This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File:                     HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier:          iNv6pTJgE19gQzeQ8idKiXj5AqbvypDEEiH67o8a2lA=
Subject key identifier:   8F:8F:32:0A:1E:98:FA:57:B1:EF:2F:35:20:F7:F6:41:BB:A7:9E:CE
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer:       /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial:       019C427E2DE6F580820CE6B63439B975AC27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 13:01:31 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:31 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:31 +0000
Files and hashes:         1: F2tzVDQBbkmIrf7Rzc0Z1mCkiic.roa (hash: 9oOlsoWuljVApYdk+dHkE0uI0xd3Y1H6oZJ44vPob6Y=)
                          2: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: dv70cZLak1dK36Z04P6yoOuN+mDL7wFMSIkoO4ad6ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:2d:e6:f5:80:82:0c:e6:b6:34:39:b9:75:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
        Validity
            Not Before: Feb  9 13:01:31 2026 GMT
            Not After : Feb 10 13:01:31 2026 GMT
        Subject: CN=8f8f320a1e98fa57b1ef2f3520f7f641bba79ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:ff:6c:29:31:47:6e:54:ad:e1:c0:8f:9f:
                    80:b6:45:e9:3e:4d:0c:4b:4d:38:bb:ba:53:72:d3:
                    7b:29:17:cc:14:5a:f0:ef:80:eb:6f:b6:1f:8a:e1:
                    0f:9e:ee:57:69:8c:4f:80:9d:4e:fb:75:36:69:57:
                    4b:cd:30:b2:b5:ac:77:c4:94:73:51:db:43:a1:2e:
                    e8:65:d1:a9:fe:bc:2b:02:9d:c3:8d:5e:86:28:7f:
                    40:a5:cd:9f:b8:65:ff:18:59:e1:6e:a8:23:58:90:
                    b3:be:9d:5b:06:e0:b3:82:d2:80:c6:ea:d2:cd:f1:
                    96:c2:ed:62:26:0b:b6:a4:28:ab:e8:c6:b2:73:a7:
                    af:2f:ef:60:34:88:0b:8f:02:bd:19:d6:49:60:0b:
                    4b:89:a3:cc:a5:ca:ae:0f:48:eb:65:70:5a:4c:c8:
                    4b:62:b4:a8:bf:d1:73:4c:5b:2e:e6:4b:34:97:04:
                    2a:a5:15:e5:66:40:df:89:6c:6a:18:83:ff:f0:60:
                    79:f7:70:4f:bd:9b:27:ae:54:08:37:44:e3:34:5d:
                    79:6f:c8:b1:68:35:58:65:00:2a:e9:ea:30:15:1b:
                    4a:b4:cc:2c:1f:ea:3f:75:f0:ca:44:09:2a:07:dd:
                    ad:75:98:ae:87:ef:fd:53:64:a8:1b:d6:d2:62:28:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:32:0A:1E:98:FA:57:B1:EF:2F:35:20:F7:F6:41:BB:A7:9E:CE
            X509v3 Authority Key Identifier:
                keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:48:af:a1:5a:79:d5:90:fb:59:6a:23:fd:fc:79:c2:e2:
         57:1a:92:d8:a8:65:d4:fd:fd:c1:5a:e5:31:35:4a:86:44:d6:
         59:8a:3e:5d:0a:b6:6d:9e:08:09:a7:c1:bc:af:b1:91:48:71:
         89:a3:f4:b2:95:8c:a9:77:dd:3c:2e:d8:6d:bd:6d:f7:c6:6c:
         98:47:e5:f7:ef:8a:88:35:1f:bb:d3:dd:08:c1:3c:ec:58:92:
         a1:10:56:ce:e5:7e:bb:34:f9:d2:4b:93:ad:94:62:14:41:43:
         56:bc:33:36:5c:2d:1c:19:9d:2f:9d:80:45:cd:54:a1:b2:28:
         e0:d9:1f:cb:17:fa:49:5f:6b:78:22:24:66:f7:ba:f9:23:83:
         87:70:67:7b:e6:f6:bc:2e:87:03:84:8f:b2:4e:a1:ae:59:27:
         fb:82:8a:6f:bc:f4:95:31:2d:01:f7:2c:d8:d3:01:a0:19:14:
         34:67:ca:b5:ee:18:96:2d:cd:26:37:8a:2a:73:85:fc:3f:9d:
         d8:b6:46:34:bc:d9:d2:74:e7:3e:8b:d2:d5:1e:a9:37:78:fa:
         4f:98:1a:83:a0:d6:5c:81:5d:5b:a2:fa:49:d7:4c:26:4b:59:
         02:8f:fc:78:7e:e7:02:3c:30:ae:d0:cf:cc:82:82:85:18:d5:
         6e:d6:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:29 2026 by rpki-client