This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File:                     Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier:          V6Iy6POCREMirup2FpFW/ysGH1rIagHubJeHF03QQdk=
Subject key identifier:   FB:6E:4C:09:B2:39:06:FC:95:C1:13:50:96:4B:E2:A2:AA:A7:F3:B9
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer:       /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial:       019C42461F9453E22227EF99FBE4998B5396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number:          17A5
Signing time:             Mon 09 Feb 2026 12:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:17 +0000
Files and hashes:         1: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: jvBkhLqArqtoDE6lddXoqxx0etnYXaeE+VMHlAam1Dw=)
                          2: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (hash: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas=)
                          3: wqYhJdTXa82YFv-6BFRogMV-68M.roa (hash: 2adtr0H63u+qw2bLDNrE5Xr8tW2MCGnw+je2lpcnNdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:1f:94:53:e2:22:27:ef:99:fb:e4:99:8b:53:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
        Validity
            Not Before: Feb  9 12:00:17 2026 GMT
            Not After : Feb 10 12:00:17 2026 GMT
        Subject: CN=fb6e4c09b23906fc95c11350964be2a2aaa7f3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:55:11:c4:03:e8:74:57:39:48:02:c7:3d:
                    7c:c7:4d:18:38:f2:96:e4:6f:cb:69:f6:20:cf:f3:
                    9d:ca:4b:d8:79:6d:00:e3:4a:be:3d:0c:a0:db:be:
                    06:15:fe:58:e9:f9:0c:57:d3:73:01:fb:96:6c:68:
                    73:3f:a7:4d:68:ff:b4:a9:80:c6:0d:78:ac:a2:70:
                    c9:b1:84:1d:70:f5:3a:db:58:31:d1:9f:de:31:89:
                    6b:06:0b:e6:9e:df:56:19:ae:27:cd:1d:47:9c:fd:
                    cf:4f:a2:f6:a5:7b:d1:22:f0:90:32:b4:a0:b0:a9:
                    69:03:2c:9d:68:b1:7e:32:c0:dc:2e:1d:29:a8:97:
                    8b:04:4e:75:94:3a:1f:42:b0:23:cc:86:9c:47:97:
                    55:9f:f9:7f:67:72:27:8d:61:5a:af:20:ba:40:4f:
                    3f:96:37:3e:a6:5c:e3:31:75:8a:e7:3a:2f:49:fb:
                    f7:ac:cf:a8:92:5e:02:1a:aa:fc:87:04:31:95:8e:
                    b5:72:b5:50:71:f6:1d:3e:0b:a4:7c:14:e3:ba:e3:
                    40:b3:0f:80:44:2d:9e:30:bb:c2:25:35:0d:da:a9:
                    57:08:4d:81:29:99:9c:9c:06:67:48:6a:e4:c5:04:
                    1f:be:3c:4f:01:d7:2b:1c:89:92:c3:98:49:b7:39:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:4C:09:B2:39:06:FC:95:C1:13:50:96:4B:E2:A2:AA:A7:F3:B9
            X509v3 Authority Key Identifier:
                keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:52:86:58:63:e6:c8:0f:31:95:10:e0:09:45:02:3e:d1:02:
         e1:b4:f6:05:57:5a:fb:2b:60:5e:d0:1b:0c:fc:e1:60:df:48:
         12:30:4f:e8:bd:e5:02:3c:dd:ae:cf:6e:cb:aa:bc:1e:3a:54:
         94:15:5d:ae:30:2d:c3:2b:e9:62:37:9c:80:73:25:65:ab:53:
         52:66:11:ec:a0:e5:9b:64:d5:29:ea:2f:73:c9:a8:f7:f1:9d:
         53:c0:7f:17:e8:6e:9b:0e:01:1c:3d:7f:59:84:62:6c:0a:13:
         e2:19:4b:67:69:6e:2d:7f:80:63:23:7d:3a:28:6f:12:89:02:
         50:c7:5d:28:ee:22:25:46:87:24:3f:8b:db:1c:15:8d:ee:37:
         cd:a2:38:fa:51:ea:ae:9b:72:48:27:a7:aa:14:b0:79:70:69:
         72:37:60:aa:4c:10:33:b3:64:58:75:df:46:6e:0d:cb:83:02:
         bd:4e:f3:23:aa:e6:94:5a:8d:10:57:89:07:44:f5:88:7c:c2:
         3a:1f:30:94:b1:e2:3b:5b:34:ed:ce:90:26:15:9c:f9:c3:e7:
         2a:05:87:58:38:59:c1:52:27:48:ca:8e:48:2d:10:1d:ed:76:
         52:2d:7f:3a:ce:f3:ec:47:fb:d6:91:29:03:35:71:b6:bf:0a:
         ef:57:57:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRh+UU+IiJ++Z++SZi1OWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk
MDlmMDEwHhcNMjYwMjA5MTIwMDE3WhcNMjYwMjEwMTIwMDE3WjAzMTEwLwYDVQQD
EyhmYjZlNGMwOWIyMzkwNmZjOTVjMTEzNTA5NjRiZTJhMmFhYTdmM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8FVEcQD6HRXOUgCxz18x00YOPKW
5G/LafYgz/OdykvYeW0A40q+PQyg274GFf5Y6fkMV9NzAfuWbGhzP6dNaP+0qYDG
DXisonDJsYQdcPU621gx0Z/eMYlrBgvmnt9WGa4nzR1HnP3PT6L2pXvRIvCQMrSg
sKlpAyydaLF+MsDcLh0pqJeLBE51lDofQrAjzIacR5dVn/l/Z3InjWFaryC6QE8/
ljc+plzjMXWK5zovSfv3rM+okl4CGqr8hwQxlY61crVQcfYdPgukfBTjuuNAsw+A
RC2eMLvCJTUN2qlXCE2BKZmcnAZnSGrkxQQfvjxPAdcrHImSw5hJtznWewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtuTAmyOQb8lcETUJZL4qKqp/O5MB8GA1UdIwQY
MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et
OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl
LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFKGWGPm
yA8xlRDgCUUCPtEC4bT2BVda+ytgXtAbDPzhYN9IEjBP6L3lAjzdrs9uy6q8HjpU
lBVdrjAtwyvpYjecgHMlZatTUmYR7KDlm2TVKeovc8mo9/GdU8B/F+humw4BHD1/
WYRibAoT4hlLZ2luLX+AYyN9OihvEokCUMddKO4iJUaHJD+L2xwVje43zaI4+lHq
rptySCenqhSweXBpcjdgqkwQM7NkWHXfRm4Ny4MCvU7zI6rmlFqNEFeJB0T1iHzC
Oh8wlLHiO1s07c6QJhWc+cPnKgWHWDhZwVInSMqOSC0QHe12Ui1/Os7z7Ef71pEp
AzVxtr8K71dXhg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:26 2026 by rpki-client