This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
File:                     HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft (raw, json)
Hash identifier:          Cp9T5vRN4PfQ3bYQgShhz0nHEYjBPAizPqEL3o5kJHU=
Subject key identifier:   40:C1:F7:A0:9E:CF:00:53:2E:4E:89:4C:8F:1B:CE:73:70:37:EC:DF
Authority key identifier: 1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63
Certificate issuer:       /CN=1d43453955846773b5256e4279a03d5a3b2b5963
Certificate serial:       019BF6BE9ADF8258A2D1122A157EC1ED73BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
Manifest number:          071F
Signing time:             Sun 25 Jan 2026 20:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:45 +0000
Files and hashes:         1: HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl (hash: an8pNh3UTZLviiAF21HlkIop2zqNx3v87B7gxv6kYcA=)
                          2: m2FMOoTxZveGA6bTxjKN43F-L0I.roa (hash: 0PoT1lL+6q8MWijKz4bvFHGvu5WCCo4vQMvI3Qq52V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:9a:df:82:58:a2:d1:12:2a:15:7e:c1:ed:73:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43453955846773b5256e4279a03d5a3b2b5963
        Validity
            Not Before: Jan 25 20:00:45 2026 GMT
            Not After : Jan 26 20:00:45 2026 GMT
        Subject: CN=40c1f7a09ecf00532e4e894c8f1bce737037ecdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:71:d3:85:dc:88:ad:d6:86:53:2e:1e:ea:a6:
                    69:f5:d1:5a:b2:b7:d1:94:fc:10:dd:19:4f:c5:86:
                    ef:9b:62:68:6b:0a:58:76:c0:1d:08:c6:dc:d1:a6:
                    4e:e1:b5:c3:b7:05:51:89:14:bb:23:20:40:14:d4:
                    7c:60:d2:8e:88:a2:7d:b8:a5:0a:42:03:d2:dd:49:
                    35:51:37:81:21:67:d8:1c:c3:76:8a:48:41:2a:13:
                    37:2e:44:fe:30:13:2f:3d:63:93:f3:c5:55:c0:ca:
                    21:02:85:eb:71:30:bd:b8:ab:aa:b6:fd:ad:0a:53:
                    b0:ff:98:ca:0b:45:0e:a1:bb:11:32:3a:d7:fe:15:
                    8a:96:07:6d:cd:4a:08:34:7a:a0:20:47:07:ff:ca:
                    16:b5:fb:a4:10:f0:01:4a:66:5d:ae:8e:17:1c:c9:
                    f7:09:b8:ca:b9:9e:fe:77:9c:19:c9:85:b4:82:9d:
                    ef:da:7f:8d:c7:ca:fc:f1:b3:d9:73:a6:65:80:94:
                    ca:df:d6:86:16:61:07:3f:b9:4f:7e:dd:43:ee:aa:
                    e6:67:a5:5e:17:fd:94:f5:13:13:13:d2:d0:02:2f:
                    18:fb:35:8c:9d:ec:3c:7b:f5:09:c4:32:ee:5e:14:
                    fd:72:63:2b:7e:31:1f:89:95:25:3e:9d:91:f8:bd:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:F7:A0:9E:CF:00:53:2E:4E:89:4C:8F:1B:CE:73:70:37:EC:DF
            X509v3 Authority Key Identifier:
                keyid:1D:43:45:39:55:84:67:73:B5:25:6E:42:79:A0:3D:5A:3B:2B:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5914af-3ab8-4182-a8ab-c2c98d2b6a65/1/HUNFOVWEZ3O1JW5CeaA9WjsrWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b2:e3:a2:7c:c2:e4:2e:f3:91:37:46:c6:f0:58:a3:97:fd:
         43:fd:65:3f:6d:8c:07:cc:63:a2:b1:da:f2:b0:02:d2:2a:a7:
         e1:14:27:e7:bc:a7:6d:0b:8a:e5:31:bd:ba:e6:e5:dd:d7:16:
         be:bf:53:f2:51:d2:23:96:1d:be:8b:90:82:f7:bc:3c:4f:5b:
         72:84:68:17:1c:09:d5:e8:f5:51:c0:51:d5:c1:f5:97:17:64:
         c3:68:83:d0:2c:49:dc:8f:f9:8d:d5:d6:cd:c9:84:0e:c9:1e:
         d5:f7:d1:72:04:43:ca:ff:8c:87:fb:9a:aa:39:de:5b:33:ea:
         0e:99:03:9d:50:6e:d2:dd:a1:8b:8e:f9:25:e1:20:66:bd:7a:
         20:01:b0:6f:b6:83:8c:d9:af:0f:db:0c:ec:c8:0e:86:7b:47:
         04:02:92:06:fc:8b:fa:52:ff:b9:5c:03:8b:55:63:11:d4:3e:
         17:01:68:e8:89:fa:49:fd:6c:76:69:83:b9:bb:2e:b0:54:50:
         0b:05:0c:0b:a9:22:60:14:85:77:98:ad:cc:32:c3:07:0d:c8:
         ca:af:db:cf:08:2e:9d:ea:1c:e1:6e:65:bb:49:68:c1:82:84:
         04:9a:0c:a1:16:07:b7:d4:ee:70:b5:28:b4:40:ee:ac:b4:ec:
         0b:31:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:21 2026 by rpki-client