This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File:                     htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier:          PkXi++0Xx/th3B3Xe4XMafVsQrxNLAPNX3X46mWUGDM=
Subject key identifier:   2E:F6:C9:4C:3C:4C:0A:88:B1:26:55:61:EF:4B:47:EA:7C:B4:84:1A
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer:       /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial:       019BF5756309FFED30E060EFFA23717B4D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number:          0111
Signing time:             Sun 25 Jan 2026 14:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:09 +0000
Files and hashes:         1: AL6_iNyYf5_-8MNJEgieEgNDMIY.roa (hash: 0+d8aJSNzAigR1rPUuhEaaIGr2KsvOX77RXS9BnQQ0E=)
                          2: Ri6eR0hyModJmhU4qRXYfOTF-Qg.roa (hash: vp43LSqg4UfumRnhKAC/q4lMv6KhCs9VlzcPfCyPdH4=)
                          3: SNSZyMcxHfPqzsZovpnv0TS4kEk.roa (hash: 6uX+ryYbLRIBx9RtsjWqz+fa+ZH7FgeP5Ku25N+gV9g=)
                          4: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: FovzMjIcNw2E6W5+mAo7zHEcPjsFs8iAYweZmLgJpGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:63:09:ff:ed:30:e0:60:ef:fa:23:71:7b:4d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d963844f8205d1369434531c998600c15781a1
        Validity
            Not Before: Jan 25 14:01:09 2026 GMT
            Not After : Jan 26 14:01:09 2026 GMT
        Subject: CN=2ef6c94c3c4c0a88b1265561ef4b47ea7cb4841a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:17:a9:42:ea:25:a5:59:29:76:81:43:77:
                    f0:99:38:fc:06:6f:b5:d5:c5:87:ae:c9:7d:d6:da:
                    21:06:c4:40:f1:c2:16:be:03:34:af:15:46:79:58:
                    fb:96:db:ee:10:74:f3:d9:ff:3b:2a:82:e9:83:90:
                    ed:49:45:e2:ed:60:07:ee:33:c0:05:ce:b7:ed:ad:
                    d9:86:45:5d:9c:bc:a9:b0:a7:81:a3:8b:e1:09:b9:
                    0c:1a:09:3c:36:50:1d:b0:7a:30:62:45:0f:8a:a0:
                    5f:14:03:2d:0f:d8:42:ac:d0:65:7b:06:fb:80:3d:
                    23:3a:7a:4f:37:81:14:a9:92:de:8f:57:8f:97:26:
                    d9:c2:de:0f:2e:1d:40:9d:cc:8d:92:4d:6a:6b:fa:
                    d7:17:db:1b:d8:da:0d:53:47:4b:c7:1d:d5:68:18:
                    84:0f:d1:48:f7:6e:4d:c5:5c:21:f8:e0:1a:3b:f3:
                    43:20:75:80:47:59:6a:62:fb:bd:6e:64:c0:ab:88:
                    1d:5d:c6:e5:14:69:bf:f4:de:1b:21:4a:d6:ea:28:
                    f6:8e:ed:e2:66:84:23:17:3e:68:82:72:4b:dd:a3:
                    e5:c9:c9:22:86:ca:06:e5:8f:f8:3c:48:e2:ba:0a:
                    25:1f:e5:2e:ee:82:5e:b7:a4:7b:8d:ca:46:21:d4:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F6:C9:4C:3C:4C:0A:88:B1:26:55:61:EF:4B:47:EA:7C:B4:84:1A
            X509v3 Authority Key Identifier:
                keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:73:d4:a8:81:ec:75:2b:75:bc:4a:c8:8c:31:18:61:ce:
         93:c6:06:92:78:10:3d:99:2f:b6:cb:6d:12:60:51:23:d8:ac:
         b7:93:47:4d:cc:2c:32:c7:46:f2:98:0a:24:c8:68:7d:3c:ed:
         39:78:f3:93:ab:c1:92:65:be:e3:bc:5e:2f:5e:3e:ab:b7:37:
         0a:81:1a:c2:2e:04:4b:aa:93:41:30:79:8b:bc:a9:c8:ff:c4:
         5a:aa:ab:f1:21:12:2e:55:ba:5a:66:da:a3:fc:98:a6:d4:50:
         34:d7:ce:58:a5:df:b6:c8:d6:a7:a8:07:28:3b:3d:54:de:9c:
         e3:e4:11:a3:b0:ae:ad:a8:29:70:7f:ed:25:42:67:41:75:d0:
         bf:3e:ef:a6:cc:a4:36:96:e8:2c:14:5f:77:ae:cd:e2:e3:bc:
         e2:b8:94:4e:8e:e5:01:1c:b7:e0:06:fc:b1:c6:ab:b8:5b:93:
         6a:a5:18:a6:ee:7b:10:ab:b3:66:aa:64:c6:0f:2f:e1:03:36:
         99:e0:b6:29:6d:4d:a8:87:d2:1b:74:f1:ba:d0:65:53:8a:f9:
         b4:ba:5e:c2:0f:50:5a:a4:a5:04:a3:9c:ad:ab:2d:03:34:2e:
         0f:ba:4c:29:ad:38:77:c1:9b:e2:2f:31:fe:b5:03:c9:8d:aa:
         48:0d:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:19 2026 by rpki-client