This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File:                     h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier:          Ny3RodCy30nicWnyYYhUNdmfG9fFsP6K0/uo8prV8og=
Subject key identifier:   94:CE:6D:11:81:98:A9:36:F7:9A:37:15:50:45:48:5E:B8:9B:F9:0C
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer:       /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial:       019BF83F1F52BA7AE5A0760BC503A23634BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number:          177D
Signing time:             Mon 26 Jan 2026 03:00:44 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:44 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:44 +0000
Files and hashes:         1: GeANBlc9szsh5X_dzXvwntyH33k.roa (hash: NtbXfKjFVCT4X+tyOUkrVXVVHjr7y8q2zKhpArvxwTk=)
                          2: XBuxFynVvxh8UiT_tJkPmhYk_oA.roa (hash: +W6/Wvk2I7PSxm+f/mLqDUSHpVa25RlpWluuWkH/7C8=)
                          3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: qw0HIetNLxVDCUd80PM/59Re8ExD9wil2eOsQVuzSio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:1f:52:ba:7a:e5:a0:76:0b:c5:03:a2:36:34:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
        Validity
            Not Before: Jan 26 03:00:44 2026 GMT
            Not After : Jan 27 03:00:44 2026 GMT
        Subject: CN=94ce6d118198a936f79a37155045485eb89bf90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:05:08:d5:49:6f:a5:dc:30:97:4e:f0:65:
                    c1:34:f4:5c:4e:12:2c:34:a0:78:83:35:54:25:49:
                    b7:96:8e:34:b5:6c:e1:86:78:97:97:d9:ef:4e:bd:
                    5a:ff:d1:c5:5c:e8:97:90:09:f3:10:b9:4d:df:bf:
                    fb:69:4e:e0:d8:63:5a:4c:7a:b7:49:ec:8b:17:0f:
                    d5:51:b4:65:77:41:56:a7:7f:18:8c:2c:32:03:87:
                    12:07:98:bf:99:9c:39:f4:b8:bb:43:9e:73:22:d0:
                    cb:f3:a0:a0:3e:c7:ac:81:fd:c1:26:84:9d:f6:1b:
                    92:97:f1:c1:d0:5a:57:20:57:77:d1:43:5b:16:ed:
                    ab:f5:59:85:20:8f:5e:86:2f:0b:a7:5a:1f:e2:e4:
                    ae:a2:3d:70:f9:2b:72:fa:21:33:be:ea:6c:f2:6d:
                    31:7b:21:39:e9:db:72:a2:ff:68:8f:ee:90:3f:c7:
                    f6:cc:32:c7:7a:d0:38:52:93:6b:8d:0a:26:a9:66:
                    2d:84:e9:90:d0:bc:68:05:17:7f:f3:98:48:56:f5:
                    cc:7e:3e:ce:ae:94:3b:72:0b:c0:df:bd:0d:3f:d0:
                    f5:cf:81:ef:59:23:d3:a3:8e:52:ec:c1:e6:57:9f:
                    cb:bf:85:11:3f:75:89:ee:ae:75:71:46:bc:2e:74:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CE:6D:11:81:98:A9:36:F7:9A:37:15:50:45:48:5E:B8:9B:F9:0C
            X509v3 Authority Key Identifier:
                keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:03:ef:39:cb:3b:85:d5:53:ab:8d:db:6c:ab:ea:6e:a5:
         75:7d:be:40:a6:01:94:77:a7:66:df:b0:8e:36:1c:df:cc:fd:
         63:43:ec:e8:14:30:bc:68:22:9f:cd:1e:4f:3d:22:80:cf:1b:
         46:fa:c6:9a:5e:bf:16:d9:3e:6f:ad:36:2d:33:78:a9:c6:50:
         ea:ce:b5:6c:7f:00:c9:02:15:86:be:b2:bc:3c:d3:10:a8:ff:
         98:13:eb:4e:ca:36:5a:e9:e7:7b:45:ef:d2:37:21:75:8b:f9:
         eb:4c:bb:a7:6d:4b:ea:83:6e:01:15:24:46:9d:98:bd:8e:8f:
         d9:55:f1:2d:b7:3a:94:31:d1:ad:6e:24:c6:ab:e3:ee:00:34:
         cc:5b:df:0b:39:de:42:cb:f2:ed:e4:27:52:d5:6f:9e:82:a9:
         0f:3a:9d:18:b4:d5:19:57:23:85:d3:66:70:67:63:98:95:37:
         8b:2c:f6:7b:0c:c7:59:c0:87:ff:a4:bb:ba:09:ee:71:fa:98:
         b5:e3:35:ae:e6:36:28:38:87:23:32:24:fc:44:b9:c7:ad:b7:
         eb:ba:e7:6c:90:07:1b:37:65:b3:11:e0:4c:56:1e:24:db:ff:
         1d:7f:71:97:d4:5c:ae:cd:b8:fc:e3:e0:36:15:3e:30:a5:27:
         ec:1a:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:24:09 2026 by rpki-client