This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          CBBB/rS6avzvRE657pnhnbwL5qNuYALNIxs3r8mo10U=
Subject key identifier:   CD:3B:71:FE:D0:78:EA:E3:77:54:C9:5B:78:81:1C:28:51:28:B0:7E
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       019C43C6CCFC9BC0D360C076A8B25C1F2CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          08F7
Signing time:             Mon 09 Feb 2026 19:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:27 +0000
Files and hashes:         1: 3W6mluySiEpKej6eN1jA5zstxy4.roa (hash: BnPbQOWoBcwsBllS5g956Y7roIr2qvKYxdvmXktrFbQ=)
                          2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: dW45RWLJ0eSqcK74u72P+Ew5+kYPcd3ItMt6EYnFiFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:cc:fc:9b:c0:d3:60:c0:76:a8:b2:5c:1f:2c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: Feb  9 19:00:27 2026 GMT
            Not After : Feb 10 19:00:27 2026 GMT
        Subject: CN=cd3b71fed078eae37754c95b78811c285128b07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:a0:4f:04:f4:3b:73:ae:f5:40:22:e0:a4:
                    4f:8a:d8:44:b7:5b:b5:9c:6a:a0:60:b3:e1:4a:88:
                    d0:10:38:0b:2f:31:20:70:88:03:5c:ef:da:b8:ed:
                    bb:8d:0e:cb:61:2a:b2:f9:b9:02:0b:82:0f:67:9c:
                    e3:30:73:18:1e:84:15:5b:68:78:65:f5:cd:73:87:
                    de:a6:3e:30:6b:23:22:0c:2f:52:6f:1a:55:a3:95:
                    7c:c6:e8:76:68:f0:b1:57:a3:61:f9:e4:ba:a6:fe:
                    b2:15:8f:4f:86:b0:98:76:9c:db:1d:79:6e:0c:21:
                    2b:5c:00:3a:b0:80:35:ac:60:3b:5c:c4:b4:aa:4c:
                    c0:12:99:2f:4c:0e:70:6b:77:c3:bd:3d:44:5c:60:
                    51:fe:82:55:57:7e:6b:5d:88:a9:d8:78:f6:51:cb:
                    18:1b:65:16:91:40:35:3f:0d:b0:b4:ac:c7:0d:37:
                    38:19:a1:d2:a0:ec:f8:c3:b6:fa:4a:36:ea:be:f2:
                    91:2c:fe:74:6a:b4:03:af:85:83:94:f8:a4:e0:5a:
                    f6:6e:55:eb:b9:18:54:a6:ea:c8:16:42:16:61:6c:
                    a4:50:95:d3:cb:27:36:75:3d:eb:85:fd:ed:2c:1e:
                    47:f5:ef:95:3d:24:97:6b:fc:51:63:51:4c:87:79:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:71:FE:D0:78:EA:E3:77:54:C9:5B:78:81:1C:28:51:28:B0:7E
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:88:95:62:e2:f4:45:c1:59:f1:9c:4c:75:73:b9:bd:57:51:
         b0:32:e3:5e:4c:ce:6a:05:aa:26:26:03:14:8e:6f:69:66:7f:
         35:9d:22:88:27:3d:9d:2f:0e:3b:f8:2a:4f:0d:49:16:e8:09:
         f4:10:e4:98:80:40:15:43:48:70:ee:39:44:7e:97:ae:6f:08:
         83:ad:8f:73:4a:6d:16:0b:28:e8:43:de:e7:48:4b:26:82:00:
         ec:29:74:8d:4c:39:2e:c0:dc:cd:df:05:e6:5f:02:3c:7f:17:
         11:07:37:35:9f:2c:2b:07:a8:e5:0b:d6:82:8a:48:bc:c6:db:
         29:ee:f2:49:3c:03:8e:bf:8e:a7:fb:86:61:99:a3:70:51:6c:
         91:76:ec:a7:47:d8:9f:a7:18:7f:43:1c:a4:d6:96:12:c0:2f:
         9d:45:90:fa:16:55:c2:96:02:84:08:13:c3:34:c6:3b:7e:5b:
         8f:b4:44:60:ba:71:92:48:92:bb:61:a4:e0:51:ad:fe:71:ab:
         28:37:82:64:82:50:24:73:5e:65:42:fb:be:9b:4b:9a:a9:8b:
         51:4f:e4:44:1d:67:85:5d:3a:c6:42:01:4f:f6:41:55:55:9f:
         c1:dc:bb:36:e5:4d:8b:ec:74:84:1a:f4:d8:52:2e:45:fa:bc:
         25:e9:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:45 2026 by rpki-client