This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File:                     H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier:          jZ2hsCZvzAKvY/o49AJDBKd+Obf1/Il7PdcYrdL4eUs=
Subject key identifier:   E8:ED:1C:41:89:D3:09:4A:BA:6B:CF:88:92:63:5E:23:E3:D0:56:12
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer:       /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial:       019C42EB98F5D2B5399EA1664CD8BFAEC7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:02 +0000
Files and hashes:         1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: tszG0K3IpmJdNdg96WfTnvPsdVpt7ntFqQuNc5Whr/8=)
                          2: i7zxXmP3XzYJwJEU_15zW59SCTc.roa (hash: yrt7UH4SWPcCzRagghuKP9FdTtwWfWz6NVniBPL/djQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:98:f5:d2:b5:39:9e:a1:66:4c:d8:bf:ae:c7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
        Validity
            Not Before: Feb  9 15:01:02 2026 GMT
            Not After : Feb 10 15:01:02 2026 GMT
        Subject: CN=e8ed1c4189d3094aba6bcf8892635e23e3d05612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9f:f0:dc:bf:70:46:4a:dc:ca:10:3c:95:e4:
                    25:89:68:31:b5:52:96:f9:3d:2b:53:c2:63:b5:09:
                    c2:b7:9f:9f:e3:f5:2d:65:25:d1:cd:29:97:cb:b7:
                    28:01:78:85:21:36:1b:4e:37:43:97:7c:0e:6f:97:
                    75:f5:85:10:8e:4e:8e:8d:4e:28:30:a4:7c:9a:d7:
                    9b:91:97:36:1c:c8:e6:c3:93:93:f1:d3:50:aa:8c:
                    c4:75:1f:a2:2e:0a:dc:df:5d:c5:d1:69:d3:a5:34:
                    92:f9:21:62:a0:6b:8f:86:24:b1:b3:a2:ee:4f:5c:
                    ef:46:f6:53:a4:9c:35:2e:6c:09:32:ff:e7:23:f7:
                    35:ed:0b:84:0a:a4:8b:ee:4b:d4:be:0c:92:df:57:
                    0c:0f:74:a3:67:5a:9f:d0:44:f9:1b:e9:22:da:b7:
                    b3:bc:f9:90:81:87:14:12:00:c2:2d:03:5d:13:d3:
                    67:a4:db:3d:e2:ac:e2:8e:dd:18:9c:91:88:5e:71:
                    7c:15:5d:96:e6:ac:0f:05:06:81:09:57:30:f3:db:
                    04:02:41:fa:ee:5b:b1:b3:c5:ea:33:99:45:68:67:
                    d4:1e:6e:64:d6:a2:b7:b2:3b:60:de:b5:3b:55:65:
                    a9:b2:c2:91:d7:17:3d:e3:05:19:c4:1c:4c:11:60:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:ED:1C:41:89:D3:09:4A:BA:6B:CF:88:92:63:5E:23:E3:D0:56:12
            X509v3 Authority Key Identifier:
                keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:e6:b3:ce:fa:09:09:18:b8:52:e2:d5:c4:c4:f1:8b:65:
         df:ba:55:ba:f9:80:02:a3:01:77:4e:eb:c9:d8:a0:9f:54:e3:
         7f:de:83:98:76:db:27:a9:b3:4b:5c:9b:0d:32:34:2b:4d:82:
         4a:ff:ac:f3:65:5c:65:38:27:24:6c:e2:12:a1:94:79:6f:84:
         45:97:3a:97:6b:a3:b7:db:e2:f1:21:b2:36:6a:ac:bc:61:35:
         24:09:8b:39:9a:6f:60:08:e8:fd:82:23:ef:e5:1d:bb:47:90:
         1d:b6:7c:42:31:53:b8:b2:f3:f1:85:5a:f4:2c:8a:13:09:a2:
         83:79:b2:5f:a3:7b:0d:ee:f3:0d:a2:9d:9f:a8:6c:c1:fb:0b:
         e7:b2:5d:71:94:1d:c8:0d:25:31:6c:ce:c3:97:f5:0e:5a:da:
         fb:f4:63:09:db:87:a3:ae:7e:98:17:45:37:64:5c:b9:c2:21:
         8a:d8:5e:a8:b9:eb:21:f0:fb:63:28:02:e9:02:e1:05:c7:a4:
         0f:1a:03:ce:f2:e1:4d:39:76:40:e7:45:c6:b8:fc:45:2a:5c:
         01:8a:d1:02:40:85:21:12:cb:6b:ac:01:c1:20:58:d0:cf:68:
         2f:00:7f:b7:84:b3:84:48:6e:21:db:2e:3e:8d:86:24:ce:bd:
         d4:e0:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:42 2026 by rpki-client