This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File:                     hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier:          WN5oDLzEc8l4tYhL9B6oyB2xO4mRGxkY2fRPKKJ+dMs=
Subject key identifier:   24:89:F0:57:A1:BD:BA:D7:9B:8C:CF:53:FE:E5:9D:7E:18:F8:F0:B7
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer:       /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial:       019C4322E361EC00F4A4C070BB0DC5CA50C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number:          10E0
Signing time:             Mon 09 Feb 2026 16:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:25 +0000
Files and hashes:         1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: N/gmabvzYtevGqd6Qnin5NPcGGrr5UDQrm+nnSImLME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:e3:61:ec:00:f4:a4:c0:70:bb:0d:c5:ca:50:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
        Validity
            Not Before: Feb  9 16:01:25 2026 GMT
            Not After : Feb 10 16:01:25 2026 GMT
        Subject: CN=2489f057a1bdbad79b8ccf53fee59d7e18f8f0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:07:ec:c3:4a:6b:da:5b:bd:7f:2d:e5:6f:
                    ee:5c:c3:b3:f1:d3:9b:9c:6e:ea:60:f8:de:8e:c6:
                    49:62:e3:c6:3e:86:f3:f2:ef:29:f3:66:71:ac:e5:
                    96:50:8b:13:88:cf:4e:f2:71:c4:7c:b0:3f:10:09:
                    a3:fd:a1:9e:84:a1:7b:d1:95:68:5e:ed:98:00:63:
                    15:ed:da:2e:87:76:ef:c2:75:74:42:bd:4c:ae:74:
                    5d:b9:e6:80:19:2c:37:46:a0:54:6a:05:31:6e:6f:
                    ea:d1:0f:ba:b9:fa:56:c2:a8:df:e1:a8:d2:01:a6:
                    1c:b2:ee:9a:13:01:fb:1e:48:51:26:c9:1f:9b:46:
                    56:d6:69:33:1c:3d:06:a5:5e:3b:98:be:c6:0b:74:
                    1c:fd:9b:af:37:3e:2b:6c:4d:96:d9:0f:c3:21:57:
                    50:b8:ed:7c:f7:a3:00:cb:47:91:b4:88:59:50:c9:
                    3f:58:83:8c:85:30:db:ac:28:85:03:7d:cb:ee:99:
                    f9:4e:23:2c:f8:6d:79:ed:ba:57:59:ec:ee:2b:76:
                    35:bf:ce:73:2a:fa:7e:b5:24:77:fa:b3:b9:82:57:
                    09:2e:4e:c5:d6:c8:1f:cd:37:29:e9:4b:72:1d:8d:
                    42:cf:d9:32:08:07:18:f4:18:38:7f:65:45:9b:19:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:F0:57:A1:BD:BA:D7:9B:8C:CF:53:FE:E5:9D:7E:18:F8:F0:B7
            X509v3 Authority Key Identifier:
                keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:1e:f2:e4:ab:b2:ef:a3:26:6b:de:67:c7:a7:da:2f:bd:
         c2:69:0d:6c:e1:6b:95:4b:b0:28:ef:54:f2:91:d3:0e:9a:2a:
         9e:e3:bd:6e:54:5c:36:84:fb:78:14:63:86:8e:cc:9d:dd:2f:
         83:b7:01:f2:31:be:5d:88:63:91:f6:18:cf:18:2d:50:99:46:
         d9:6e:e9:9a:be:9b:ca:e7:f5:7d:f7:a2:b6:d1:d2:4e:93:47:
         65:39:68:25:d7:46:78:71:76:c5:8c:98:95:8a:0e:6f:5a:b4:
         13:83:e4:55:14:9c:8f:a6:45:4b:23:03:59:aa:73:07:e7:e5:
         90:fc:4e:f2:ac:7a:d1:41:0a:50:63:12:b0:93:44:3b:95:e5:
         5c:17:68:a7:df:b9:78:f6:c6:b3:a7:7b:a4:87:93:3f:0a:f1:
         6a:9a:46:24:45:3b:ea:16:b9:57:66:94:c5:b4:00:57:70:4f:
         38:97:14:06:8d:ce:3d:57:63:9e:34:8e:27:44:fd:5a:cd:f7:
         a0:e0:2c:65:6b:4d:fc:ca:a9:01:8f:49:e1:c8:a9:62:3d:1f:
         fc:74:af:a3:9f:a0:8c:44:84:6b:b1:0c:51:1a:fd:cd:76:22:
         4d:ce:bf:58:54:98:c6:69:91:5f:31:4f:10:ef:9b:84:0d:2b:
         f3:c3:01:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:43 2026 by rpki-client