This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
File:                     hDvoY59AOZk8H254efRynkfcN64.mft (raw, json)
Hash identifier:          8LBRDa3errEHWjwFskYp+tdNoUfYPg/Qm3+IqfhuCho=
Subject key identifier:   A4:90:8E:A8:AB:5F:B0:92:AB:65:0B:62:C7:6E:47:FB:DF:2D:24:42
Authority key identifier: 84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE
Certificate issuer:       /CN=843be8639f4039993c1f6e7879f4729e47dc37ae
Certificate serial:       019C4358C37F49583A46ACBC14ECF8780D4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
Manifest number:          0A25
Signing time:             Mon 09 Feb 2026 17:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:16 +0000
Files and hashes:         1: 08llQ74BuBaNWqT4Y7FAkII-DJw.roa (hash: pxdI4iXE9K/M2+2A8OZhCl+4882oOXHYqUhqvnxntUE=)
                          2: hDvoY59AOZk8H254efRynkfcN64.crl (hash: 8uCpResiC61KLYpNtTVTfWIbpnBVqF4StMfSqRwLmJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:c3:7f:49:58:3a:46:ac:bc:14:ec:f8:78:0d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843be8639f4039993c1f6e7879f4729e47dc37ae
        Validity
            Not Before: Feb  9 17:00:16 2026 GMT
            Not After : Feb 10 17:00:16 2026 GMT
        Subject: CN=a4908ea8ab5fb092ab650b62c76e47fbdf2d2442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:b5:b4:8f:e5:25:fb:d2:f7:7f:0f:c5:b1:
                    c2:a3:0f:e1:5f:83:d4:a0:9b:05:25:24:4f:f1:4e:
                    e5:bf:40:e3:e9:81:e7:3b:d9:b1:bf:7f:59:37:4c:
                    d9:b1:ac:5c:7f:b8:3e:04:70:3e:79:62:ab:26:6a:
                    d6:f7:dc:0e:f8:65:5f:9d:88:6a:4f:4f:45:15:59:
                    7d:d8:83:43:34:7a:35:4a:bc:04:94:20:07:48:8c:
                    f8:8b:2b:f9:0b:48:f8:0f:e9:6e:bf:2b:15:b9:bb:
                    cb:64:03:7f:ff:c3:58:c9:fa:9c:80:67:d3:c2:c1:
                    19:c4:78:49:dd:f9:20:db:3a:df:94:ed:36:fd:b3:
                    b3:eb:4a:b8:a8:18:46:ba:1b:e8:4a:7f:81:ff:af:
                    41:01:de:86:74:53:45:1c:a5:02:72:5a:ab:b2:ef:
                    12:cb:a9:d7:6f:94:4d:9a:a0:3b:b5:42:f4:ef:a9:
                    8f:41:57:f9:dd:26:0a:e1:04:3a:49:95:08:ca:72:
                    48:4e:17:6a:d2:54:46:0e:97:df:21:be:cc:1f:96:
                    db:fa:98:73:42:70:89:cb:1a:8d:27:29:a9:df:60:
                    b4:1d:31:d6:f7:f9:b1:15:b9:fa:85:7a:4d:52:af:
                    19:54:37:c5:91:2f:e9:0a:a0:f7:00:54:dc:9c:50:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:8E:A8:AB:5F:B0:92:AB:65:0B:62:C7:6E:47:FB:DF:2D:24:42
            X509v3 Authority Key Identifier:
                keyid:84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0b:42:2e:42:21:31:cc:8b:04:44:5a:6a:e2:2d:18:fc:1e:
         04:e4:58:43:3f:50:11:b4:ac:7b:12:8b:9b:81:0a:42:ba:52:
         c5:17:3c:56:d3:68:3a:eb:ca:b1:41:6f:65:9e:e8:52:5f:eb:
         6f:28:11:73:fe:05:3d:15:60:5a:68:4a:5b:1f:1f:1f:db:98:
         62:05:bd:54:25:b7:82:eb:d4:1c:0b:33:46:a3:40:a3:81:eb:
         09:99:c2:1d:e8:47:cd:cf:ce:fa:1c:d0:66:85:cb:f9:9b:27:
         be:26:e1:a1:82:f7:ea:1b:c3:2c:a7:30:d4:94:9e:e4:43:13:
         a5:1c:cd:9f:65:4e:6e:15:23:61:5c:42:8c:8b:a1:2e:2b:2b:
         9a:b3:e2:9e:c8:9f:bb:65:52:f9:f9:6c:0c:fd:6f:e0:43:25:
         ad:12:9f:53:f0:77:6a:c7:46:77:92:40:52:cf:99:dc:e1:73:
         62:45:92:fc:45:17:01:40:48:2c:32:08:0b:a1:08:5a:b3:c1:
         2d:77:89:38:c5:29:2d:52:e7:eb:38:e4:0d:ef:60:a5:d7:d1:
         d8:46:f0:ca:65:a0:de:8a:5b:1e:d9:6d:6a:da:54:ff:ef:72:
         01:ae:cd:0e:be:10:a4:54:7d:4d:98:ea:a6:64:6a:b1:01:fb:
         e6:6b:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:07 2026 by rpki-client