This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File:                     HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier:          RlfoXce/GpSxVX723wOD2MFNcSZZmIKgURcbpcEayME=
Subject key identifier:   D4:9C:4F:E4:47:21:1D:AC:89:DC:48:B0:03:2D:9A:4D:2F:54:B5:05
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer:       /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial:       019C438FDE88D273EB6AAD04347D292BC8CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number:          08A6
Signing time:             Mon 09 Feb 2026 18:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:27 +0000
Files and hashes:         1: CVRiR4PWA5mkMUyfsZHNmuQrLLc.roa (hash: 5ktDsOfkaJ/bYAV74Q0Rw6jgw2aMIQHNLymwbsIWQIk=)
                          2: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: aEKxQaQyXmmiG7qWzvtXXQRPsOgMUYlrmVF26CRUaiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:de:88:d2:73:eb:6a:ad:04:34:7d:29:2b:c8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
        Validity
            Not Before: Feb  9 18:00:27 2026 GMT
            Not After : Feb 10 18:00:27 2026 GMT
        Subject: CN=d49c4fe447211dac89dc48b0032d9a4d2f54b505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:10:b7:f2:e8:1b:5f:3c:d7:58:84:c5:1f:
                    84:0d:23:28:0e:63:e6:fc:df:5a:8c:73:ed:38:3f:
                    03:70:45:6d:97:1a:2f:52:f4:69:36:c3:26:bf:17:
                    8f:3f:32:3b:10:cb:2a:7a:04:10:c8:43:ab:e3:c9:
                    22:f0:ec:0e:c8:76:f6:6f:0f:89:f9:b8:bc:2a:cb:
                    a8:21:22:b3:56:c4:1a:8d:73:59:7c:0b:b0:47:0c:
                    a7:b0:1c:11:f0:4e:6c:78:b5:5c:85:bd:b6:a3:65:
                    cf:4b:fd:e2:69:10:28:ea:c5:b6:3b:82:b6:40:16:
                    09:e3:76:2b:d4:1b:b2:46:f0:f3:58:23:0b:ce:7d:
                    99:8e:b1:f6:21:33:00:8d:cc:6b:54:33:d7:24:0e:
                    d8:ef:96:45:6c:fb:35:aa:10:74:49:bf:34:fd:c2:
                    48:bc:60:e3:fb:c4:a7:93:7a:d5:cb:fb:c4:44:48:
                    68:e9:79:61:0c:c2:ed:7f:7c:bb:40:94:17:12:67:
                    17:3f:fb:56:6f:0a:8e:ab:86:1f:b8:b0:4f:77:64:
                    5d:1d:d0:63:e0:17:1b:c9:75:9f:0c:a8:98:52:7e:
                    e2:6c:e1:ce:e9:b3:5d:cd:77:3a:bd:25:1f:cc:a9:
                    b3:bc:b0:1f:fa:11:b9:3c:2b:71:80:b6:db:d5:b8:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:4F:E4:47:21:1D:AC:89:DC:48:B0:03:2D:9A:4D:2F:54:B5:05
            X509v3 Authority Key Identifier:
                keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:29:bc:62:82:7b:79:d9:69:90:63:56:52:e2:da:5a:3a:33:
         5d:83:67:08:e8:d1:28:39:cb:21:df:98:5f:02:8d:9d:1a:09:
         de:c2:6c:27:90:9c:c4:7c:b7:1b:6e:ed:1e:c7:c4:eb:a6:54:
         e9:14:8f:db:c2:89:d1:ed:b3:16:c7:b7:cc:8c:81:0e:c7:34:
         11:2e:a8:7a:aa:60:86:3e:92:82:68:be:66:c3:cc:c1:61:e8:
         eb:f5:89:35:65:2c:ec:78:c6:5d:22:a8:36:c1:1a:ba:80:4a:
         5f:6a:39:97:6f:e5:95:53:01:17:31:bb:0c:dd:8a:36:eb:b7:
         30:42:fb:93:b6:fa:89:74:89:1c:3c:10:fa:03:ea:bd:52:0f:
         d4:5d:01:04:6d:30:5f:3d:a1:a0:a2:13:82:f0:e4:cb:e7:b6:
         ed:2e:ff:9f:43:29:46:dc:80:66:1b:bc:96:4b:16:18:de:27:
         b6:fc:21:ff:cf:d4:1b:9b:42:b4:28:77:ef:f2:2c:5f:f8:db:
         44:9f:cf:6a:f8:8a:b2:a7:ae:f4:83:89:32:21:d1:24:2c:05:
         d6:e3:6e:ac:d3:57:23:9e:2f:c1:ba:9b:30:f4:aa:7d:35:13:
         73:f3:dd:29:f5:6d:79:a4:bd:87:94:2a:95:e2:27:7c:e7:7c:
         fd:ce:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:48 2026 by rpki-client