This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File:                     HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier:          bw54tbMQ5mS7/JuUVz4BJUM2XRhOGyewbDlIZPi5fKk=
Subject key identifier:   AC:65:CD:7C:EA:06:07:4C:55:B3:A0:29:29:52:BC:70:FB:D4:90:8C
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer:       /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial:       019C42463676D7966F432FFAE872B06509FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number:          0E3F
Signing time:             Mon 09 Feb 2026 12:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:23 +0000
Files and hashes:         1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: fcsawrnzRfzCdJP6tn77aaq3WSyeev7gIx5SQONOchQ=)
                          2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:36:76:d7:96:6f:43:2f:fa:e8:72:b0:65:09:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
        Validity
            Not Before: Feb  9 12:00:23 2026 GMT
            Not After : Feb 10 12:00:23 2026 GMT
        Subject: CN=ac65cd7cea06074c55b3a0292952bc70fbd4908c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:f0:66:4c:91:6c:51:e0:1f:46:6e:c1:cb:
                    d8:e4:5f:2c:33:5b:ee:e3:e9:23:e4:2b:b6:02:fe:
                    42:a5:fa:f8:04:99:5c:4e:c8:bb:de:64:28:48:6d:
                    46:22:a2:b6:22:fd:1e:75:ad:d7:c1:85:9b:9b:d6:
                    74:a6:0f:14:f4:a8:a5:56:4b:b4:df:1f:40:dc:fa:
                    c1:c1:b5:3c:13:5a:23:ba:26:d6:dc:3b:cc:9a:12:
                    9c:4a:6e:c8:ce:92:14:5e:3e:3b:67:12:f3:00:90:
                    91:b2:75:d0:07:13:f5:ee:1f:a6:f6:c5:6d:51:b1:
                    e7:4a:cb:30:e9:e4:7d:d2:72:22:29:61:9d:1a:d2:
                    ad:ed:5e:3e:97:1b:28:d5:1e:c9:05:80:d2:be:c6:
                    95:32:84:43:c4:1b:be:19:ea:d6:e6:5b:79:8e:e4:
                    e8:e5:fe:66:db:02:c3:25:5f:b9:d1:89:3e:58:ae:
                    06:e5:b1:6e:3f:5e:7b:5e:c7:30:cd:48:17:6c:6a:
                    56:43:ab:2c:78:b5:84:39:af:f5:4a:be:3b:7b:3c:
                    a1:22:53:6a:a8:2e:95:f6:0c:a2:57:d0:c8:76:5f:
                    73:8b:a0:2f:05:27:8c:fb:3d:0c:c0:5f:6c:fa:38:
                    9b:9f:0c:62:01:6c:3a:b7:bc:2f:f6:e4:cb:74:c0:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:65:CD:7C:EA:06:07:4C:55:B3:A0:29:29:52:BC:70:FB:D4:90:8C
            X509v3 Authority Key Identifier:
                keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3c:e9:e9:66:29:d0:b7:5d:9e:f9:4a:36:c3:0e:b9:f0:09:
         1a:a5:ad:a8:3a:50:ac:b3:59:a0:c3:45:b4:62:6f:81:f7:c8:
         3e:b7:c1:a0:44:a8:d8:15:fb:2f:d7:7f:77:18:2b:6e:98:37:
         2d:56:46:76:c3:8d:54:2d:25:63:79:00:37:c9:d4:62:cc:b4:
         94:71:40:7f:bc:7a:b3:18:44:ab:49:e4:92:59:e3:8c:71:c3:
         42:5d:c3:6f:c8:d3:83:d4:6f:d9:84:49:a0:d8:c5:d3:8e:9e:
         9a:58:d8:be:d4:fc:6d:ab:b3:b3:f2:75:c3:76:ac:a4:cf:66:
         cd:11:72:4c:81:ce:32:46:01:21:bd:55:b0:86:18:87:57:f5:
         15:8f:23:bf:67:29:ef:b4:77:40:18:1b:97:a9:c0:9a:46:c6:
         d9:0e:b5:82:a0:2b:00:79:d6:8d:52:43:a9:59:d4:34:81:00:
         8a:6e:d0:c5:c5:98:26:e6:99:0c:90:20:56:f7:69:56:42:7d:
         b3:7f:f3:3e:29:f4:08:07:fe:aa:e7:de:ac:b9:8f:95:fd:c0:
         dd:6a:4c:0c:b3:69:b3:fa:5e:8e:1b:20:8a:dd:e4:fa:13:27:
         64:51:38:51:6f:d8:da:55:3c:21:65:f1:89:72:5c:99:c9:a9:
         92:39:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:15 2026 by rpki-client