This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File:                     HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier:          P0tZZEq8K6BQC9SXF/IicjdExN1lgizVm+YTZCXZlXk=
Subject key identifier:   6C:20:A4:A9:D4:DB:05:81:0B:53:0B:90:5F:2B:55:FD:FD:6E:9F:A0
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer:       /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial:       019C420F5AFBE21D831F1B39DC38F30E3588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number:          035D
Signing time:             Mon 09 Feb 2026 11:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:28 +0000
Files and hashes:         1: D1EmtE1k7u4f07ze8ohcNIZrJqY.roa (hash: 58n5LdTsnNqmYJwdVt7TBvDZfGrTorfZcjCIJKhkX18=)
                          2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: KR13M0mBNKd7AYS9WVxIIUE8SZZaB5z5+PhuelmwTj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:5a:fb:e2:1d:83:1f:1b:39:dc:38:f3:0e:35:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
        Validity
            Not Before: Feb  9 11:00:28 2026 GMT
            Not After : Feb 10 11:00:28 2026 GMT
        Subject: CN=6c20a4a9d4db05810b530b905f2b55fdfd6e9fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:74:81:0d:80:79:5d:7d:cc:83:3c:90:5a:
                    ab:50:c4:26:cf:ab:b9:43:c9:6d:1b:50:82:85:42:
                    df:df:37:b2:e1:59:95:6c:f6:b1:3a:13:86:ba:25:
                    55:52:28:bf:44:f2:aa:f7:85:c6:d6:54:38:8c:5d:
                    8c:5d:a3:5d:d8:ce:b3:97:67:88:1d:e5:dd:fb:64:
                    cc:10:3b:e8:78:98:e0:a6:2f:87:a0:07:f8:e0:76:
                    08:5d:27:76:0e:9e:07:c7:d7:2f:46:09:ba:22:0b:
                    9b:17:25:df:ca:36:c9:0b:f4:bb:9b:b4:57:06:c2:
                    00:ae:35:24:c6:fa:4d:a3:5f:65:80:fa:48:f6:cc:
                    5c:05:07:4a:ad:28:53:a4:bf:9b:14:09:48:50:14:
                    d4:7c:f9:12:55:4f:a6:54:ed:fe:79:c7:54:30:2a:
                    58:56:f9:90:f0:bc:dc:53:ee:67:e2:33:04:be:81:
                    6d:52:ee:07:c4:17:28:ee:0c:4f:ee:51:5f:91:3f:
                    94:57:02:ce:30:3b:12:c3:f9:eb:4a:65:31:c7:4d:
                    6b:a7:ab:c9:78:25:43:40:e7:e5:f8:0e:26:54:a0:
                    21:10:2c:0f:c0:18:54:7f:86:f7:e6:6f:47:47:1c:
                    36:00:d0:46:f7:fe:b4:63:f2:41:db:27:9c:4e:f0:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:A4:A9:D4:DB:05:81:0B:53:0B:90:5F:2B:55:FD:FD:6E:9F:A0
            X509v3 Authority Key Identifier:
                keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:0f:04:6d:75:d0:b7:19:93:70:1a:ce:2b:a4:47:85:14:9f:
         d7:2a:12:7c:bd:b5:19:7a:9f:ca:48:21:f0:dd:97:06:cd:42:
         a4:02:6e:e2:8e:aa:d5:69:c0:cd:3f:49:41:1e:de:73:4d:77:
         ba:3d:87:ac:78:f8:5c:74:b8:d0:98:e1:02:ca:5d:e8:fe:26:
         0e:8c:e4:02:02:03:0d:f4:00:e2:14:9d:1a:53:c7:08:4e:ea:
         61:28:01:2f:c3:71:80:d7:d2:4d:6b:a4:de:63:5a:b9:a0:68:
         89:e1:53:ae:4b:7a:e4:0a:ae:ab:c6:18:09:33:eb:e4:8f:8a:
         e5:d1:75:80:23:a1:f4:bb:b7:0c:0f:20:82:c9:44:37:0c:d6:
         8b:88:3d:24:53:a7:9f:a5:dd:d5:ca:4f:da:48:a9:1a:e4:91:
         80:a5:c9:7d:1a:1e:c5:13:8e:3b:86:ff:bd:b8:bd:ba:f3:28:
         12:e0:24:d2:2b:82:30:35:ad:08:1b:90:7b:cf:f5:f4:b2:f0:
         a5:45:d0:f7:85:7e:7a:8b:f6:59:cc:d7:90:53:e4:26:02:b3:
         b4:29:2e:53:c0:95:25:f3:f8:f7:b5:73:0f:91:21:94:64:e9:
         e1:e1:a3:1b:de:23:29:82:9c:c6:9d:da:73:a5:20:9a:72:01:
         4e:1e:8a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:32 2026 by rpki-client