This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
File:                     hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json)
Hash identifier:          l927gffzWL7SvakapYuo8ZfclvpcohQoq+CEqrQGAuw=
Subject key identifier:   B7:BF:98:46:11:C1:B1:5B:E4:65:D3:00:60:7D:E9:50:AC:0B:47:7E
Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
Certificate issuer:       /CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Certificate serial:       019BF91B5E68918F43DC264F1C4F03AAFB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
Manifest number:          011B
Signing time:             Mon 26 Jan 2026 07:01:19 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:19 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:19 +0000
Files and hashes:         1: 82t5-hxlbBokWJ95cU6-iNwwzGE.roa (hash: /vM2wNO4llhGTKJMkB3GroMrqeVphHqzb5ESd4v5N4Q=)
                          2: ETMpToqTleOoqImfhhOrXw4lz3Q.asa (hash: CY0wY17SWUl1vZ+zGcUwbXDJHsRR/4ff/AIuJo1+GZo=)
                          3: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: FTKNb5SGAx1ASwkPhXIZUP+xEwentaZlFYZP1kXtkSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:5e:68:91:8f:43:dc:26:4f:1c:4f:03:aa:fb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565
        Validity
            Not Before: Jan 26 07:01:19 2026 GMT
            Not After : Jan 27 07:01:19 2026 GMT
        Subject: CN=b7bf984611c1b15be465d300607de950ac0b477e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:3f:aa:3b:a5:c4:77:1b:ac:37:ca:80:b6:
                    4b:fe:ea:b2:2c:40:d2:ae:e4:0a:ff:f9:52:28:74:
                    95:38:b0:69:10:c9:59:db:0d:60:1b:8b:b0:a1:ae:
                    bf:e3:07:8c:a7:84:b6:13:62:5c:79:9e:34:7e:57:
                    1b:b6:dd:5b:10:8c:cc:e2:37:0e:05:93:f6:83:f3:
                    d3:7e:2e:97:52:40:9b:cc:65:7b:f3:2f:fc:3f:73:
                    f0:21:bb:67:98:d5:cb:bb:ac:a5:ae:e2:ea:05:fa:
                    13:fc:c4:9f:90:5d:9d:32:58:b1:05:6c:f1:a2:d7:
                    61:d2:3d:2b:bb:2f:17:9d:27:83:31:fe:c8:49:5d:
                    78:0e:18:91:d7:39:e7:2b:80:e2:4e:05:1d:7c:24:
                    ff:db:28:e6:01:a7:32:1d:86:65:2c:27:05:d7:7a:
                    d6:e5:57:62:90:d8:81:29:c2:3c:49:61:dd:05:a1:
                    b5:c2:41:74:47:df:e0:4b:90:61:ea:d0:5d:f3:c3:
                    6e:20:72:98:0e:15:c1:7f:c0:87:82:cd:37:77:25:
                    19:ca:0a:38:7e:c6:82:d3:5e:8d:ec:6e:86:c4:5f:
                    2a:d7:ff:ae:37:cc:2f:28:65:fa:c5:02:27:31:34:
                    8f:1a:1f:6f:5d:43:73:9e:33:2d:d7:91:d6:60:b4:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BF:98:46:11:C1:B1:5B:E4:65:D3:00:60:7D:E9:50:AC:0B:47:7E
            X509v3 Authority Key Identifier:
                keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1a:e6:0e:ba:56:c4:f3:8e:6a:2c:a2:8a:d2:3f:d7:50:13:
         fc:0c:35:61:f2:06:9e:6f:c2:75:e1:d5:6b:98:45:f9:15:e9:
         1f:6c:24:2a:04:49:6b:15:55:f5:fb:14:50:31:a6:d8:8c:a8:
         bc:c0:0a:1f:f1:02:7f:99:6a:87:76:ab:41:3b:89:4f:3f:ab:
         39:e8:3c:24:13:e7:9a:06:c5:07:3f:93:8a:be:68:15:aa:01:
         b4:47:0d:d4:b7:f8:34:8b:22:c7:5c:65:e6:2d:27:51:49:3c:
         ab:f3:50:df:1f:28:bc:35:e5:27:d1:73:6d:3c:00:cd:f1:34:
         a2:1e:b2:93:ea:23:82:23:88:18:31:b4:9a:40:c8:b4:2e:80:
         c3:c4:61:78:27:f2:0a:31:50:82:ad:9f:ac:89:b3:d2:62:52:
         f0:57:3e:f4:dc:a0:4a:61:c0:eb:6a:a3:34:ef:96:a2:53:36:
         fc:f1:22:59:77:ad:e5:0f:c5:64:ef:a8:c1:b1:ca:d0:c6:21:
         6d:97:03:63:dd:2c:d1:bc:87:e3:3e:54:d3:0c:23:90:dd:dd:
         1a:c4:0e:4a:1a:58:11:df:82:41:29:bb:b9:82:e3:fa:8a:13:
         aa:c2:99:4d:55:f1:c6:4d:fe:f8:d4:99:41:5e:1f:d1:56:85:
         a4:00:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:20 2026 by rpki-client