This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File:                     hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier:          HEs9/SAd/ItelaLj2c99h4g/PKLvWC5rXsiWlkY+uOc=
Subject key identifier:   BF:C1:29:E1:E3:7B:44:15:EC:7E:59:BD:4F:C5:B1:02:F3:BB:1A:BA
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer:       /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial:       019BF6517A287553C80CF4E18F086B127E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number:          1492
Signing time:             Sun 25 Jan 2026 18:01:33 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:33 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:33 +0000
Files and hashes:         1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
                          2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: NJ3QdGKwt8/hDPAptpPGmXEtZ35pzxRwCYrdQziaMdk=)
                          3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:7a:28:75:53:c8:0c:f4:e1:8f:08:6b:12:7e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
        Validity
            Not Before: Jan 25 18:01:33 2026 GMT
            Not After : Jan 26 18:01:33 2026 GMT
        Subject: CN=bfc129e1e37b4415ec7e59bd4fc5b102f3bb1aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:cb:ea:72:40:16:29:d9:9d:35:e7:29:15:
                    0e:7d:96:c0:25:ca:15:ff:46:27:c4:41:3f:f4:f5:
                    7b:b6:9b:81:e3:15:08:35:46:5e:3b:7d:5b:5d:0d:
                    c8:90:3d:86:09:0a:36:4d:9c:a2:5a:52:67:ca:87:
                    94:30:6e:8c:06:6d:ac:82:82:69:1a:0c:cd:f3:01:
                    16:1c:18:e2:af:69:80:a5:0b:57:db:ca:65:10:c4:
                    46:9e:9e:b9:78:d6:b4:64:5c:0e:88:64:ea:05:cb:
                    19:96:03:12:8c:17:d4:33:0c:fd:f4:4b:f3:e1:59:
                    38:70:85:3d:77:89:9f:de:7f:c6:40:c2:2e:86:a6:
                    16:80:3c:7e:74:6e:2a:c9:0e:bf:db:26:03:7f:6a:
                    9c:b9:56:cd:30:f7:21:f7:00:b1:6a:25:2f:f0:83:
                    2a:e0:9d:f2:65:8b:cb:cc:76:8f:43:78:86:5f:2d:
                    53:c1:ba:a1:94:14:ce:71:df:a4:c6:d1:69:eb:ea:
                    1d:0a:bc:53:7b:6b:d4:8d:59:11:ce:92:7f:8c:80:
                    78:05:da:86:f6:f8:74:da:6c:2e:7a:da:c5:5d:59:
                    4b:ac:41:20:24:a8:4d:21:cf:5a:d8:36:79:48:e7:
                    92:cc:ab:cd:d3:19:5e:d3:da:9b:6f:cd:41:fe:1a:
                    fe:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C1:29:E1:E3:7B:44:15:EC:7E:59:BD:4F:C5:B1:02:F3:BB:1A:BA
            X509v3 Authority Key Identifier:
                keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:08:95:83:cb:0c:74:97:61:4b:f4:e7:ac:8a:e7:cc:4d:db:
         af:ad:65:8c:10:56:67:95:51:a8:d0:46:a6:6c:de:d6:10:0c:
         1b:d6:6a:1b:d6:d1:82:95:26:70:6f:bc:cb:7d:d4:bc:92:67:
         36:47:06:87:ca:ea:23:09:cf:e0:42:f4:4f:46:48:cc:73:5f:
         d8:9b:1e:61:7f:1e:11:0f:49:5a:c5:6b:f4:36:f7:53:4a:2f:
         81:73:44:bb:c2:4f:69:1a:13:a4:ad:01:19:b2:d5:0d:f6:08:
         fa:be:ad:7d:9d:32:37:d7:c4:0e:a9:91:d4:a9:3f:a7:6e:0e:
         d5:5b:36:ab:f2:6a:c5:e1:23:87:e4:1d:6d:b0:27:d1:6d:09:
         0c:9b:d9:d6:64:b8:c3:71:a5:15:17:a3:4e:e0:f5:42:46:47:
         54:68:5f:88:84:14:22:54:4d:6e:c6:b0:69:06:2f:cb:c8:ec:
         f2:b9:5d:a5:21:90:b6:0a:1f:40:c3:52:05:9a:12:eb:14:30:
         75:17:66:96:66:01:68:60:7e:83:44:35:57:ed:13:8a:83:6b:
         f7:bf:7e:a6:7c:58:14:c8:17:b7:c3:4a:f3:18:48:45:b8:3d:
         d1:eb:ec:3c:d8:56:c0:65:1f:a4:91:7a:f9:49:e1:67:83:90:
         e2:f0:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:54:20 2026 by rpki-client