This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File:                     88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier:          fPunmq0cwwZfonG3dq5iaryX2YK+oMALItxEmL34OE8=
Subject key identifier:   F3:6B:BF:31:17:47:95:AC:38:40:41:63:1C:97:AA:B8:DD:3F:40:38
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer:       /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial:       019C438FA6CE2D9A94E25AC996120580F2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number:          1705
Signing time:             Mon 09 Feb 2026 18:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:13 +0000
Files and hashes:         1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: o/r9Mr4PMCTb+MF9wGA1UHBpxKAlqTOyjI3lINw2F9s=)
                          2: tpS4SRewgQveWEqN8jQYHocUHz4.roa (hash: Qa6Rge99iiaCXX5JRqulbHyK6kc2b9lfPPgKkNoLLbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:a6:ce:2d:9a:94:e2:5a:c9:96:12:05:80:f2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
        Validity
            Not Before: Feb  9 18:00:13 2026 GMT
            Not After : Feb 10 18:00:13 2026 GMT
        Subject: CN=f36bbf31174795ac384041631c97aab8dd3f4038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:90:11:3b:08:8a:95:09:39:73:49:55:0c:
                    e5:4d:46:54:2b:54:9d:6a:4e:28:ce:17:b9:fc:6f:
                    2e:ba:3e:09:7f:48:67:c0:63:fe:db:92:0d:9b:9a:
                    65:68:d5:e7:8c:2b:64:20:51:7c:3f:ee:f3:de:47:
                    1d:85:81:f1:eb:75:3b:d9:83:b2:21:9c:49:d9:ad:
                    8b:68:32:f5:69:3a:7f:10:0c:8f:ef:2f:c1:52:a2:
                    98:b5:b3:d0:14:40:c2:34:3b:5c:f6:9a:20:38:cc:
                    8d:de:2f:5f:0d:d1:93:32:8d:f6:0d:ee:76:f3:90:
                    3d:34:12:25:80:13:85:61:f1:e3:a1:76:cb:91:21:
                    13:34:2a:0e:7d:1a:4c:b0:5a:93:c8:bb:b0:1c:7f:
                    58:1a:fc:40:35:11:b0:06:2c:6f:fd:0e:81:40:58:
                    23:34:c6:df:e7:86:14:d0:a4:5e:50:31:f6:64:e1:
                    99:90:07:aa:c1:ed:c8:d6:e2:1f:44:d6:41:41:12:
                    82:63:19:1d:6f:b4:46:f9:09:e1:30:df:6c:29:6d:
                    8b:8f:f6:60:9b:e4:18:79:49:3c:0a:38:26:b5:bc:
                    0e:79:48:42:4c:b7:47:cc:f6:4b:ec:32:ad:d7:4f:
                    2e:4d:ab:ff:45:df:dd:81:6d:01:19:ea:3a:77:f7:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:BF:31:17:47:95:AC:38:40:41:63:1C:97:AA:B8:DD:3F:40:38
            X509v3 Authority Key Identifier:
                keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:54:69:1a:0a:17:dc:8f:44:c6:81:e5:0d:f6:34:27:b2:
         4f:bf:d3:e9:59:33:7b:3a:74:11:52:b6:c3:fd:7f:d6:51:e5:
         76:47:f5:14:b5:8b:f4:e1:54:ed:00:2e:68:6b:85:71:17:74:
         4e:fd:40:9a:7e:31:8b:8e:f8:8b:b8:37:27:bd:22:08:61:b7:
         b3:a8:c1:87:67:c5:1b:d1:d3:bf:eb:49:7c:b7:1b:86:53:d9:
         5b:76:29:ee:a0:00:27:26:c5:4b:ab:3d:31:56:0b:47:ab:37:
         dc:d0:3a:b1:75:84:07:dd:7f:b7:bd:b7:87:f0:76:2a:e8:52:
         83:e9:04:08:58:c8:ad:18:0f:e5:eb:fd:5e:25:26:c5:aa:4e:
         1f:d3:ca:cb:2d:e4:c1:5e:5b:ac:b5:d6:1c:d9:3e:e7:71:70:
         56:84:79:ac:e3:a1:1b:9c:f4:51:7a:44:01:21:94:6c:e6:15:
         7a:c5:bc:e3:8d:a6:1b:34:2d:42:83:6f:f1:3c:96:46:4f:2b:
         4c:ae:12:a2:a7:86:54:84:a8:12:5c:87:cc:0b:b2:7e:01:3a:
         51:8f:72:7d:c0:8c:1d:13:27:32:59:bb:66:c2:12:f2:b8:ec:
         84:6b:c4:5c:81:6a:d7:ea:cb:c9:92:10:0e:46:ed:0f:ba:ad:
         7f:7f:9b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj6bOLZqU4lrJlhIFgPLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzg2ZWEyOTk1ZTkzNGI2NTA0MTkxMWNiOWViNjU4NzJj
MjI4OWYwHhcNMjYwMjA5MTgwMDEzWhcNMjYwMjEwMTgwMDEzWjAzMTEwLwYDVQQD
EyhmMzZiYmYzMTE3NDc5NWFjMzg0MDQxNjMxYzk3YWFiOGRkM2Y0MDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjSQETsIipUJOXNJVQzlTUZUK1Sd
ak4ozhe5/G8uuj4Jf0hnwGP+25INm5plaNXnjCtkIFF8P+7z3kcdhYHx63U72YOy
IZxJ2a2LaDL1aTp/EAyP7y/BUqKYtbPQFEDCNDtc9pogOMyN3i9fDdGTMo32De52
85A9NBIlgBOFYfHjoXbLkSETNCoOfRpMsFqTyLuwHH9YGvxANRGwBixv/Q6BQFgj
NMbf54YU0KReUDH2ZOGZkAeqwe3I1uIfRNZBQRKCYxkdb7RG+QnhMN9sKW2Lj/Zg
m+QYeUk8CjgmtbwOeUhCTLdHzPZL7DKt108uTav/Rd/dgW0BGeo6d/e0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNrvzEXR5WsOEBBYxyXqrjdP0A4MB8GA1UdIwQY
MBaAFPPIbqKZXpNLZQQZEcuetlhywiifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMt
YzYzNWQ4ZWVkNDQ3LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMtYzYzNWQ4ZWVkNDQ3
LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA1UaRoK
F9yPRMaB5Q32NCeyT7/T6Vkzezp0EVK2w/1/1lHldkf1FLWL9OFU7QAuaGuFcRd0
Tv1Amn4xi474i7g3J70iCGG3s6jBh2fFG9HTv+tJfLcbhlPZW3Yp7qAAJybFS6s9
MVYLR6s33NA6sXWEB91/t723h/B2KuhSg+kECFjIrRgP5ev9XiUmxapOH9PKyy3k
wV5brLXWHNk+53FwVoR5rOOhG5z0UXpEASGUbOYVesW8442mGzQtQoNv8TyWRk8r
TK4SoqeGVISoElyHzAuyfgE6UY9yfcCMHRMnMlm7ZsIS8rjshGvEXIFq1+rLyZIQ
DkbtD7qtf3+bSA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:01 2026 by rpki-client