This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File:                     hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier:          6vcyQM5CRzy+1Alq3Y9VUSv7DKB7JH47JcoPLW1ynEo=
Subject key identifier:   E7:30:39:28:0F:89:66:18:1C:97:20:A2:DA:E0:B7:92:32:39:09:09
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer:       /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial:       019C416AC66628DC65E04638D59DB44FE390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 08:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:42 +0000
Files and hashes:         1: ClZipqAtGVJ2H4srpt_UxqUYg7k.roa (hash: gRSN7asX/fb1bF2/3SBjZi8n62BnbOxEncNI/Hx/1K0=)
                          2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: YTK7nDfDJ7kzkX0WXwHRofCsGGS9Vx7Jdt+DGBcVYsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:c6:66:28:dc:65:e0:46:38:d5:9d:b4:4f:e3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
        Validity
            Not Before: Feb  9 08:00:42 2026 GMT
            Not After : Feb 10 08:00:42 2026 GMT
        Subject: CN=e73039280f8966181c9720a2dae0b79232390909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:18:3e:b6:b2:81:37:f9:e3:8a:6d:90:71:
                    0a:57:39:f8:df:11:eb:59:3a:c9:99:d4:6c:e2:ce:
                    e4:9e:0c:74:7d:cb:8d:ff:4d:7d:d3:2e:87:be:71:
                    32:7f:44:db:18:0e:84:a6:13:ed:00:97:8a:91:bd:
                    5a:7a:21:f1:c3:37:3d:e2:f7:82:c4:90:4d:ff:3d:
                    af:e0:c5:a0:8a:f6:9e:51:91:ab:ed:48:23:35:fe:
                    85:72:d7:6d:21:43:da:8c:0d:c9:1b:7e:53:64:70:
                    30:b7:7b:9d:5c:48:f6:ef:ed:7a:4b:5c:79:60:d2:
                    c1:f4:75:c3:ef:58:5e:94:45:b5:6a:a7:3a:80:b5:
                    fb:4f:de:f7:0e:ad:dc:f7:16:eb:95:a1:19:43:01:
                    97:d4:48:29:29:a8:03:76:1c:b3:f3:ab:b5:33:7b:
                    44:74:cb:ca:ac:73:ee:b3:cc:5c:7e:9d:e4:c6:97:
                    48:87:45:fd:de:e2:fa:32:bf:b8:42:25:81:59:44:
                    49:4f:98:d0:0d:90:10:27:25:3f:a1:07:76:09:60:
                    da:97:4f:74:5c:db:5a:15:60:44:af:7c:ad:00:d8:
                    3d:8b:88:52:c1:82:ac:18:0b:3e:51:3a:93:18:ff:
                    59:c1:aa:dc:a3:8b:04:c8:9b:6c:59:8f:47:a8:0b:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:30:39:28:0F:89:66:18:1C:97:20:A2:DA:E0:B7:92:32:39:09:09
            X509v3 Authority Key Identifier:
                keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:e1:20:59:12:e1:a0:71:15:fb:05:07:73:51:92:82:0c:
         59:e5:b7:8d:85:67:e1:ca:00:f8:05:81:cc:aa:3e:0c:ac:30:
         08:dd:2c:3b:a4:ab:9d:ee:88:e6:83:fb:70:0e:72:fa:a2:03:
         2b:fa:07:81:b1:76:2a:c6:2d:3f:bf:fd:f0:df:26:24:45:b0:
         86:5f:2a:0f:08:1f:2c:f9:2e:6a:94:91:e1:19:55:12:6a:e3:
         e9:48:7c:a9:c5:dd:5b:43:c8:0c:c0:68:33:82:aa:0c:92:c6:
         8c:df:be:dc:c3:df:5b:94:f1:0c:d9:84:97:22:27:92:3d:d4:
         2f:fe:89:f0:da:12:b1:ca:3e:b1:d8:f7:35:3d:e6:47:9d:46:
         c2:63:6d:3b:7c:d5:5a:98:b2:ee:14:61:c8:79:34:24:db:bf:
         62:ae:06:f0:f1:72:14:74:96:fd:61:c1:72:af:1d:b6:ac:25:
         b1:fd:d6:7a:bc:3e:e1:09:e8:f1:05:91:65:b4:58:d7:80:87:
         12:6b:3f:b7:3c:6a:6b:f7:8c:31:f9:91:54:b4:e9:c5:fa:99:
         3e:a1:fa:77:03:af:3e:dc:c7:b4:f0:10:8a:10:de:2d:2c:e0:
         5d:2b:87:d3:d2:5d:9b:9a:90:6c:77:17:d5:db:7f:85:cc:2a:
         6b:9d:47:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:53 2026 by rpki-client