This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File:                     HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier:          H+129vjWw7so3jPf7vlieqZpUgW08LEruOIWm/peSZ0=
Subject key identifier:   22:9C:5E:EC:44:A5:99:32:08:94:EA:5A:C6:34:0B:80:4F:43:C7:82
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer:       /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial:       019C41D89AE842888735930D2CB41D7777DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 10:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:40 +0000
Files and hashes:         1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: ysIeNirqbJbXGdchGcgvh1q2RgN/pVQ7zI38xBnEXYQ=)
                          2: s0dYC6-RVRGw5a-WyYT4vShlFiY.roa (hash: f/X4gwVN0rJwSCQpT33krgHJNAGm21o5YhKb8UpMGx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:9a:e8:42:88:87:35:93:0d:2c:b4:1d:77:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
        Validity
            Not Before: Feb  9 10:00:40 2026 GMT
            Not After : Feb 10 10:00:40 2026 GMT
        Subject: CN=229c5eec44a599320894ea5ac6340b804f43c782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:70:96:ea:1b:0d:e6:66:c5:89:1c:7f:6b:
                    69:85:99:6c:69:6f:3f:d4:28:03:60:d2:51:61:c6:
                    5e:2d:44:e1:35:7e:5b:dc:c9:33:15:55:22:7c:63:
                    79:7c:af:d0:a8:99:02:c7:f1:67:a7:4b:3d:17:2f:
                    99:10:e5:b8:e7:6e:b0:17:ce:12:f3:1e:4d:3e:74:
                    26:ec:35:39:80:c6:d4:39:92:99:9e:84:87:00:82:
                    41:85:60:f5:2e:c5:e8:03:e6:c4:e5:81:6d:01:11:
                    cb:aa:19:08:67:14:dd:d5:45:22:b8:9b:79:a8:09:
                    4c:26:d4:b4:57:06:bd:30:a9:8c:db:91:e4:90:44:
                    9c:6f:d1:af:34:86:59:ec:b9:b5:c0:e3:da:a0:3f:
                    6c:b9:a2:a8:a1:d7:f6:2e:6b:bd:55:7c:a9:28:d6:
                    4a:da:56:43:66:72:9d:cd:a5:17:74:3e:ee:3a:f1:
                    4b:89:50:f1:4d:0f:79:1c:63:65:61:69:37:5c:42:
                    36:a8:52:c4:f4:12:6a:fd:ce:7d:81:09:29:81:99:
                    e2:5f:b6:09:e2:99:01:a9:14:83:0e:16:b7:75:c1:
                    b6:5e:ad:d9:d7:00:1c:a0:32:a4:b4:17:fe:5e:14:
                    f2:e4:2e:77:55:a7:56:c6:7b:f9:a1:35:ba:54:40:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9C:5E:EC:44:A5:99:32:08:94:EA:5A:C6:34:0B:80:4F:43:C7:82
            X509v3 Authority Key Identifier:
                keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1e:f9:58:f6:50:9e:a6:10:d0:e4:75:69:60:c7:53:69:13:
         72:36:0c:2b:69:f2:19:72:dc:70:d7:08:43:c3:d9:f8:e5:32:
         91:33:a8:d5:17:26:59:78:18:7e:ec:33:84:b2:fe:fb:42:48:
         6b:16:2f:e2:78:43:21:c3:1f:c3:d9:07:d9:f8:c6:5c:4c:21:
         f3:1d:a8:5f:49:25:cd:39:b9:56:7a:3a:3f:bc:a0:90:2c:d9:
         9e:fc:93:6f:6f:45:07:9b:1b:de:e2:f6:a1:0c:d2:91:37:aa:
         28:1c:c9:63:b4:ac:37:f2:4d:d1:7b:18:16:ce:9e:0a:04:21:
         c4:fa:a8:9b:91:c8:a5:3a:cc:72:30:05:21:bc:5f:e4:60:1c:
         a8:39:ca:52:00:f1:a6:e5:4f:75:74:b6:94:13:aa:d4:c5:65:
         60:f9:37:d9:c3:84:44:3d:cc:b6:4d:39:9f:2e:c4:ac:32:c7:
         ff:18:d7:12:c7:e6:c1:a5:aa:9c:66:b1:23:1d:93:07:d0:af:
         53:08:cb:94:68:03:35:1b:59:c5:2b:aa:36:cc:df:10:99:a9:
         5c:98:72:30:a1:88:b3:e0:d9:a6:56:55:92:48:a7:4a:22:31:
         c2:1f:10:04:dc:21:fc:f3:b5:4c:b1:2e:9a:07:52:73:ed:8a:
         91:f1:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:46 2026 by rpki-client