This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
File:                     mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json)
Hash identifier:          Pg0bwGe346e4ch5DxrewImXisUkYUwDNP95jrytrklc=
Subject key identifier:   F5:C8:64:63:68:C8:50:1E:FE:83:98:E5:B5:BE:3E:64:60:D1:77:EA
Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
Certificate issuer:       /CN=98752d18667dbff8422f97e1e3890e99381d09d4
Certificate serial:       019C424699121045152AB24B56CE489D545B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
Manifest number:          08A6
Signing time:             Mon 09 Feb 2026 12:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:48 +0000
Files and hashes:         1: b5dBtRyuxV_76XQT5zCb2IptxQg.roa (hash: ZIiiQL589xbOcUnaVnMrAVTBKomhOu2PlrOUGtP7qkY=)
                          2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: Jrje5mK+bwVJ2GrNnvv7BZETW+ebJMxwdv2yJM5H5YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:99:12:10:45:15:2a:b2:4b:56:ce:48:9d:54:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4
        Validity
            Not Before: Feb  9 12:00:48 2026 GMT
            Not After : Feb 10 12:00:48 2026 GMT
        Subject: CN=f5c8646368c8501efe8398e5b5be3e6460d177ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:68:ac:76:3c:2b:bb:10:af:4c:2f:3e:ce:
                    b8:14:43:e9:89:ec:ce:51:2d:e6:df:6b:b6:da:4b:
                    61:ab:74:1f:db:03:e4:67:4d:c6:93:89:31:22:96:
                    e3:7a:e0:1d:b6:e0:89:c8:52:51:fd:17:ec:6f:06:
                    0d:a4:67:91:b2:c6:2f:88:04:7b:f7:9a:43:b1:60:
                    00:15:83:78:0c:5e:56:35:3e:b1:34:4a:d0:43:15:
                    47:0f:28:97:d6:b5:12:30:3a:c9:c3:67:8f:37:07:
                    48:10:32:61:13:aa:ea:f9:4a:4d:62:45:4a:a9:60:
                    3c:68:5c:75:09:e1:fd:bc:3d:ed:70:38:80:81:f1:
                    ac:f7:d5:2c:39:2f:a4:ad:f1:30:85:ad:20:2d:6e:
                    d4:9a:ed:83:17:95:4b:6d:6b:54:0a:3c:c4:84:6a:
                    13:b6:af:44:df:37:d3:51:10:01:1a:26:bc:90:8e:
                    62:54:de:e2:56:f3:6e:3e:c0:98:12:a2:ba:f6:e2:
                    96:e2:42:0b:df:28:f5:09:9b:f7:6a:60:47:21:92:
                    db:37:2a:b3:ab:46:6e:9d:92:8b:9b:00:ba:a6:b5:
                    4d:19:7e:9e:44:50:6d:62:cc:e4:b8:e0:dc:1f:2e:
                    3d:d0:65:68:d7:6a:d7:70:0d:96:32:68:66:da:a9:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C8:64:63:68:C8:50:1E:FE:83:98:E5:B5:BE:3E:64:60:D1:77:EA
            X509v3 Authority Key Identifier:
                keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:df:8f:0a:21:73:06:08:5c:ec:3c:2d:45:f3:70:89:df:bb:
         18:77:5c:9c:d6:dc:dd:ca:8a:2b:4a:6d:07:63:31:c9:cc:08:
         fa:86:af:d6:ea:1a:14:df:c1:a9:33:9b:66:54:40:16:ee:e9:
         c4:24:44:b8:f7:f0:e2:9e:b7:8a:eb:0d:d0:9b:e0:c6:b8:e4:
         16:60:e3:d3:93:79:11:26:b5:4c:65:d9:48:9c:48:51:73:f5:
         29:9c:c1:85:85:12:ec:1b:23:ad:34:29:73:b8:80:31:27:c5:
         ae:b7:2e:30:97:3d:c6:cd:e0:33:76:7c:b6:04:fe:84:d0:83:
         ab:be:b4:05:4d:5e:0b:78:b4:1d:71:d2:6b:c2:95:36:71:05:
         2d:3d:a8:22:cf:ff:6e:4d:a2:03:df:9d:90:48:15:20:5a:50:
         26:f5:b3:cb:a3:4a:82:38:fd:6d:35:79:2f:12:9f:dd:c7:51:
         3f:92:84:0e:7d:2e:30:9a:8d:22:98:03:62:56:7b:da:01:4e:
         9f:08:23:58:09:fc:b7:db:1e:7d:b5:46:b4:6f:10:91:9e:7f:
         43:d6:15:d3:d4:66:fa:d5:87:28:32:90:e0:af:17:00:d1:fd:
         a4:f0:88:7a:be:4c:8f:60:39:77:15:46:c0:d9:02:1d:cd:0f:
         90:d2:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:03 2026 by rpki-client