This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File:                     l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier:          82oq65zDNfsXPKklXRMpncc3engGjPexMra5ODE3qsQ=
Subject key identifier:   D6:16:D0:E8:28:78:3C:29:0F:3D:90:B9:EE:0D:EC:BE:6E:3C:EB:A5
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       019C420F31DD8315109670E45C6B1F0B6F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number:          0CF2
Signing time:             Mon 09 Feb 2026 11:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:17 +0000
Files and hashes:         1: HQ9in2gPerdxnIF0h-xK9cg53u8.roa (hash: XzbavZekgRPq70hu9alvl/LqU0pRSF/b7Peoc0VfuYg=)
                          2: RZOthdT6C9nuwbu3UIjhWwOwnms.roa (hash: 4fpWeQoxlDupX+sNQZiRpRjPM8u1NiZ4u0eyQTGiQO8=)
                          3: W9BSfJR_Mh1sxRdUNbIw0z_Nuio.roa (hash: 1JlHRLvbAOq6rKIVKlBTqSD7sE9lvV18Y1IWJ6XjyXw=)
                          4: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: 7cLpb+qbUan69eIBdWiGDqoIrY8uMbu2zHc1TxurvJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:31:dd:83:15:10:96:70:e4:5c:6b:1f:0b:6f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: Feb  9 11:00:17 2026 GMT
            Not After : Feb 10 11:00:17 2026 GMT
        Subject: CN=d616d0e828783c290f3d90b9ee0decbe6e3ceba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:e6:b4:38:05:66:a9:24:d2:88:2a:67:e8:
                    bf:9d:1b:e9:72:7d:5c:8e:c6:2c:5c:a4:9a:a8:0e:
                    51:39:03:c7:b7:be:68:ee:a8:f2:53:45:66:03:16:
                    07:9b:72:e8:71:d4:f6:fd:33:fb:e8:29:01:2a:46:
                    b8:a3:f2:37:62:6f:b3:20:ff:07:5e:dd:0a:78:38:
                    76:b8:97:34:ad:db:91:a2:97:56:67:51:fe:d4:31:
                    7a:cc:9f:93:0f:d7:a1:34:c5:f8:70:77:ef:54:88:
                    1b:54:f7:b0:08:6b:53:45:45:cc:1d:26:d1:b3:3d:
                    9b:74:a3:7d:e5:a0:d1:82:7c:97:62:18:54:a2:9b:
                    2f:9d:2e:6b:68:28:a1:11:37:2f:35:2f:bc:e7:f0:
                    c2:51:bf:6b:a0:28:c3:60:85:7c:bd:cb:78:de:63:
                    20:4d:b3:08:ab:32:06:40:aa:1a:75:42:35:ea:f4:
                    3a:b8:c0:14:10:5a:35:22:07:43:af:76:84:5e:c1:
                    b7:0f:ab:bf:4e:de:51:d6:b1:8c:10:cc:4d:df:8a:
                    9e:47:67:96:8b:93:7c:e9:68:5b:5c:4b:5c:53:5e:
                    05:a6:cd:2c:32:bf:ba:ce:67:84:44:78:62:24:85:
                    8c:60:b8:be:3c:36:03:60:a4:ac:46:19:60:43:81:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:16:D0:E8:28:78:3C:29:0F:3D:90:B9:EE:0D:EC:BE:6E:3C:EB:A5
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:12:f7:f5:e9:9f:75:b2:d3:a0:86:26:9b:50:bc:f0:ea:ce:
         b9:ab:65:4b:5a:aa:eb:a6:74:1b:aa:30:bb:52:d1:2a:07:74:
         c9:60:aa:8b:9f:54:b1:9b:d8:cd:4f:c4:e8:00:61:66:e3:f5:
         48:5b:d7:87:4f:f2:ee:d2:1b:77:93:47:85:86:0c:7d:aa:d9:
         63:d8:5a:d0:0c:c7:f6:96:7f:41:86:0f:18:75:f1:50:35:60:
         2d:82:3e:9e:4e:ae:bc:fe:fb:70:e0:41:16:91:30:3a:a7:3e:
         71:bb:be:90:6c:86:b8:05:1e:21:6f:c5:b5:ca:a3:33:85:94:
         ba:23:33:38:f3:8d:63:b3:f6:fd:f9:f9:f7:01:95:1c:8f:75:
         05:6a:ca:75:db:ea:64:37:25:0d:b3:f9:ac:eb:83:df:a0:63:
         2d:bb:af:6a:3d:e6:37:40:9c:5e:76:1c:53:17:3d:d1:73:83:
         db:64:cd:74:80:4f:df:47:65:2f:c6:d4:86:9f:e9:cd:9a:7b:
         f8:41:fa:50:e1:8a:97:09:14:23:4d:82:46:c8:e5:2e:d6:76:
         79:0b:f3:99:60:16:73:2a:a4:6a:da:7f:cb:1f:3d:d5:3d:f6:
         69:0c:3b:d3:32:86:ef:f1:9b:fb:16:29:69:fe:17:0f:33:f0:
         35:21:78:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDzHdgxUQlnDkXGsfC29XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2
M2FkMmQwHhcNMjYwMjA5MTEwMDE3WhcNMjYwMjEwMTEwMDE3WjAzMTEwLwYDVQQD
EyhkNjE2ZDBlODI4NzgzYzI5MGYzZDkwYjllZTBkZWNiZTZlM2NlYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ybmtDgFZqkk0ogqZ+i/nRvpcn1c
jsYsXKSaqA5ROQPHt75o7qjyU0VmAxYHm3LocdT2/TP76CkBKka4o/I3Ym+zIP8H
Xt0KeDh2uJc0rduRopdWZ1H+1DF6zJ+TD9ehNMX4cHfvVIgbVPewCGtTRUXMHSbR
sz2bdKN95aDRgnyXYhhUopsvnS5raCihETcvNS+85/DCUb9roCjDYIV8vct43mMg
TbMIqzIGQKoadUI16vQ6uMAUEFo1IgdDr3aEXsG3D6u/Tt5R1rGMEMxN34qeR2eW
i5N86WhbXEtcU14Fps0sMr+6zmeERHhiJIWMYLi+PDYDYKSsRhlgQ4FM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYW0OgoeDwpDz2Que4N7L5uPOulMB8GA1UdIwQY
MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt
ZWY1OTBjMWM4ZTEyLzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy
LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhL39emf
dbLToIYmm1C88OrOuatlS1qq66Z0G6owu1LRKgd0yWCqi59UsZvYzU/E6ABhZuP1
SFvXh0/y7tIbd5NHhYYMfarZY9ha0AzH9pZ/QYYPGHXxUDVgLYI+nk6uvP77cOBB
FpEwOqc+cbu+kGyGuAUeIW/FtcqjM4WUuiMzOPONY7P2/fn59wGVHI91BWrKddvq
ZDclDbP5rOuD36BjLbuvaj3mN0CcXnYcUxc90XOD22TNdIBP30dlL8bUhp/pzZp7
+EH6UOGKlwkUI02CRsjlLtZ2eQvzmWAWcyqkatp/yx891T32aQw70zKG7/Gb+xYp
af4XDzPwNSF4Zg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:40 2026 by rpki-client