This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          M3oGA+UkaYOgFwc+9PaqzPuHA0/wBz3tH6eBt54UzAw=
Subject key identifier:   8F:36:68:22:9B:5C:A3:ED:3A:55:B0:56:28:00:29:83:F8:F2:86:BB
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       019BF8E41F0C9D4B0A29D93D5FEA08212E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 06:00:58 +0000
Manifest this update:     Mon 26 Jan 2026 06:00:58 +0000
Manifest next update:     Tue 27 Jan 2026 06:00:58 +0000
Files and hashes:         1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
                          2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
                          3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
                          4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: ahoMvLyvP4a1dsSoSwi0tTxgnRzJsVx6bsUsEjZfceM=)
                          5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e4:1f:0c:9d:4b:0a:29:d9:3d:5f:ea:08:21:2e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Jan 26 06:00:58 2026 GMT
            Not After : Jan 27 06:00:58 2026 GMT
        Subject: CN=8f3668229b5ca3ed3a55b05628002983f8f286bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:a1:51:ca:33:ad:6c:88:91:d5:23:e2:16:
                    ad:35:72:89:3e:b8:bd:42:d1:ff:f9:39:6b:1d:71:
                    93:54:bc:3c:54:fa:99:45:d9:fc:65:b1:2a:3f:49:
                    b0:40:df:8e:f9:60:a7:cc:cb:37:ef:32:21:ba:41:
                    79:c0:23:50:c3:2a:a1:fd:ff:f9:3f:db:48:7b:37:
                    23:6f:1a:93:e7:e0:c5:db:db:55:c5:90:20:f7:95:
                    95:f2:e4:66:d4:1c:9a:fb:cc:30:72:44:09:6a:4b:
                    c8:91:ed:d5:f9:7f:5b:d5:f7:fb:d3:49:a5:13:9e:
                    04:8d:d8:72:e3:d4:f5:b1:20:29:89:9f:14:f1:6f:
                    91:1d:99:f5:d3:2c:e4:07:7e:8d:87:c7:e4:ad:50:
                    5f:d9:80:96:78:d5:0b:5a:7c:7d:f1:77:b5:33:1e:
                    13:f2:4c:b3:dc:17:92:72:5c:19:9c:52:41:78:25:
                    68:8b:0a:a6:fe:47:b9:b5:8d:5a:b7:9f:6d:47:5a:
                    61:06:c6:b5:d2:00:7b:2b:cc:98:bf:b6:39:51:bd:
                    24:09:6e:31:a1:dc:c7:69:3e:c0:0c:c5:b9:83:7e:
                    17:7e:f1:40:57:71:22:91:d5:6e:dd:21:04:67:a3:
                    30:32:6b:5b:01:70:6d:6f:c0:75:b3:62:da:b2:e4:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:36:68:22:9B:5C:A3:ED:3A:55:B0:56:28:00:29:83:F8:F2:86:BB
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:38:98:29:98:2b:c6:c1:83:71:ec:34:af:dc:08:f2:e1:9e:
         88:99:c6:e1:89:ab:7d:e8:fb:b0:b7:1a:29:ed:23:3e:30:fd:
         18:0c:a6:1b:6a:97:b7:16:c7:b9:34:be:3f:7c:e7:85:f9:35:
         48:37:70:28:1a:7d:1e:f9:3f:a3:06:be:9e:26:80:88:6f:62:
         55:45:99:40:e4:8c:25:94:8c:c4:81:ae:45:6c:08:f2:6b:9c:
         c1:76:4e:4a:d3:1d:2a:43:7e:c4:84:9a:ce:0d:f7:25:8b:b2:
         e9:b0:cc:a3:e4:f8:b8:f3:c8:30:50:da:af:a1:2a:9e:1f:4b:
         09:8f:1b:e1:7c:1a:c8:e0:8f:99:e3:4b:6b:36:d9:0e:e5:40:
         bd:85:fb:28:46:06:f4:cb:4e:4d:f7:5f:fe:24:29:4a:ec:d3:
         94:84:d4:20:b7:f1:e2:e1:d5:a7:c4:4f:f0:af:7d:92:6f:94:
         a9:a7:86:42:6d:8a:b8:7c:af:34:6b:54:97:fa:e2:1d:de:19:
         89:7d:09:f7:99:dd:85:e8:55:89:d3:0e:0f:ac:50:3c:88:3c:
         74:a6:1f:ae:3e:d6:46:43:e8:9c:9a:36:b8:ca:90:dc:3f:e6:
         bc:fc:8e:52:d1:a7:fe:8f:54:98:0f:fc:3e:13:22:1e:6f:7e:
         87:d8:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:35:31 2026 by rpki-client