This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File:                     H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier:          6tmSiPo+LCEic7cdRRo/YBd/80G1yURVWoIpxa0CUZY=
Subject key identifier:   1F:A8:01:EA:35:6C:D4:17:F3:A8:A9:22:C0:20:BA:C5:01:32:CF:5F
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer:       /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial:       019C42B438FEC8C3BB17156738713F11F1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number:          0D69
Signing time:             Mon 09 Feb 2026 14:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:33 +0000
Files and hashes:         1: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: friXdfjmQd4LNKojvpuy+SOGU0Z2ly/i+rluoMKy2eg=)
                          2: LmAKZqBdTFF5oLsEoluyDIA0344.roa (hash: hZY8m7f3JelI/bgQwSPE+IWZx3xID2uYH6Ji+lC9gck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:38:fe:c8:c3:bb:17:15:67:38:71:3f:11:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
        Validity
            Not Before: Feb  9 14:00:33 2026 GMT
            Not After : Feb 10 14:00:33 2026 GMT
        Subject: CN=1fa801ea356cd417f3a8a922c020bac50132cf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:d2:bb:aa:13:71:99:92:9a:01:eb:80:98:
                    7a:e0:31:b4:82:75:7f:a9:b9:23:c0:28:61:8d:1e:
                    ee:b2:b8:16:28:3c:b1:0e:72:85:7d:c2:6b:3b:4f:
                    34:ba:ab:6f:6f:de:e7:5a:18:06:7c:14:33:56:95:
                    b6:00:89:7f:09:03:47:7b:96:92:be:3f:a0:ac:61:
                    92:2a:c6:6d:92:82:36:aa:e4:0d:be:ec:90:13:97:
                    fe:ff:92:34:08:e2:1f:b9:19:d1:59:2d:37:e9:0e:
                    ec:03:18:3e:9a:d6:42:9d:db:29:0a:d4:c0:cc:b8:
                    76:e5:18:3a:52:e7:04:9f:ba:9d:18:63:1c:f8:8a:
                    6c:5e:3f:5c:a6:c9:da:92:88:c9:73:2a:5b:2c:8d:
                    09:33:cd:81:b3:6b:f4:58:de:6e:e8:92:0c:97:c2:
                    64:18:de:be:88:da:6d:41:80:40:da:6d:ba:df:76:
                    40:fc:1c:33:8e:80:52:19:87:47:e0:a0:4a:ca:5b:
                    82:2d:e4:3b:c4:c1:43:00:f7:22:08:b4:05:3b:55:
                    3c:48:11:bc:40:44:95:f1:ea:7f:f1:f7:a9:ae:1b:
                    54:53:a3:5a:3a:3c:6e:2d:1e:06:ff:0b:38:f1:ed:
                    77:81:da:55:29:87:a8:a8:9f:cc:e6:1b:f2:58:e7:
                    ab:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:01:EA:35:6C:D4:17:F3:A8:A9:22:C0:20:BA:C5:01:32:CF:5F
            X509v3 Authority Key Identifier:
                keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:5c:9f:5e:25:1c:cc:f5:f9:15:ab:b5:25:39:45:5f:d3:
         11:18:da:9a:65:7e:22:ec:2c:d1:24:02:e5:37:a2:04:39:3a:
         75:21:c9:de:66:a3:f3:e4:01:3d:a5:c6:27:0f:dd:42:69:64:
         d9:1c:c2:88:40:36:9a:bc:38:16:4f:06:37:f0:2c:99:f5:fa:
         2c:54:86:fa:df:b8:a5:2a:bd:a8:fd:3a:f6:3a:db:77:4e:a4:
         3a:00:c0:a8:92:dc:7d:d8:74:13:d4:0a:35:cb:14:3b:d4:26:
         4a:6d:4d:1e:d3:3c:82:c8:2b:d5:20:8c:07:78:b6:bc:72:2e:
         8e:6a:04:bb:ac:75:20:c3:7f:f8:bd:44:6b:f0:6c:db:5c:e2:
         84:b6:41:93:11:7b:d5:71:1f:a2:27:a2:de:1f:ca:eb:e6:4c:
         3f:1f:2f:af:fa:49:73:00:0c:f5:f9:92:8b:b5:60:9f:b0:22:
         da:82:04:e2:83:f0:cf:e8:80:20:f5:e2:43:34:3f:da:cd:e7:
         6c:02:81:b5:e1:af:5a:71:a0:d9:7a:6a:2b:e1:ad:c7:fb:6a:
         f9:96:ed:1a:1c:49:de:61:15:54:d7:d9:d2:ce:96:fe:af:8d:
         84:1e:c1:2e:9a:b3:5b:72:95:18:5e:0d:24:18:aa:37:e3:59:
         c7:fa:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:08 2026 by rpki-client