This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File:                     HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier:          L3eX8K5ejc1f7X41n0RwuXl/sLmQpsOx/zcrzrsNROk=
Subject key identifier:   BD:7F:97:B2:BF:8C:EF:EE:FD:6F:4A:11:34:00:E4:72:02:4B:95:0B
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer:       /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial:       019C446C0588054FB5F5CA67D6800E7E6241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number:          1701
Signing time:             Mon 09 Feb 2026 22:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:55 +0000
Files and hashes:         1: 1RxVOrGk4jkOiEPDxsyr57BZkQQ.roa (hash: 1SKwEfmuDzDxIUUcwYxOh0kRsnImtD8oh1B3n8zoe0Q=)
                          2: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: q0OPxOgSHYM6EobCRinX1brDaMnL6/1tcSkcsE8Z2PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:05:88:05:4f:b5:f5:ca:67:d6:80:0e:7e:62:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
        Validity
            Not Before: Feb  9 22:00:55 2026 GMT
            Not After : Feb 10 22:00:55 2026 GMT
        Subject: CN=bd7f97b2bf8cefeefd6f4a113400e472024b950b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:82:73:35:de:d4:85:48:e2:7d:01:7a:94:
                    7a:1c:49:f7:b9:a7:38:f0:6a:10:78:b4:97:1c:94:
                    5b:72:ca:8a:13:03:93:3c:c6:14:6e:4a:60:ef:a9:
                    2f:8d:d8:9c:0a:b0:f4:d6:b9:83:48:6f:57:fc:d4:
                    50:12:ec:9e:f1:cb:af:fd:e9:2e:8c:09:78:ab:87:
                    15:82:9e:e0:81:d0:c3:65:d2:04:49:cc:fc:08:07:
                    63:63:e5:f4:35:68:43:77:34:85:1c:5c:70:0a:90:
                    86:58:78:cb:89:18:50:a9:02:38:37:64:39:65:12:
                    54:8c:2a:d2:87:d1:3c:f2:7e:89:1e:14:17:da:88:
                    78:bf:19:18:f5:5f:c8:cb:30:fa:82:77:c0:c3:3e:
                    e6:ef:be:d4:ff:9e:ee:8a:2b:7e:0a:19:b6:3b:7c:
                    20:9d:17:bc:17:5f:ca:ca:e0:f7:d9:1a:2b:35:c8:
                    43:e8:20:ea:e1:3a:81:d7:cb:26:c2:42:2b:f2:68:
                    9c:8d:39:df:97:e4:57:15:a1:21:46:3d:4a:81:45:
                    6f:3c:f4:c9:ce:04:c6:88:d1:e7:8e:77:d2:4b:89:
                    cc:ee:ce:27:29:11:34:cb:84:19:98:1a:6e:45:2b:
                    52:e1:96:87:4d:23:5b:de:d2:79:e6:52:fa:ff:74:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:97:B2:BF:8C:EF:EE:FD:6F:4A:11:34:00:E4:72:02:4B:95:0B
            X509v3 Authority Key Identifier:
                keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:4a:21:86:5c:7b:c5:10:0b:51:b1:70:19:85:9a:b3:cc:
         00:a5:69:14:1d:f6:49:c4:6b:67:58:f1:31:0e:90:dd:a4:22:
         b7:39:fe:cf:db:1c:4c:3a:80:2b:ed:fa:81:dd:48:c7:14:d8:
         60:69:cb:c4:2b:cd:d6:d4:ca:11:ce:4a:14:64:4e:d3:47:18:
         ac:b9:6f:fb:ff:5d:ea:af:91:e9:5c:ba:34:06:c1:c4:f8:b3:
         90:be:f6:0f:35:13:d9:0e:20:67:db:6d:86:26:6b:79:0e:b8:
         1f:48:84:04:63:f4:e7:9d:b0:f9:ef:8b:d2:03:e0:06:7e:5b:
         1a:0e:c4:c6:50:ab:b2:d3:4a:c1:86:ee:42:ac:5d:1b:d6:ba:
         d0:a1:dc:c5:28:b0:f2:9e:93:3d:78:18:29:dc:80:60:bf:76:
         f0:bf:43:f9:40:c5:79:33:5a:9c:9e:f6:8a:8d:51:75:57:e2:
         ea:84:31:bf:63:af:20:7d:62:5c:94:75:aa:f4:1c:bb:57:56:
         a6:5b:a0:e9:31:0f:73:12:92:2c:d3:47:9c:03:fb:18:42:1b:
         a4:ba:be:49:fe:b7:b8:10:23:02:ac:4a:34:a3:b5:a0:66:11:
         33:7e:cb:a3:9d:e8:d5:b9:a9:19:b1:4c:c4:b1:60:89:b9:54:
         33:47:7e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbAWIBU+19cpn1oAOfmJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYjQ2NGJhMDM4YmMwYmJiZWU0MDBmM2U5MDhkZjUxNDgy
YzUxYmIwHhcNMjYwMjA5MjIwMDU1WhcNMjYwMjEwMjIwMDU1WjAzMTEwLwYDVQQD
EyhiZDdmOTdiMmJmOGNlZmVlZmQ2ZjRhMTEzNDAwZTQ3MjAyNGI5NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxaCczXe1IVI4n0BepR6HEn3uac4
8GoQeLSXHJRbcsqKEwOTPMYUbkpg76kvjdicCrD01rmDSG9X/NRQEuye8cuv/eku
jAl4q4cVgp7ggdDDZdIEScz8CAdjY+X0NWhDdzSFHFxwCpCGWHjLiRhQqQI4N2Q5
ZRJUjCrSh9E88n6JHhQX2oh4vxkY9V/IyzD6gnfAwz7m777U/57uiit+Chm2O3wg
nRe8F1/KyuD32RorNchD6CDq4TqB18smwkIr8micjTnfl+RXFaEhRj1KgUVvPPTJ
zgTGiNHnjnfSS4nM7s4nKRE0y4QZmBpuRStS4ZaHTSNb3tJ55lL6/3RXrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1/l7K/jO/u/W9KETQA5HICS5ULMB8GA1UdIwQY
MBaAFBy0ZLoDi8C7vuQA8+kI31FILFG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEt
YmIyNjE0M2M1ZWRjLzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wODcyOWYtNzlhNi00OGQwLWIyZTEtYmIyNjE0M2M1ZWRj
LzEvSExSa3VnT0x3THUtNUFEejZRamZVVWdzVWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9BKIYZc
e8UQC1GxcBmFmrPMAKVpFB32ScRrZ1jxMQ6Q3aQitzn+z9scTDqAK+36gd1IxxTY
YGnLxCvN1tTKEc5KFGRO00cYrLlv+/9d6q+R6Vy6NAbBxPizkL72DzUT2Q4gZ9tt
hiZreQ64H0iEBGP0552w+e+L0gPgBn5bGg7ExlCrstNKwYbuQqxdG9a60KHcxSiw
8p6TPXgYKdyAYL928L9D+UDFeTNanJ72io1RdVfi6oQxv2OvIH1iXJR1qvQcu1dW
plug6TEPcxKSLNNHnAP7GEIbpLq+Sf63uBAjAqxKNKO1oGYRM37Lo53o1bmpGbFM
xLFgiblUM0d+dA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:43 2026 by rpki-client