This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File:                     HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier:          0UdAmFlMVvMW+2k6LuA0vOBKHs1QjMp6Ts9lr22pJxA=
Subject key identifier:   4C:A2:D8:B4:6E:FB:53:6D:7B:FF:3A:E3:F1:52:E3:21:EB:8E:82:D6
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer:       /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial:       019C43226B5343A7451D7DEA0E125C6E0AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number:          0D36
Signing time:             Mon 09 Feb 2026 16:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:55 +0000
Files and hashes:         1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: Vl2c+gfioXtvcJtqZEyozFybAEuFDn1Xp1GmhswFpQU=)
                          2: Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa (hash: mUVvW47r5i0R+fZsLAsCtRCsk0x6xVLyquq+qyROV1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:6b:53:43:a7:45:1d:7d:ea:0e:12:5c:6e:0a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
        Validity
            Not Before: Feb  9 16:00:55 2026 GMT
            Not After : Feb 10 16:00:55 2026 GMT
        Subject: CN=4ca2d8b46efb536d7bff3ae3f152e321eb8e82d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:33:d3:4c:34:ed:b3:58:b0:4f:de:b7:fe:
                    e2:53:c7:88:54:56:a6:88:f7:7a:50:6a:97:4b:69:
                    25:ba:7e:a1:a3:73:1a:e6:bf:28:46:ab:d2:46:23:
                    1c:65:4b:44:10:f2:3c:5f:f9:89:19:ad:9c:de:cc:
                    c7:c9:88:72:5c:b1:dd:c4:7c:84:10:f0:76:8a:bd:
                    0c:9e:58:47:31:bf:f2:ed:79:18:0e:ea:63:3a:f3:
                    a4:1f:28:29:32:22:ac:ff:2f:d3:3f:5d:ee:91:b0:
                    54:a0:6a:45:4d:a2:33:07:c7:01:12:db:af:8e:09:
                    5f:1d:be:a3:61:ae:9a:36:71:81:9d:65:03:63:62:
                    ae:ca:ff:f7:61:de:f8:ae:33:af:d4:72:31:94:f2:
                    71:b2:0d:56:e2:f3:70:d3:10:28:1c:c5:bf:84:bd:
                    48:ca:27:df:cd:68:59:f3:af:34:bd:86:a1:16:09:
                    37:1d:d1:90:a7:f6:13:8f:4f:56:d0:24:3e:76:66:
                    c5:29:ff:34:83:a5:83:d0:93:8d:cc:69:8f:06:1e:
                    49:83:32:bc:c6:00:1b:2d:5f:9a:b4:30:13:24:67:
                    e7:39:a7:04:df:af:10:f0:ac:58:65:45:d2:28:86:
                    56:3c:21:c1:95:2c:e9:f2:ab:51:57:fc:a5:37:22:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A2:D8:B4:6E:FB:53:6D:7B:FF:3A:E3:F1:52:E3:21:EB:8E:82:D6
            X509v3 Authority Key Identifier:
                keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:46:90:02:91:08:97:69:0c:00:01:f5:8b:0c:f2:f2:09:
         95:b3:be:63:01:62:14:66:ae:9e:16:ee:81:89:c9:f0:79:0e:
         37:08:bf:f8:c2:6d:96:13:33:e3:b0:a3:46:fe:3f:5f:72:2e:
         bf:18:9e:84:71:85:ac:f4:ba:ee:4d:55:17:54:a2:15:90:c6:
         a5:b0:6c:1c:fc:64:15:76:6b:23:d7:6e:0b:61:f1:0f:69:5a:
         a5:52:1a:90:da:a1:2b:02:2b:32:02:1d:c4:f6:5d:1a:3d:bb:
         5c:27:59:b7:c9:f5:f3:f0:82:2d:3a:01:21:c4:fb:ef:8f:10:
         b6:21:51:ac:dc:33:3f:57:cb:fe:1a:67:c7:74:02:28:ba:dd:
         2a:f3:65:24:61:95:5c:1d:d7:63:9d:5f:f4:eb:d1:0c:ae:8e:
         a6:8f:ce:f7:d0:e6:04:9f:70:7d:37:a7:41:6a:55:c5:39:61:
         77:02:6d:65:d9:ba:61:ca:d3:03:e5:70:95:87:e0:66:0d:dc:
         98:7f:5d:d3:05:27:a8:6d:7b:80:04:52:b9:6a:16:83:93:16:
         c1:ad:52:72:d9:fc:c6:75:a6:bb:8e:de:e6:66:c0:ac:c9:c1:
         36:fb:b3:c1:23:44:42:ad:d9:b1:b2:e1:49:9d:31:7f:38:54:
         34:31:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:46 2026 by rpki-client