This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File:                     hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier:          LedjdhtvvDYj8B4WpQ88g47vMAqsjAoMHvSDHwH3keY=
Subject key identifier:   AA:29:58:34:DB:07:E0:0C:5C:1C:EF:49:6B:C8:03:D2:19:DD:31:CD
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer:       /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial:       019C420FB8A1894196FF5CA37A91107F31F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number:          0E53
Signing time:             Mon 09 Feb 2026 11:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:52 +0000
Files and hashes:         1: fFmupf3ZOulomw7RbTfFJI9HA-I.roa (hash: T13v7SVdmP/WoBkNmWlki+xwBbJ6Z16koZYacLEH9hQ=)
                          2: fVLd8tnnZrZdk6_lGRwthnV2H_Q.roa (hash: 18IWDikGUyDUw9Z2asfSid0KurOOqdvL3jCCr8MGrKw=)
                          3: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: 78suvo9cz954z6WZpNqBcKAMDHoSSBW0Nx7Cjk2Tnbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:b8:a1:89:41:96:ff:5c:a3:7a:91:10:7f:31:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
        Validity
            Not Before: Feb  9 11:00:52 2026 GMT
            Not After : Feb 10 11:00:52 2026 GMT
        Subject: CN=aa295834db07e00c5c1cef496bc803d219dd31cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:6a:94:8d:18:66:f2:e8:a5:bb:3f:5c:8e:
                    34:3d:5c:7f:ae:80:2d:f7:61:29:ba:06:d8:81:f5:
                    4b:81:6f:6a:5e:07:1a:de:f7:94:e8:d2:2f:a8:91:
                    bc:b6:95:17:8c:08:63:d6:25:29:5f:ca:d5:01:40:
                    80:36:75:50:73:16:05:34:44:80:1b:8e:c1:52:44:
                    4c:50:87:9b:ed:ab:2a:4a:f9:df:a1:68:c9:21:64:
                    98:db:d5:39:1c:9f:29:1f:fd:05:74:cb:01:77:49:
                    79:40:f5:44:c2:a6:25:fe:72:9f:f7:d9:4f:64:54:
                    3d:15:b8:45:89:b5:9e:d9:a3:fd:ac:b7:86:14:4d:
                    8f:46:a2:cb:2c:ea:ae:e3:39:9f:6c:3a:23:20:d9:
                    fc:21:94:a3:0a:40:06:05:7e:79:b9:22:68:b1:1e:
                    a7:ec:5f:98:ff:09:ed:24:f5:b0:53:2b:84:1b:30:
                    34:6a:e0:75:b7:f1:37:10:11:f0:30:b6:12:6b:c6:
                    52:6f:54:40:50:2a:6f:f7:8c:69:ad:42:07:d6:c2:
                    c3:c2:d3:55:ab:4d:a2:f5:c8:83:39:8a:e1:a4:3d:
                    f0:91:fb:5b:f3:cb:82:2a:89:8c:e1:04:e9:d7:11:
                    ee:3b:28:19:07:11:bd:ed:d2:5a:29:f2:a5:ee:6d:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:29:58:34:DB:07:E0:0C:5C:1C:EF:49:6B:C8:03:D2:19:DD:31:CD
            X509v3 Authority Key Identifier:
                keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:68:85:c0:78:4f:74:b5:64:cc:41:fe:07:bc:2d:d9:c9:ce:
         6c:88:ae:7b:06:6a:5f:19:ac:bd:2f:b2:0a:8c:09:8c:1f:ed:
         85:ba:60:59:9e:7d:35:95:cf:46:40:2e:25:ff:84:6e:3a:1c:
         15:f5:df:36:79:94:f4:f3:df:17:31:bc:a8:23:c5:e7:32:a8:
         9d:4c:a6:3a:c3:86:04:5a:68:52:14:ae:1e:6b:7d:2a:86:6c:
         e6:a3:bd:9d:89:4d:19:2a:dc:b7:93:9b:29:37:cb:df:74:41:
         41:fa:67:99:82:69:1e:0a:e1:4e:22:d8:53:99:25:bf:1e:19:
         e3:4d:61:cc:53:df:38:f5:41:d5:9a:a0:96:ab:a9:7e:a1:67:
         99:ed:21:eb:f7:e5:28:62:0f:f8:27:7c:29:32:bc:47:72:dd:
         e2:f0:0d:a3:4c:32:47:26:79:12:97:bf:b6:15:b9:38:34:7b:
         7f:81:7d:d1:b8:c7:e6:eb:42:b0:ec:8a:b9:3a:5d:ba:28:b1:
         a3:f3:69:7c:7f:4c:0a:5a:f0:07:a2:99:a1:1f:2c:aa:18:40:
         09:39:ed:46:e0:d0:b0:3f:0d:c1:33:94:76:61:cd:17:86:82:
         d2:1e:ad:2d:bb:9a:0e:a7:de:1b:d8:e8:1e:da:1f:be:03:4a:
         48:3d:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:38 2026 by rpki-client