This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File:                     hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier:          eXf2AXqs6Onao+9UCjPYCvTIYBMpUy7L20b25xhDN9U=
Subject key identifier:   C1:16:34:55:A6:18:75:2F:F4:A1:9D:2E:5E:09:20:42:23:7F:4C:74
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer:       /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial:       019C42EBB82A2C66463F20BD559D2170944E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number:          07
Signing time:             Mon 09 Feb 2026 15:01:10 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:10 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:10 +0000
Files and hashes:         1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
                          2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
                          3: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: EpqyZQ1jptArrDqw8bZJpJd+Im9bhOFpFxyqVEVQkXQ=)
                          4: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:b8:2a:2c:66:46:3f:20:bd:55:9d:21:70:94:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
        Validity
            Not Before: Feb  9 15:01:10 2026 GMT
            Not After : Feb 10 15:01:10 2026 GMT
        Subject: CN=c1163455a618752ff4a19d2e5e092042237f4c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f6:0d:c7:32:76:5c:81:67:b4:34:02:7f:a2:
                    bd:49:af:34:af:2c:28:48:1d:dd:10:89:f6:6a:a3:
                    15:f0:cf:d2:f6:96:85:48:51:b0:9d:5e:c3:3b:46:
                    fc:a9:46:a5:8b:99:bd:1a:f3:a3:90:46:0a:93:b8:
                    90:72:54:65:b9:0e:1b:bd:13:d2:7a:67:98:b6:2e:
                    bd:df:f4:32:5e:6c:ed:d6:45:1f:f5:49:4c:b8:2e:
                    3a:80:c5:a8:5c:85:57:29:81:54:44:31:df:91:93:
                    b1:87:2c:73:a0:17:84:db:68:31:cc:96:98:8d:ce:
                    ae:1e:0a:2a:bd:c7:04:65:3b:04:86:82:fc:87:59:
                    ba:52:0e:1c:5c:63:bf:89:0f:54:ac:9d:16:5c:f0:
                    e0:ca:f5:63:f4:66:ed:20:97:e9:bd:55:44:90:54:
                    96:bb:be:32:b2:9f:82:44:7d:20:ca:79:6e:12:bb:
                    c8:ef:46:b8:fd:bd:85:3a:40:d1:f1:e1:49:50:1e:
                    07:f2:ce:db:d4:ac:8f:8f:14:de:6d:a8:24:44:d8:
                    ac:b9:fa:ed:9e:2a:92:38:02:de:7e:c6:4f:25:59:
                    d4:0e:7c:c4:8d:6b:cb:87:b2:87:87:67:c2:83:99:
                    72:76:1c:58:af:e6:9e:31:6c:dc:20:cc:3a:7b:bb:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:16:34:55:A6:18:75:2F:F4:A1:9D:2E:5E:09:20:42:23:7F:4C:74
            X509v3 Authority Key Identifier:
                keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:47:a8:cf:d1:e6:65:61:45:88:0d:d1:2f:4c:e2:8a:85:33:
         df:76:f8:66:20:21:d6:b1:24:91:59:67:5d:ed:60:a4:bc:59:
         12:05:37:6d:a0:83:ad:39:81:e0:16:54:cb:37:6d:7e:a5:1b:
         ef:1a:92:15:33:f1:f2:20:41:72:4c:26:fb:8f:d2:e7:04:55:
         52:93:b0:7c:87:f2:be:45:03:ae:13:45:66:2f:d9:37:c5:cd:
         93:2f:ff:87:d3:9f:ad:32:9c:66:ec:bc:09:02:95:8d:85:9a:
         98:63:3f:5a:f9:50:95:ea:36:69:a0:97:b8:d3:d6:18:1e:a2:
         c0:ce:d0:8b:7c:30:eb:6e:f6:25:fa:14:cb:ae:7f:8e:c5:92:
         6a:8d:90:eb:51:67:0d:80:70:5e:68:4b:36:c2:b1:76:61:61:
         3c:f5:fe:dd:b6:be:b8:ae:be:44:d3:28:2e:c5:01:e9:e6:a4:
         64:59:65:a7:87:7c:b3:91:b1:35:54:77:1f:bf:67:0c:9c:aa:
         3e:cb:d4:b8:6e:33:94:06:2f:12:e4:7d:b3:db:dd:c1:a7:aa:
         a3:dd:7e:bc:c1:09:f7:35:fb:a0:36:ec:7a:9b:e0:2c:f4:64:
         84:9e:82:5d:43:ab:64:d1:80:6c:ed:7f:0f:21:b5:bd:b4:ae:
         d8:6f:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:37 2026 by rpki-client