This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File:                     HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier:          A/dKuN5rLPlrg4QWSszTHgdLnyTYFuiag4I2GItWYK0=
Subject key identifier:   9D:D7:9A:60:3E:23:8C:C3:B2:0E:8E:00:A9:63:14:B1:22:79:0A:12
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer:       /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial:       019BF57521F4F1181C3F4E90D41B91AA4889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 14:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:52 +0000
Files and hashes:         1: 2JoxROCbPOHF6KtlD6vldAqTqX8.roa (hash: MYXtE2R+wBxrZPPj12Dpe+/LA+TCHl7zhSDFEOIzwnQ=)
                          2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: Gifi8aYaOFw6G9GFq3rS0Pc+VcSSZe9FlluU+3fIYDw=)
                          3: hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa (hash: +6qNvM+Po303423yisqL4uil5GDRIr4RzBGe2Izpxbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:21:f4:f1:18:1c:3f:4e:90:d4:1b:91:aa:48:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
        Validity
            Not Before: Jan 25 14:00:52 2026 GMT
            Not After : Jan 26 14:00:52 2026 GMT
        Subject: CN=9dd79a603e238cc3b20e8e00a96314b122790a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:e8:52:27:c8:fa:29:62:81:bd:0c:7e:94:
                    a3:f9:62:f7:d5:89:22:a3:69:8c:f8:e9:ba:46:cb:
                    af:c7:d5:5a:b4:c4:fe:97:21:3d:2c:3d:49:06:62:
                    90:e4:23:1b:22:9e:c4:54:55:ba:f7:e3:e1:06:34:
                    e7:1b:bf:2d:15:ea:cf:b5:aa:25:19:8b:69:f3:f3:
                    80:a3:43:fa:ed:69:e3:e5:d2:7c:8e:b6:04:3f:e1:
                    27:a3:82:2b:cc:01:91:68:c8:f9:6c:19:4a:59:e1:
                    fc:b8:d0:f7:93:60:5c:ac:59:22:60:d6:a1:ed:cf:
                    9d:21:6f:32:85:55:9b:71:e4:9f:aa:28:07:b0:9f:
                    72:e1:02:cb:76:a9:8f:de:01:8f:41:7b:85:19:b6:
                    91:ec:79:b2:11:ed:d9:4b:91:11:3e:7c:ed:f7:c9:
                    5f:61:74:4e:80:43:56:c4:02:9a:d6:cb:a2:2e:33:
                    b9:18:b6:63:a0:49:ac:c0:d7:34:00:77:e5:60:2f:
                    6e:c5:dd:a9:5b:a7:a5:7d:fb:26:b5:47:65:57:01:
                    f4:38:17:84:85:14:bd:ef:9a:68:77:e9:6a:25:f4:
                    05:ab:ff:ae:b6:62:77:ba:02:f5:33:1a:eb:57:9c:
                    2e:fd:81:52:b8:f6:a8:2e:95:54:2d:b5:1e:5e:0c:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:9A:60:3E:23:8C:C3:B2:0E:8E:00:A9:63:14:B1:22:79:0A:12
            X509v3 Authority Key Identifier:
                keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:eb:1d:8c:10:34:f6:ed:4c:f6:11:38:25:b0:4f:ae:cb:
         a9:b5:ba:f3:25:e3:36:0c:ee:d3:44:ec:cb:f7:05:4f:05:d5:
         bf:50:26:40:52:06:65:75:8f:5e:78:3b:63:04:ea:b0:8b:6f:
         6e:f2:63:e6:e7:96:5d:ca:8f:6f:f0:a9:82:0e:00:14:0d:5f:
         85:92:c0:4d:c4:9b:e8:52:ee:9d:2b:c0:85:fe:5b:c4:0f:01:
         44:77:3f:9c:ce:f5:0d:16:16:cd:c7:70:88:a1:2b:51:de:4d:
         61:78:4a:68:96:89:53:fc:ec:99:d8:f3:67:35:45:f1:33:cc:
         d6:6d:c3:e9:52:48:85:03:4e:af:24:e8:f7:15:43:b9:de:71:
         ac:78:15:ce:66:3f:b2:40:c3:1a:6d:08:d8:ed:68:1d:00:05:
         c1:d0:f7:17:67:27:c8:14:3d:fa:60:ac:a2:6f:0c:67:39:1f:
         cd:98:ee:de:cb:88:92:d3:90:ac:3f:ac:bf:8d:25:09:71:86:
         5a:80:be:a6:2b:18:87:f0:8c:ee:b5:6c:62:97:03:19:af:d3:
         34:f7:db:f6:53:62:22:23:34:44:89:02:32:56:e6:0f:90:33:
         97:c0:77:81:c9:1a:08:b6:10:36:57:f9:27:39:b6:30:12:80:
         d4:26:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:37 2026 by rpki-client