This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File:                     htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier:          cjVJGBcRnYQKFLwZx6MuFBzXiZ0iWvIF524MfB5oHwU=
Subject key identifier:   5A:B7:0B:54:02:D9:A7:7E:3C:29:70:36:FA:94:A2:1B:DF:8B:F4:B9
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer:       /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial:       019C43FE307E65DCBCCC9528EF1824E265D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 20:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:57 +0000
Files and hashes:         1: 1AbwTnYg0WXUPpYwnnaZL_ow3bI.roa (hash: hVk4TpP4RMB+g39qT2ebySuMm79Hn4thM7YjCCsMTe4=)
                          2: Wn4stG9r3sPGrKZA-bHeBQoqYZE.roa (hash: q+6bbzrK5RoX6mP8fjjAray92+/gWY61XEVj188QjD8=)
                          3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: WSy8yHAgzqvXTAhRgEOukkX9JdymxgaC+UCcZjHOKJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:30:7e:65:dc:bc:cc:95:28:ef:18:24:e2:65:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
        Validity
            Not Before: Feb  9 20:00:57 2026 GMT
            Not After : Feb 10 20:00:57 2026 GMT
        Subject: CN=5ab70b5402d9a77e3c297036fa94a21bdf8bf4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:6e:fe:b0:3f:56:12:7f:ea:44:25:d1:b1:
                    24:30:51:cd:28:1f:32:3c:5d:c0:1a:de:60:f5:a7:
                    1a:1f:12:bb:0a:20:b8:34:e2:87:37:fc:5d:4c:92:
                    f8:b4:70:56:92:1d:df:6e:a2:50:69:1f:cb:63:22:
                    c3:5c:91:81:0c:7c:ea:c5:b8:39:98:53:02:e2:c4:
                    4a:74:9d:9e:16:e7:eb:2c:c9:bf:fc:7d:dc:51:60:
                    8d:e7:f2:7a:64:a7:0c:06:ce:42:b8:83:0c:f6:12:
                    ed:58:22:a4:87:0e:b6:9c:f0:68:fb:5a:b1:2f:c7:
                    33:e7:4f:fb:a7:ba:12:ae:60:07:95:9c:33:c1:cb:
                    62:e7:f7:9d:2b:0f:c5:c2:ce:a2:84:65:eb:0d:08:
                    f5:0b:df:ae:c8:76:17:70:2c:27:a6:21:cf:2e:97:
                    f8:38:a3:11:99:b0:96:23:f5:f6:0a:b3:0f:00:44:
                    5c:12:fa:00:4d:54:f4:a1:11:4a:0f:f7:c2:6a:5e:
                    49:35:e1:7b:67:39:ce:81:e0:f9:df:64:04:c5:2a:
                    b9:a8:9b:2a:9b:e6:8c:fe:da:97:ac:5f:bb:4f:20:
                    6a:e6:7b:4a:c2:1f:f0:c0:12:e0:c0:f9:45:ae:c5:
                    c2:1d:35:f8:57:29:24:3b:2e:a4:d5:2e:11:ba:62:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B7:0B:54:02:D9:A7:7E:3C:29:70:36:FA:94:A2:1B:DF:8B:F4:B9
            X509v3 Authority Key Identifier:
                keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:07:21:76:1d:46:85:53:a9:5e:dc:b1:61:c4:28:b1:79:
         9d:19:88:fa:f4:36:a0:bb:3b:b6:67:2d:4f:e3:f1:f5:9d:26:
         a1:59:a1:36:8a:32:85:a8:f5:6b:ae:40:27:14:b9:59:b4:c7:
         38:46:5e:22:ac:6f:c9:6f:df:53:df:81:45:96:e6:d6:cd:49:
         a9:a0:83:48:d2:a4:60:68:49:5c:48:44:b6:7a:7c:66:fb:57:
         d5:34:84:26:7c:6c:c2:2d:96:ee:ce:38:74:4a:b9:db:ee:45:
         35:3c:7a:94:09:37:8f:da:ed:32:54:f4:cc:ee:75:66:08:4f:
         a3:2d:7a:d5:d8:f7:02:6d:50:66:73:81:07:48:c1:86:3f:a9:
         0a:ec:af:52:dd:58:f6:fa:b7:a9:a3:af:fd:61:1e:c1:83:c5:
         33:4c:a4:b9:b0:88:c0:dd:1b:a5:1d:85:c8:1d:2b:28:b2:04:
         87:e4:32:07:e8:2e:48:97:76:49:00:62:e1:ff:a0:e5:ee:5a:
         a5:c7:d6:a2:9d:b2:7f:05:cd:13:ff:a4:bd:ae:2e:c2:4a:c2:
         b9:dc:a6:a3:45:0d:1d:dc:c3:21:7f:e8:24:f5:30:e0:87:78:
         a4:76:b6:da:89:fa:54:ef:ee:a1:22:a6:2e:93:d5:7b:2c:83:
         b0:71:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:20:33 2026 by rpki-client