This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File:                     hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier:          s5ZKmDKaOUw1Yd4SCjfWzhVmEHxjYWCPVLx3ioPZOxU=
Subject key identifier:   69:88:2C:67:02:6D:2E:72:D4:DC:A5:CF:E3:EF:51:3F:AD:EF:43:D1
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer:       /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial:       019C43FDE684D2C99C7C757A80E3026EB6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number:          04F0
Signing time:             Mon 09 Feb 2026 20:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:38 +0000
Files and hashes:         1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
                          2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: 46dDxd2iby+b///2AB1bHFxmMzf9CSyxhyxF3il5TnM=)
                          3: qoiSe-yUdTemPI1EK5KhIQZ-WAQ.roa (hash: BzNUsMLYSBasxZtN78dIEsZxiGVfFhzEpfLc24JU6bM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:e6:84:d2:c9:9c:7c:75:7a:80:e3:02:6e:b6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
        Validity
            Not Before: Feb  9 20:00:38 2026 GMT
            Not After : Feb 10 20:00:38 2026 GMT
        Subject: CN=69882c67026d2e72d4dca5cfe3ef513fadef43d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:69:0f:ba:af:12:20:f2:64:7b:ad:6e:57:
                    51:07:59:1e:dd:2b:4e:ee:a2:aa:a4:9b:4f:07:02:
                    41:e0:40:5e:17:c5:c8:53:ff:34:03:65:71:60:0a:
                    57:d8:78:23:c1:ae:39:cf:c7:78:6c:c2:1e:8c:9e:
                    27:06:40:59:7d:b0:79:d3:f2:a1:a0:ed:0d:90:e0:
                    84:a1:d1:bc:e7:f4:10:fb:8c:f3:d3:63:47:f8:b6:
                    5a:53:76:f3:20:64:84:6a:fd:f4:d5:82:75:d2:84:
                    d3:b0:8a:e9:e9:9c:f3:a2:3f:35:18:08:ff:8e:d9:
                    6e:3a:17:8e:8f:10:d6:37:de:dc:5a:fe:19:3d:c3:
                    04:16:65:ee:67:f2:76:6f:46:f3:6a:a9:24:45:3d:
                    ae:ce:69:bc:d8:a0:cc:94:07:d4:66:a3:16:d5:72:
                    e1:a1:58:da:2f:17:43:08:43:34:14:9f:8d:65:e0:
                    8b:c9:ce:90:48:19:25:0c:8a:6c:cd:3d:2e:40:a7:
                    aa:96:86:ba:e8:62:50:55:5d:30:70:dc:2b:17:f2:
                    ae:62:e1:83:4e:78:8b:30:f6:4b:a4:16:95:1a:15:
                    73:db:c3:26:85:00:43:1a:45:e8:03:9f:cb:8c:7c:
                    dd:0c:3f:2e:f5:f7:00:38:f0:2a:6e:ef:bc:3d:fe:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:88:2C:67:02:6D:2E:72:D4:DC:A5:CF:E3:EF:51:3F:AD:EF:43:D1
            X509v3 Authority Key Identifier:
                keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6b:36:dd:21:e8:0c:40:cc:b2:2a:f1:4f:09:fc:85:e7:4b:
         7c:f1:38:99:2a:41:cd:dc:87:2a:64:d3:47:51:e2:27:96:21:
         3d:b3:8a:8a:82:a2:2a:71:e9:1d:bb:fd:72:89:72:a4:90:92:
         b0:fc:7f:ba:ea:73:74:f2:56:4a:a7:1d:1a:8a:d3:ae:34:41:
         7f:61:8d:95:3c:82:8a:ab:5f:d3:18:b5:14:cf:cb:49:85:c2:
         d3:c8:2a:1e:6f:72:b0:20:d0:af:dd:a3:31:30:2b:8c:6d:a9:
         ce:4e:d8:24:43:f1:67:39:ef:a9:c6:ca:63:1a:b5:13:57:f0:
         57:66:02:cf:19:6e:35:f6:24:33:29:db:ba:e9:7c:81:94:af:
         96:50:44:91:b3:85:25:ee:1c:57:55:6f:2d:d1:58:5f:22:8b:
         b3:8d:c9:00:c0:04:51:76:70:4b:22:47:6c:e2:8f:83:73:a0:
         f6:de:0d:f4:60:a0:0e:ae:e8:e7:1e:4e:1e:1b:c6:39:a7:c0:
         f0:0b:64:16:54:c3:fa:fd:aa:a4:08:2f:c1:cc:e5:db:2e:ee:
         2e:fc:52:c2:f5:d8:9a:79:6f:58:5d:c1:06:cc:df:40:af:40:
         2c:c9:00:47:e7:d3:20:fa:a5:82:cb:c8:a9:6a:59:77:47:33:
         82:a7:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:36 2026 by rpki-client