This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File:                     hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier:          83zXdSG9azwjeMx6Btp/PZ0qjTwB8G3w3WhI5GThDjI=
Subject key identifier:   17:C4:E0:AD:56:4D:EC:73:C5:E6:2F:04:F7:0D:D9:94:F1:6D:E0:B7
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer:       /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial:       019C41D8E6B4C0FB2943435671DE35B88E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number:          0EF3
Signing time:             Mon 09 Feb 2026 10:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:59 +0000
Files and hashes:         1: CDpMD_YtLf5sr3vUWD2b37ldTHA.roa (hash: GiFS9+M5y+qgplPNTHBHIZf4CKfaw5vBcEKWbsoxSkk=)
                          2: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: tRxgbw2VW8bSuKXgG/n9SWpA3pq7skj7u4tjYvsQ8eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:e6:b4:c0:fb:29:43:43:56:71:de:35:b8:8e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
        Validity
            Not Before: Feb  9 10:00:59 2026 GMT
            Not After : Feb 10 10:00:59 2026 GMT
        Subject: CN=17c4e0ad564dec73c5e62f04f70dd994f16de0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:ee:5b:f8:aa:6e:bb:7c:ff:bc:b2:fa:0e:
                    3a:29:e3:65:d5:a7:29:2a:b2:8f:88:50:95:3c:84:
                    46:3b:3a:5f:51:39:26:f3:83:9f:52:c7:b8:f1:f4:
                    89:e9:86:38:97:2c:9a:67:9f:8e:cc:23:58:01:fd:
                    1b:4d:96:1c:7f:63:59:13:42:5d:ea:63:e8:8e:f0:
                    92:9b:f8:e7:97:d6:6b:3d:14:02:49:a4:b3:77:47:
                    2f:19:4c:aa:e7:dd:84:57:37:50:28:9e:a8:6a:40:
                    10:1c:4c:d0:7f:4f:88:7d:d6:1c:5c:a4:ae:cb:96:
                    70:c6:26:b6:86:b0:11:c1:4d:9e:49:12:16:22:66:
                    f4:2b:1d:67:1f:54:b2:0d:d4:67:d1:32:50:b9:86:
                    3b:67:05:2f:90:75:38:02:d0:fa:57:1e:41:e5:27:
                    ee:30:89:ec:11:a5:ca:5a:c0:41:d7:79:75:9a:46:
                    4c:80:84:ae:0b:44:85:58:73:bc:13:1f:7f:8b:f9:
                    83:16:86:2b:09:d1:3d:4c:df:ff:81:56:c2:69:35:
                    f4:64:f2:d3:45:01:4b:2b:60:22:b9:14:4b:a0:e6:
                    40:b4:c5:a9:e3:57:55:da:74:d1:25:31:41:1b:89:
                    23:dd:b1:8e:67:46:7b:38:39:0d:20:12:6c:3b:be:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C4:E0:AD:56:4D:EC:73:C5:E6:2F:04:F7:0D:D9:94:F1:6D:E0:B7
            X509v3 Authority Key Identifier:
                keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:61:07:5e:b7:aa:04:89:b0:46:73:69:6d:3c:28:cf:97:d2:
         30:cf:e9:74:9d:bd:39:83:1c:3e:06:b0:79:4e:15:3b:3e:37:
         7f:35:3c:12:76:ff:fa:ec:b9:df:d9:09:41:05:0a:0a:69:41:
         de:d8:f3:76:7c:6f:19:ca:77:f8:dc:b6:88:3e:f6:54:ff:14:
         3f:35:0e:e4:b2:84:9d:61:9b:30:7d:56:15:81:24:b1:8d:19:
         97:58:83:12:83:f2:12:bd:82:cf:bb:86:0b:2a:1b:a3:3a:f3:
         34:a7:33:a5:c4:b8:bc:f2:0f:fb:19:8c:87:a5:a8:79:df:d8:
         c3:a5:c6:50:b2:c2:70:8f:3b:5e:a9:b3:00:de:39:be:2f:b4:
         ae:32:6e:a8:38:91:e9:41:45:e8:6d:55:52:75:15:21:a1:db:
         84:f4:e3:ce:ef:5d:10:91:99:ee:41:82:84:48:f8:f4:7c:fc:
         ab:92:8b:01:e5:22:da:e9:9f:42:6a:29:a1:25:ee:d3:27:01:
         c2:07:99:66:fb:03:f5:75:d6:a2:59:6d:e3:a2:34:64:b2:d3:
         4d:40:bc:c2:15:0f:68:75:85:da:13:10:a6:ca:48:11:cb:3d:
         7d:7e:e7:63:43:1d:b3:a4:0e:0f:1b:4d:2e:91:a4:30:b1:e5:
         4d:72:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:58 2026 by rpki-client