b:
         72:4c:74:b0:b7:45:09:1d:3e:a6:0e:7e:d9:00:09:14:f0:bf:
         00:d4:f3:3f:2e:5d:d2:aa:e0:d0:2f:9b:04:51:31:f4:65:ba:
         c4:e2:56:3c:8c:17:fd:1a:6b:ad:73:89:ef:c9:c4:67:27:14:
         b5:da:4e:3a:1f:1f:df:d8:2f:3a:19:0e:2d:90:51:19:4b:30:
         f4:e0:71:e9:be:fa:70:4c:21:80:d7:55:33:c1:6d:d5:f4:3b:
         6a:57:cb:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWNKVgzz//P+FxkZXNO0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGU4ZGY1YzAzMTEwNzExOGRhNjFmMjlhYjRmNDE5ZDI5
ZDVhOGEwHhcNMjYwMjA5MTcwMDIwWhcNMjYwMjEwMTcwMDIwWjAzMTEwLwYDVQQD
EyhmZGY2ZGJjZjVmNGFlZDU1NDg2ZDg3MzgxZDc1MGJhMjYwYTAwODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Jjhl97TSCVXkZSFnb/E8L/vcD4
oIdoP2V7p/t3Lrrzlw/MCHbbjY3YnallfZtjbvx3nA7yF2Ac6et1pBFfHgY+xT3k
Jcnt/yAUoFShe78TB2IxurVe6EJqs844mU7FVi5ZejHSJ2Hht3OTPVu2pvRIKMip
nmykUCH2KLI75H+zpi+5ZQnc/NuDosmSGr7gUki6UfY/Jg2uIO1VyekViU9SDxaH
OKDJs2RG0HX7MmjPdFPNmRQQU8lBahLyjFF6DjaD4JqD+oX03UjHFr/qKWLuJJEF
LxMXf8SFGMJEr+fsAOERNwpzefoMRvE9yk5CMUPZaSt2GRLfLLRkzG6YkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP32289fSu1VSG2HOB11C6JgoAgEMB8GA1UdIwQY
MBaAFB2OjfXAMRBxGNph8pq09BnSnVqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUt
YjFkMzhiMTNmZGE5LzEvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUtYjFkMzhiMTNmZGE5
LzEvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQWKCoWE
5H8X6AU0BYg46jySo6XZNDQ+rDt8/XE3jVGak8dLFOo4KFHLQcCdeoWNCsd7SAT0
HK6W9QKk7daIclnDD2nImUXFav1b1y2HK7pHVAbj6ZYhy4VwqempKXMBU00X/Z5d
uOARrmnt8AdC5oSQwCTptWo3cIkn6iuJEnUwxW9OyizXl06VF55QG7rljBNe2r79
G2gu28rgYxfhHfqbckx0sLdFCR0+pg5+2QAJFPC/ANTzPy5d0qrg0C+bBFEx9GW6
xOJWPIwX/RprrXOJ78nEZycUtdpOOh8f39gvOhkOLZBRGUsw9OBx6b76cEwhgNdV
M8Ft1fQ7alfLUQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:11 2026 by rpki-client