This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          +3pe/xi/2/ctZUOLJgYDdIZotOZDuYRIY23DEgDYAFI=
Subject key identifier:   07:08:A7:88:E2:67:E3:14:63:C6:8A:0E:DA:93:E1:5F:66:3D:FC:36
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       019BF6BE6B0B11F2796EE8A415610CC40482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          177C
Signing time:             Sun 25 Jan 2026 20:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:32 +0000
Files and hashes:         1: AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa (hash: frjC5Gbfb/b6ellH82d+qc/ADaLtRdBgOt68RftUF/k=)
                          2: e352oEgVriZnYK_AKJa-CWKEICc.roa (hash: U/aIt3PG8wiAKdOrpvdQvx37nl+6JO2D4S8tDrL+hpc=)
                          3: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: n2KEG/M6e0dP58x99pUzGCMmOgDa/9JC3h+jAPI9+b8=)
                          4: oRy8UxR8Vc3XM-6AZCofxXbESbU.roa (hash: OxE0g4307Lmb3G4tCr6jdPxniZZCP8iXtLRIdgc9vMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:6b:0b:11:f2:79:6e:e8:a4:15:61:0c:c4:04:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Jan 25 20:00:32 2026 GMT
            Not After : Jan 26 20:00:32 2026 GMT
        Subject: CN=0708a788e267e31463c68a0eda93e15f663dfc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:65:f4:f5:09:e7:e6:61:26:f3:d4:12:cc:
                    62:ff:5e:8f:12:97:04:0a:37:ee:92:c6:19:3d:c7:
                    65:16:95:f4:ae:a6:7b:bb:8d:e3:de:aa:f0:39:ba:
                    57:5c:39:e9:7f:4a:5f:25:ec:ed:dd:f9:73:46:9e:
                    ce:8c:29:89:8d:00:55:88:be:84:8e:be:61:64:55:
                    9e:73:6b:33:0d:4a:1f:d6:ca:f1:90:ca:7f:a5:8b:
                    a8:8d:0c:fa:35:0d:39:45:f2:42:50:e2:2c:4e:53:
                    11:bf:38:33:aa:75:6b:64:22:f6:45:0f:20:df:f3:
                    18:ad:28:53:c8:d1:d7:18:a1:19:d8:c3:cc:45:88:
                    e0:a7:b1:28:79:94:db:ec:58:8b:9f:42:0d:2f:09:
                    f3:f2:b6:27:6b:5c:a5:0d:c9:84:24:af:13:86:43:
                    66:4c:01:94:a7:3b:ec:ff:d1:21:90:43:6c:84:35:
                    02:91:86:5c:9b:d8:dd:bd:56:14:e5:fa:0d:6b:e8:
                    a4:5b:0a:e5:e3:4f:b1:b5:c8:3b:e2:51:7d:7f:75:
                    28:27:03:fb:74:6c:f7:86:e2:55:f4:72:8f:bd:65:
                    d0:f6:54:64:ce:8e:56:e9:76:ae:5b:8a:67:59:28:
                    f7:8c:57:ce:ff:dd:85:33:dc:be:6e:0f:a2:a2:18:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:08:A7:88:E2:67:E3:14:63:C6:8A:0E:DA:93:E1:5F:66:3D:FC:36
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:ba:07:4a:8a:1c:78:fb:07:1e:d0:e0:66:4d:bd:cb:80:
         3a:f5:da:7c:15:37:b6:c8:bf:03:19:75:46:cc:5d:a3:48:9c:
         04:5a:1a:2a:83:c5:f3:d5:d5:64:ba:22:95:f1:4f:c7:fa:05:
         9f:11:c9:01:fc:8d:1f:48:f6:e4:8d:76:6d:c4:26:5e:1c:82:
         65:e2:1c:b4:f0:c4:14:30:6c:4c:f5:49:35:52:7b:37:e4:6d:
         dc:b6:4b:61:1b:39:05:1e:4e:8d:d6:1d:50:bb:68:c6:19:e6:
         9d:e1:7d:10:fd:83:52:07:db:cb:71:af:7c:b7:9a:14:03:22:
         35:66:d5:f8:68:be:c6:84:99:66:22:aa:c8:92:42:c1:73:54:
         6b:97:49:eb:21:84:1b:8d:ea:a4:05:50:3d:d5:21:c7:8d:64:
         32:64:d2:9b:4a:09:02:c5:25:bd:1c:49:a1:44:62:13:e1:a8:
         bd:0f:82:ec:78:58:cc:51:45:30:37:e3:bc:5a:09:7a:cd:07:
         48:27:8e:9b:21:ae:68:12:11:bd:58:b5:4d:2c:dc:ac:a5:b6:
         34:74:db:a3:56:e1:8d:ba:5d:2c:7a:27:a2:66:b6:68:38:13:
         46:e1:e5:87:fa:5f:1d:8c:73:0c:18:f2:52:c0:c9:9d:11:58:
         31:e7:d6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:37:00 2026 by rpki-client