This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File:                     HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier:          Z2Q0HjVP7FV/e+BwGvnjREPr9+LqWkj5/yB9UELx+bQ=
Subject key identifier:   84:53:4C:A6:8B:6D:13:CC:21:C3:40:8B:D8:F7:67:59:EB:9B:1A:4F
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer:       /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial:       019BF4627237547A8095CA0742788FEC7F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 09:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:50 +0000
Files and hashes:         1: 1aorfBEtrS5GmOfmJCAhL86Ev9o.roa (hash: nVeN0o0LJkNxID8TEKJoSJ7nvDwzMLsmkaxY6SDeSaE=)
                          2: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: bWPQ7ffYL+h0kxk6n6qTWmpsd1dBC7oj6uOIx//qRDM=)
                          3: iuImAg4mIu7cmFaP-tCFJQiPIK4.roa (hash: wW1K/UcoLMZnuH4bQB2tjq8tIUvTcVi7eaR2lcNxUuM=)
                          4: yc6fB0dTyEp0nOMNxIt14wYewvg.roa (hash: q9oC20lhVIuMqPVEpkCEXpIKxa5TMW49W8VfYHcjYb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:72:37:54:7a:80:95:ca:07:42:78:8f:ec:7f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
        Validity
            Not Before: Jan 25 09:00:50 2026 GMT
            Not After : Jan 26 09:00:50 2026 GMT
        Subject: CN=84534ca68b6d13cc21c3408bd8f76759eb9b1a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:11:6d:66:bd:60:94:a7:cf:2d:d2:98:e6:
                    69:af:cf:ef:20:9e:a8:17:25:3c:56:d7:a4:7b:07:
                    ef:10:8d:a9:be:16:55:ac:5d:e6:49:42:95:49:ec:
                    18:82:34:c6:0d:7a:db:d0:89:d0:b8:19:f7:1f:ff:
                    09:98:f5:84:02:f0:16:18:f6:e2:96:ed:02:e0:0d:
                    8a:87:07:64:42:5b:0c:a5:b1:d8:23:cb:7e:74:cc:
                    59:1a:38:ee:39:f1:e5:35:b3:62:e5:99:e4:38:42:
                    ad:3c:34:85:c0:25:d4:27:22:b2:59:39:63:f5:c5:
                    5e:1b:26:18:d8:dc:13:e1:30:b7:f3:7b:c9:76:e8:
                    56:3b:5c:ee:24:3d:98:79:00:17:93:28:0b:a2:dd:
                    e6:14:63:13:5d:ba:f4:10:20:1d:2b:41:f4:97:27:
                    b5:34:59:8c:b3:6c:28:c2:1a:d8:24:32:85:cc:d0:
                    d0:18:03:b9:55:97:cd:26:ed:bb:63:65:c4:61:98:
                    be:d4:c2:e1:d1:fa:c4:8b:c9:28:45:95:e4:04:2b:
                    21:b4:f2:e7:56:94:e5:94:9b:5e:45:cb:2d:55:8e:
                    2a:01:9b:e5:7f:93:a7:2a:ba:ca:8e:4a:56:22:04:
                    7a:01:2a:97:bc:a6:38:22:2e:ab:54:86:d8:67:93:
                    6c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:4C:A6:8B:6D:13:CC:21:C3:40:8B:D8:F7:67:59:EB:9B:1A:4F
            X509v3 Authority Key Identifier:
                keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:09:9b:c3:34:a7:d0:94:06:8a:fa:03:b6:46:8c:65:b2:ad:
         f6:40:52:24:06:88:e9:3e:c7:2c:5c:51:01:ce:22:db:e2:dc:
         ad:34:5f:2a:08:8f:bb:29:ca:e7:ca:65:8d:0a:cd:9f:cc:79:
         03:76:bd:1b:73:e0:be:ac:46:04:2e:6b:e2:10:04:4a:43:37:
         06:2e:87:17:c2:5c:6e:dd:5a:22:2e:28:1f:c3:9e:c7:dc:b8:
         2f:29:24:a0:13:8e:8d:29:54:70:5b:cc:20:12:e9:fc:ff:0b:
         91:8e:e3:35:59:4b:17:45:3a:b9:5a:4d:9e:f5:88:3c:00:c7:
         58:2c:e1:a0:ea:bc:dd:10:a2:bb:60:27:a9:b9:0c:12:65:ca:
         78:53:af:0c:43:1e:67:22:ca:f7:ac:35:9f:fc:5c:78:42:2c:
         22:b0:61:0e:cc:f1:3e:9c:9c:c7:e9:ce:bc:41:4c:cc:5e:39:
         77:c9:4b:f0:8f:4b:78:6b:4b:86:ba:0f:9a:ff:68:2d:cb:cd:
         40:38:11:39:dd:a2:43:6c:19:f4:c0:1c:0d:91:b3:f6:b5:ab:
         90:2e:8c:13:8b:51:b4:2e:f8:6a:71:cd:f9:5b:85:10:6b:4c:
         a3:57:36:92:f0:d3:fd:2f:0f:27:6f:81:39:cd:10:bb:15:24:
         82:79:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:04 2026 by rpki-client