This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File:                     HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier:          iiRmXekiVx/3gKObbLg1+CumpruNBtLIE1uw4AF89AI=
Subject key identifier:   C2:EB:44:DC:4D:D1:03:13:D5:39:D9:D7:83:DD:EF:DC:52:FB:E8:18
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer:       /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial:       019C446C5F86435DBCEDCF23216432368A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number:          111E
Signing time:             Mon 09 Feb 2026 22:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:18 +0000
Files and hashes:         1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: AOh5hOPacuzqQyNKaHAZjoFzs7sIAQYVYAfrSO0Tr2A=)
                          2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:5f:86:43:5d:bc:ed:cf:23:21:64:32:36:8a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
        Validity
            Not Before: Feb  9 22:01:18 2026 GMT
            Not After : Feb 10 22:01:18 2026 GMT
        Subject: CN=c2eb44dc4dd10313d539d9d783ddefdc52fbe818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:ef:48:8b:79:61:02:b4:bc:84:39:11:ed:
                    f6:ea:f7:46:0e:96:fd:e9:5c:e5:56:fa:fe:50:24:
                    c6:15:47:1d:e3:11:b6:1d:b5:f8:d9:14:17:98:cf:
                    23:cf:67:9c:99:33:46:e5:cf:a0:a4:d1:9d:be:37:
                    f3:63:fe:b4:b4:c8:c0:2a:ad:50:ee:bf:71:f9:3e:
                    ba:09:3e:7d:e1:ca:fa:d3:c1:d7:1e:e6:59:3b:b5:
                    47:af:4e:78:e8:61:3b:a3:58:03:06:83:ba:2f:f8:
                    d2:e0:19:7f:ec:4c:91:42:be:dd:49:db:fc:92:f5:
                    ad:31:77:d6:67:f7:40:ea:4a:73:56:d9:62:bd:80:
                    be:eb:b3:36:fd:ca:83:1a:8b:3e:ff:33:20:c2:1a:
                    92:ea:eb:d7:77:4b:65:0f:c7:41:12:e3:e1:2d:0c:
                    2d:10:86:51:8d:88:66:b7:81:47:a4:f0:3e:70:ad:
                    68:1a:69:eb:58:e9:85:bd:f6:cc:7c:b5:5f:16:1a:
                    d3:3b:70:d6:26:cf:c2:14:f0:bd:da:ce:8a:18:da:
                    ff:55:6f:1c:d4:43:60:d4:f1:6a:8d:b1:f4:85:f8:
                    97:0a:fe:bf:5e:88:00:1e:e2:e8:4c:26:2b:fa:14:
                    9e:e1:47:01:ec:46:0b:7d:da:c9:df:2a:2e:96:89:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:44:DC:4D:D1:03:13:D5:39:D9:D7:83:DD:EF:DC:52:FB:E8:18
            X509v3 Authority Key Identifier:
                keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3f:9d:90:d0:0d:1b:d2:12:89:78:87:3a:bf:80:e4:8d:a3:
         d0:c5:9d:b9:51:6f:8d:d1:21:af:ce:a2:35:bd:29:8b:1a:f9:
         32:d9:62:a4:4d:18:2b:c1:3f:6a:b2:b3:a4:a1:0b:fb:54:53:
         42:ad:10:99:14:df:6e:33:f3:a4:5c:25:05:98:cf:68:fa:80:
         ac:ce:7f:2b:8d:af:dc:80:cf:86:25:6c:59:e0:97:79:8d:64:
         74:9b:44:8c:57:e5:d2:4a:ab:f2:e6:49:fc:a8:5a:0d:59:2a:
         8a:26:0c:40:d1:2c:37:27:bf:b6:2e:58:53:d2:c4:b9:ba:f1:
         b7:bf:0e:0e:d1:27:fd:32:3f:41:5f:62:40:0f:f8:29:a5:fc:
         b5:fd:4d:59:93:7a:b3:86:8b:f6:b5:40:91:dc:cc:d5:49:f6:
         57:4f:2d:0e:b5:eb:96:06:37:d0:0b:3a:49:59:44:c6:48:ff:
         da:ba:f8:45:89:c8:22:37:75:83:fb:d5:8f:fc:55:52:32:ed:
         99:48:4b:91:3c:c5:bf:a1:3c:ef:c6:79:d7:17:dc:78:56:81:
         39:58:21:3f:82:bb:f2:a6:19:1c:60:77:5a:00:50:96:a2:ff:
         28:58:eb:86:2e:0c:a5:00:46:79:2b:ef:23:b5:8b:08:bd:5e:
         13:d8:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:51 2026 by rpki-client