This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File:                     HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier:          lbdxAOkYYCEX1bttRutmsvGosIe7L8w80X1pBTXkzis=
Subject key identifier:   24:F0:E8:BC:24:7D:4F:A1:58:54:C0:05:41:2F:7C:38:A1:47:32:B6
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer:       /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial:       019BF61A4C84DB1FFFDF8EBB0BD3732F9D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 17:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:17 +0000
Files and hashes:         1: 7_SHifYIXSDLBw6-a-X9w02vEJU.roa (hash: d8U0YjKp3nXs9UZKs93jR65ryJ0Ofo6mrTUHfTrd2BM=)
                          2: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: DpqpQy9ODHwdoB0iVjcqyJbpzEmiL89+aSmpT3oYNOI=)
                          3: Nn3AmufYKGzhOtZ1LYHeCisM7wI.roa (hash: wX5GFGAYdbSiZOjtUJj2pHwvVpEH8eJMt6wcnhxLACs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:4c:84:db:1f:ff:df:8e:bb:0b:d3:73:2f:9d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
        Validity
            Not Before: Jan 25 17:01:17 2026 GMT
            Not After : Jan 26 17:01:17 2026 GMT
        Subject: CN=24f0e8bc247d4fa15854c005412f7c38a14732b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:35:31:97:0f:c7:83:62:92:c2:c5:42:d8:
                    60:04:43:3b:d5:2d:0e:35:45:25:41:9a:bb:06:f8:
                    ca:d3:6e:88:84:6a:32:4c:ce:a0:f5:4e:25:b2:fa:
                    a2:97:1f:d9:c7:54:75:d8:78:dd:fd:e5:60:73:c1:
                    a4:19:2d:6f:94:97:08:99:97:1f:ed:a2:e7:d0:61:
                    9b:a7:6e:15:87:5f:4d:24:13:55:24:89:c8:cd:4d:
                    ad:ee:50:6a:53:d3:5b:dc:93:c6:7a:bb:fc:70:c9:
                    e6:48:6e:61:9c:9f:b9:23:55:7a:e3:8b:09:77:67:
                    3b:cd:f4:a4:c5:d6:28:2f:11:db:ea:07:4d:55:a7:
                    e9:44:71:e1:9a:42:1a:33:44:72:7e:ce:e9:6d:89:
                    a1:fc:8e:b3:2d:08:61:83:54:e7:12:05:c9:2d:21:
                    10:dc:74:51:ca:24:93:fe:be:15:8a:dc:ba:df:71:
                    ee:53:6d:33:a0:bf:b7:c3:42:13:e1:3b:60:55:1a:
                    b6:a5:d9:aa:65:87:6d:8d:6c:02:94:25:de:4d:47:
                    4c:44:ac:41:03:b3:89:c9:06:77:0d:af:88:79:22:
                    55:94:73:a8:a1:23:5c:d1:f1:eb:c3:3f:74:ec:7f:
                    81:5f:02:a2:b5:f4:8f:2a:e2:c1:14:7e:7e:c8:24:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:E8:BC:24:7D:4F:A1:58:54:C0:05:41:2F:7C:38:A1:47:32:B6
            X509v3 Authority Key Identifier:
                keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:4e:c9:ca:ca:ff:24:1c:cb:40:dc:85:1d:d9:e6:cb:a9:
         8d:6c:cf:81:b1:a0:d3:80:2c:db:58:b8:a8:64:49:ee:66:32:
         56:dd:56:59:9e:14:0d:e5:26:37:a4:d9:1a:17:26:ed:25:6a:
         a6:21:63:0c:4b:16:75:ee:9e:7e:1b:f7:f3:7a:89:bb:ef:5d:
         d6:50:ec:22:fc:a4:33:04:26:39:36:33:4a:0c:fc:e8:db:1a:
         33:73:d7:21:34:e6:4a:bd:d5:f0:4d:b2:03:cc:59:3e:82:21:
         d1:07:e8:64:43:fb:96:9e:5b:e7:8e:96:f7:38:88:e3:49:15:
         63:ae:23:56:f7:21:0d:73:25:2c:bf:35:2f:f1:f6:b1:79:f7:
         a5:b1:3f:c4:75:aa:5e:8d:68:ae:23:f3:db:9f:91:63:fc:1a:
         67:de:84:55:d2:40:49:94:ca:40:99:0b:97:b8:4c:7b:f5:4b:
         3d:90:ae:94:2e:bb:1a:24:3a:d9:97:c2:35:55:07:3c:6c:56:
         fa:6c:eb:fb:de:be:22:eb:cb:96:ff:8b:e7:06:37:e2:99:eb:
         4f:ff:38:9c:23:59:6c:fc:2a:a2:89:d5:dc:07:aa:5b:6b:96:
         ad:6f:ea:cc:57:46:9b:6a:f9:91:f5:e3:22:fb:93:5d:73:1d:
         ab:f1:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:51 2026 by rpki-client