This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File:                     _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier:          OSi9MBRRde3DdvBvbpvtaJdOKPyG87t9u+3D8cLVffk=
Subject key identifier:   A1:EE:82:A4:40:59:39:1C:28:22:01:7C:B7:F4:01:7F:B0:56:31:50
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       019C446BD13238130BC6A8949087368B77EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 22:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:42 +0000
Files and hashes:         1: 4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa (hash: iQJVRs6WBEd0Gb45crtmBc2wJzXH0++1oDGdcewo5pc=)
                          2: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: j/pMr+sGuRDjF6iWVAMC2iuseOQwirLhb9BoS1cuCQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:d1:32:38:13:0b:c6:a8:94:90:87:36:8b:77:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: Feb  9 22:00:42 2026 GMT
            Not After : Feb 10 22:00:42 2026 GMT
        Subject: CN=a1ee82a44059391c2822017cb7f4017fb0563150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:28:5d:b1:f2:bc:74:77:e7:b8:8b:43:35:
                    c8:e5:e8:6e:59:9e:53:aa:a5:6d:04:40:f2:55:59:
                    52:a0:3c:ac:fe:f5:d4:18:ea:45:0f:82:25:e9:d8:
                    45:5d:ad:60:0e:14:1b:f6:1a:c9:26:2c:cd:31:02:
                    e6:f0:f0:72:f8:ba:51:86:26:3f:bc:94:59:a1:4d:
                    e0:1c:29:10:da:b6:9a:aa:3a:36:e4:69:68:bd:fe:
                    21:ab:6b:76:a1:f7:5b:36:01:94:a7:b4:f2:a6:3c:
                    02:60:d0:36:03:9a:cf:c5:7c:ce:1f:42:f4:35:b7:
                    55:09:78:fb:0f:bd:55:c3:97:ab:dc:48:b9:7f:ba:
                    e1:d7:d9:16:d3:4b:77:42:8e:4a:0a:6b:17:6e:27:
                    b7:4e:5b:02:fe:c9:36:10:2d:22:94:6e:ab:de:aa:
                    3d:4b:08:f2:db:76:82:16:a8:51:c9:cb:75:44:9f:
                    1e:5a:e0:41:9e:ab:b3:43:55:8b:77:e8:64:2d:05:
                    99:48:f6:dd:41:a8:c3:9d:0c:8d:67:0e:26:05:f6:
                    8b:b3:50:08:42:f0:e8:bc:fc:38:c9:6d:8a:c4:16:
                    53:a3:8e:a5:f5:03:0d:b4:ee:3f:f8:ec:63:f4:59:
                    4d:ec:20:a8:ea:ef:e6:fb:bf:94:2c:b3:8e:f8:3c:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EE:82:A4:40:59:39:1C:28:22:01:7C:B7:F4:01:7F:B0:56:31:50
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2d:3a:50:d6:ab:9b:14:e6:b4:06:60:9b:79:64:39:cb:73:
         bf:43:ce:7a:f0:4a:07:74:bc:cc:5c:08:80:0b:0a:b5:0d:b2:
         24:85:6e:21:c7:95:94:26:16:9c:c6:60:13:6e:4e:e9:f3:80:
         ea:da:d6:93:c0:c2:32:6e:5f:9c:0e:e9:34:06:21:c6:4a:82:
         f1:68:22:c4:4e:6c:d8:9e:d6:04:52:b6:43:4e:62:9c:10:20:
         79:24:a0:26:25:a2:24:cb:2a:a7:1d:8b:c5:f5:6f:cb:c9:bd:
         4a:7f:04:ef:ef:37:43:75:bb:48:d9:2b:c3:f2:8b:bd:3e:0e:
         d0:f0:1d:c8:38:d6:e9:c8:e0:71:cf:f1:c0:5e:53:37:44:54:
         7a:1f:3c:c7:b9:46:64:a2:b1:b9:53:b1:1c:f7:ed:3c:c9:69:
         76:b4:2e:ca:1e:b1:16:b4:6e:ae:2d:81:b6:ea:03:21:bb:05:
         c9:a9:8d:1e:07:23:4b:15:30:c6:9c:16:bf:ba:ba:20:db:d3:
         59:d3:8d:a2:d9:1c:17:f6:dd:de:82:bf:53:4c:c8:e6:65:e4:
         ac:a9:90:37:06:f1:35:4c:fb:a9:82:b0:b0:2e:9a:81:c1:a8:
         75:21:18:46:50:5e:42:3b:04:5b:d0:cc:ee:a7:0e:cc:2f:05:
         b1:aa:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:27 2026 by rpki-client