This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File:                     1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier:          ge+oIiO+v5GGXzYc+3Nbk9OtNjo/koTTsRqvFglEIlE=
Subject key identifier:   F9:A0:8E:B9:6C:10:BC:A2:C0:A1:9F:AA:8F:37:70:3C:3A:42:B5:B9
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer:       /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial:       019BF2AB65B54BC211AE92B1EF8249EFA672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number:          1587
Signing time:             Sun 25 Jan 2026 01:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 01:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 01:01:17 +0000
Files and hashes:         1: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: 3VxSj/FZkYh/Ok33AreE3aFT/x0kqcaVEyZeRkK6eAk=)
                          2: PUUwIBjC303THXtn2K3lOKUKhuI.roa (hash: HhMLqxayKaNmF7vR/Oe2S/c5VG2M+qGYz3fgytaRJ/8=)
                          3: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (hash: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:ab:65:b5:4b:c2:11:ae:92:b1:ef:82:49:ef:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
        Validity
            Not Before: Jan 25 01:01:17 2026 GMT
            Not After : Jan 26 01:01:17 2026 GMT
        Subject: CN=f9a08eb96c10bca2c0a19faa8f37703c3a42b5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:a7:00:1d:49:d5:dc:cd:50:bc:38:64:34:
                    e7:6f:02:c8:c6:ae:53:91:d4:7c:10:48:d8:6b:5a:
                    d7:28:ed:4b:e4:5e:15:9c:21:83:1f:56:f5:58:f2:
                    66:d8:6a:3f:d3:d0:d4:63:20:07:ee:34:65:fd:e7:
                    d1:cd:1d:8e:fb:b8:a2:d1:66:a3:04:2f:c7:71:d4:
                    5c:c1:5c:78:77:f2:0a:1d:39:61:ce:5d:ab:e1:e3:
                    9b:cc:ac:f1:9a:8d:39:f7:8e:a2:b3:b8:b7:69:db:
                    f4:78:28:89:9d:82:6e:e6:d8:07:f8:da:73:1f:25:
                    af:09:eb:ce:90:33:9d:36:a0:3c:1e:db:a5:66:ce:
                    d0:85:0d:bb:08:a5:ad:18:b3:2f:7b:b2:68:b1:b2:
                    a1:6b:d2:31:fb:82:2d:f9:70:f9:65:91:6d:39:27:
                    01:18:c5:4f:bd:c9:5a:30:35:cd:1c:ae:78:85:1b:
                    8c:94:81:ec:36:1c:6f:ac:cb:29:09:af:ef:8b:f3:
                    26:a7:ec:ab:52:29:df:5d:3c:c2:0e:d2:d5:39:c2:
                    88:fc:3a:ab:b6:2a:e2:45:73:5e:37:9b:6e:3f:fd:
                    17:e7:ac:ac:20:1d:2f:c4:15:09:d8:85:0c:78:7b:
                    8f:c0:c4:3e:69:d3:e6:9b:f3:a6:f5:96:ce:a5:c3:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A0:8E:B9:6C:10:BC:A2:C0:A1:9F:AA:8F:37:70:3C:3A:42:B5:B9
            X509v3 Authority Key Identifier:
                keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9d:21:97:b9:73:0c:e4:c9:3b:46:00:f2:e4:72:f2:8f:f3:
         25:21:60:e5:6f:02:e9:af:e4:71:c1:74:18:54:d1:94:5d:d9:
         e2:e4:a0:28:41:e3:93:50:66:8e:15:29:0d:01:b7:77:1e:e2:
         29:35:63:f3:49:2e:3e:4c:e3:20:aa:b3:81:55:62:92:01:a4:
         82:e2:ef:9b:63:be:50:9f:cf:a4:a2:43:06:35:e5:bb:33:4a:
         03:97:24:f8:7a:76:50:15:e4:d1:dd:ac:23:b8:92:47:72:86:
         a5:c0:86:b4:ae:5e:e0:e7:9f:da:31:f2:ab:fc:3f:50:4f:f5:
         d3:6d:57:9b:e4:0d:86:0b:f8:55:b7:a0:5d:ff:b3:c7:dd:da:
         29:d2:cc:e6:92:99:ef:c1:16:cb:2c:0f:58:30:71:3e:59:02:
         bb:2a:dd:82:58:6c:b2:41:f7:23:ad:57:d5:91:47:a2:17:74:
         fa:1e:9d:27:2a:33:4b:f3:c8:74:2a:ac:91:96:2e:4c:a9:e8:
         56:73:79:4e:f1:20:98:f2:2b:a1:2c:e3:81:3e:31:f4:ac:ad:
         5c:72:c5:a6:78:54:98:c7:1b:7e:97:30:40:b2:b6:a9:35:d3:
         fd:32:93:59:31:e4:31:99:25:58:07:4d:36:77:04:70:80:74:
         88:97:4e:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyq2W1S8IRrpKx74JJ76ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzZiMDA2MzUxYTJmOWNmMmE5MTM4NmRlNTBjZTI3ZjE1
NTA1OTUwHhcNMjYwMTI1MDEwMTE3WhcNMjYwMTI2MDEwMTE3WjAzMTEwLwYDVQQD
EyhmOWEwOGViOTZjMTBiY2EyYzBhMTlmYWE4ZjM3NzAzYzNhNDJiNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl+nAB1J1dzNULw4ZDTnbwLIxq5T
kdR8EEjYa1rXKO1L5F4VnCGDH1b1WPJm2Go/09DUYyAH7jRl/efRzR2O+7ii0Waj
BC/HcdRcwVx4d/IKHTlhzl2r4eObzKzxmo05946is7i3adv0eCiJnYJu5tgH+Npz
HyWvCevOkDOdNqA8HtulZs7QhQ27CKWtGLMve7JosbKha9Ix+4It+XD5ZZFtOScB
GMVPvclaMDXNHK54hRuMlIHsNhxvrMspCa/vi/Mmp+yrUinfXTzCDtLVOcKI/Dqr
tiriRXNeN5tuP/0X56ysIB0vxBUJ2IUMeHuPwMQ+adPmm/Om9ZbOpcMjMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmgjrlsELyiwKGfqo83cDw6QrW5MB8GA1UdIwQY
MBaAFNR2sAY1Gi+c8qkTht5QzifxVQWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjIwN2YtN2UzNC00MjkyLWIxNGEt
NDRjMDdmMzE0OTA0LzEvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80NjIwN2YtN2UzNC00MjkyLWIxNGEtNDRjMDdmMzE0OTA0
LzEvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ50hl7lz
DOTJO0YA8uRy8o/zJSFg5W8C6a/kccF0GFTRlF3Z4uSgKEHjk1BmjhUpDQG3dx7i
KTVj80kuPkzjIKqzgVVikgGkguLvm2O+UJ/PpKJDBjXluzNKA5ck+Hp2UBXk0d2s
I7iSR3KGpcCGtK5e4Oef2jHyq/w/UE/1021Xm+QNhgv4VbegXf+zx93aKdLM5pKZ
78EWyywPWDBxPlkCuyrdglhsskH3I61X1ZFHohd0+h6dJyozS/PIdCqskZYuTKno
VnN5TvEgmPIroSzjgT4x9KytXHLFpnhUmMcbfpcwQLK2qTXT/TKTWTHkMZklWAdN
NncEcIB0iJdOSg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:06:02 2026 by rpki-client