This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File:                     HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier:          XBi1GmX0H8JqinQ190DdXpsDmkti/F/2eQtu79YFLsU=
Subject key identifier:   2A:1F:AF:C7:D8:84:C6:38:6F:D5:D0:05:C0:DC:11:0F:9A:17:A4:B7
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer:       /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial:       019BF91B9C4BF6D2340E6B0F868972E31860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number:          14FE
Signing time:             Mon 26 Jan 2026 07:01:34 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:34 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:34 +0000
Files and hashes:         1: 8xW6dotWOxBryiPnauuCXj7XuSI.roa (hash: zASgDwULaWpUbCGZvnjqbpSShkEykQFL5DbnV3AjxvA=)
                          2: BDqHlt60SCUsG6m1jsuhJtjmd-g.roa (hash: qc0DKSPVeA1IXC/yas0jKMH1maqSIbQPdur6MCx7sBE=)
                          3: ESQujN5DaULTkC6C6ybAQLdooUw.roa (hash: kGih2+U+odRcMpkYTKXLRUpY39oIhEjGgAU5Suq/FjE=)
                          4: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: 3u8YUI2vn9Kh0DCodYHLiJ1UXbmrpHFPhvdM4C7BwBs=)
                          5: ildw3tILs1YrpiPAvq5bormvWus.roa (hash: nYL+q1yIdnOpPJg9O379dSvVK6bZxwMeUsl/+CqVtBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:9c:4b:f6:d2:34:0e:6b:0f:86:89:72:e3:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
        Validity
            Not Before: Jan 26 07:01:34 2026 GMT
            Not After : Jan 27 07:01:34 2026 GMT
        Subject: CN=2a1fafc7d884c6386fd5d005c0dc110f9a17a4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:72:10:24:d2:62:c1:87:36:9e:8e:4f:1d:
                    7e:b0:7c:83:78:ad:94:a6:cf:aa:7e:69:68:75:2b:
                    48:a6:a5:80:6f:29:cb:05:24:79:cf:af:4d:a3:a3:
                    07:6f:2a:85:fc:05:30:b7:83:57:57:53:12:57:47:
                    dc:ff:fe:57:ef:87:b3:1b:ad:25:dc:d0:07:b2:f7:
                    6f:3b:65:51:3c:61:64:c4:af:04:1e:06:6b:62:ca:
                    d6:b3:a5:e2:c5:02:2b:f5:56:f9:1e:18:49:16:df:
                    75:96:d6:65:93:ed:f6:a1:3b:2b:2f:ee:69:c9:f7:
                    c8:39:53:b1:82:78:48:60:fb:19:95:38:bc:4c:95:
                    90:80:78:b9:db:44:3d:7b:9d:67:69:55:04:ea:b2:
                    c9:69:bd:0a:0b:e7:dc:09:b1:7d:4b:1d:a9:4a:13:
                    d4:b4:ed:16:e0:4d:4c:be:05:77:e7:8a:74:32:6b:
                    55:bf:9f:f6:32:a7:eb:49:8e:23:ce:98:27:53:6c:
                    31:2d:22:f5:f7:c4:6e:b4:b9:81:4f:40:08:3e:2b:
                    eb:00:09:18:c1:c5:5e:04:d2:5f:e6:e3:31:39:6d:
                    3b:e7:4f:a9:f4:94:7d:1d:ac:6f:d3:a8:b0:bd:a7:
                    00:29:ac:96:46:39:f6:e2:fb:33:31:f7:2c:a2:22:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1F:AF:C7:D8:84:C6:38:6F:D5:D0:05:C0:DC:11:0F:9A:17:A4:B7
            X509v3 Authority Key Identifier:
                keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:32:06:1a:00:47:4b:2d:b9:ee:26:b2:63:59:b0:97:03:
         5d:2e:61:9c:48:a7:df:e9:01:15:61:ef:56:74:cd:dc:3f:4f:
         fe:9c:4c:83:50:07:ca:af:74:43:fb:d7:95:eb:5b:38:49:3a:
         9e:37:f8:d6:43:3b:5c:7e:ca:15:9b:58:9e:cb:20:06:65:47:
         c3:96:71:48:b4:07:99:e8:ba:2c:48:0a:99:b4:a3:87:95:c1:
         f4:b7:db:f2:85:4e:39:ca:b2:e0:d2:83:06:f2:7c:f4:b8:63:
         84:8d:02:de:3f:5d:16:8e:51:61:16:da:a4:65:cf:2a:be:1a:
         8b:b7:6b:69:68:46:cc:5e:ed:d6:c1:06:f6:85:01:fd:31:a7:
         4d:b8:8d:8b:f4:49:9b:60:28:21:4f:e3:e4:e9:58:39:d8:fd:
         38:fb:67:71:f7:5e:30:f3:ed:fb:ba:e8:86:9b:82:cf:a6:10:
         46:74:b5:be:ca:b2:49:68:68:d3:cc:ca:bb:93:79:b7:b3:90:
         24:d8:30:94:13:0b:ad:61:2b:7f:d5:21:e4:f6:fe:f4:d4:e2:
         d5:d8:a2:ee:77:00:b3:13:e5:64:ba:97:98:42:fd:8d:bc:ba:
         8c:a6:23:73:34:ef:d1:e5:7a:08:65:2f:9f:7e:3d:ef:f2:63:
         15:4a:3d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:12 2026 by rpki-client