This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          6obuTZGXpRLKJCCMg9yj1nbMXRh1sZUqnDBv1FHuVpY=
Subject key identifier:   B5:52:59:5E:ED:70:0E:FB:FA:29:F0:25:6E:70:C4:D8:6C:10:E8:7A
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       019BF3BDE05D64F573E4A25DE28C7F68FB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0E3D
Signing time:             Sun 25 Jan 2026 06:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:05 +0000
Files and hashes:         1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=)
                          2: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=)
                          3: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=)
                          4: CcIzXROi2l84KbeZyJPUJ8bkToM.roa (hash: 70O+lX+cJu+NCXvhGoF16ylW0JcDpTG1gwUSBq7n7MY=)
                          5: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=)
                          6: EqY0KefF-dXD1ybBHnswpERq3H4.roa (hash: YQZdI5aROLUswQgX5YCUushUt55IJ3UR7f+6G7Iiqhs=)
                          7: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=)
                          8: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: UrXSlSnm/+6abYZaJh+ImQWo1ED2ozO2mv63Q5+pzIs=)
                          9: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=)
                          10: Sk7t1MTLy-mE6ILTeU920PY_M-g.roa (hash: OLnK8J+KbB8wVrBQPdBasMW3N+QmDq4FYwGFqKzTkEk=)
                          11: Uy72jUxgOXJIgs7T4DZejwWDKy4.roa (hash: e+N6lBT3rf/haiXAn+O11QG5l4fWSj8f+0jPE8bUCC4=)
                          12: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=)
                          13: ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa (hash: +58mQxHwIY7KXTJKFotYUhr5PFSgp/yNeQPjJQppI/8=)
                          14: _XqYGA-pEt3m7_s_CPxyp7qJP2A.roa (hash: O6ZYesqoa27MzcbxuiFVeMgVEHpdjgSyZyr0JNr1ZEU=)
                          15: cPtm9f5FeP4aDiZmtgAZeH6HS5c.roa (hash: MOhP1/09XQdhINCUAfcXO13xP8T5YClq0iYcFE3oubk=)
                          16: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=)
                          17: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=)
                          18: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=)
                          19: i32oc9P50jJmJ6NXxrhWkSEafaU.roa (hash: mtnOn4WK/ds4HsY3qFfkYDvAIkmMkR0O5fwjSKEmTFY=)
                          20: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=)
                          21: mzjreCh1UKp6Tw01JHK_gKRYkGg.roa (hash: 8KHhl+lFh6yPZptHPK8f1cx7zO0RSCaz8HUst/vhTr0=)
                          22: pI-1z9oenJG3IzakWANawyG6_9s.roa (hash: wdFoSde/WnFTGchK6FtkX1aAoOPlIKGYqQ2hymhH8ng=)
                          23: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=)
                          24: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=)
                          25: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=)
                          26: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:e0:5d:64:f5:73:e4:a2:5d:e2:8c:7f:68:fb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Jan 25 06:01:05 2026 GMT
            Not After : Jan 26 06:01:05 2026 GMT
        Subject: CN=b552595eed700efbfa29f0256e70c4d86c10e87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:17:06:f5:30:49:34:74:a6:a8:f4:53:88:
                    0e:f0:5c:2f:b4:81:55:a8:73:69:b8:8c:34:39:51:
                    e6:90:0d:b6:ee:c4:c4:49:23:75:0a:21:43:fa:73:
                    3a:0d:24:fa:a9:02:3a:8b:f7:72:5d:eb:e8:a1:8d:
                    6e:4b:7c:24:06:c2:19:cc:c6:2c:9e:9d:07:9e:2b:
                    f3:42:6c:bb:f0:5a:7a:ba:b0:0d:4f:ec:13:9b:a3:
                    9d:01:2d:39:22:1a:8b:64:49:5c:78:5c:29:5c:0a:
                    8c:0d:ce:79:68:e2:6b:23:79:8f:23:39:73:42:c6:
                    77:33:ff:3e:6f:9c:cf:9e:44:80:ce:14:ed:81:6d:
                    5c:bf:88:6e:27:14:c2:88:6e:ca:50:43:e1:41:e8:
                    89:df:94:ca:1c:95:0f:13:e2:de:04:79:63:4e:6a:
                    34:3f:be:8a:a6:24:f2:95:52:94:f1:fd:4c:e4:7a:
                    0f:37:27:15:82:81:50:c7:60:47:41:b0:c7:a4:6a:
                    06:6e:42:77:44:d6:39:fc:66:dd:07:c7:5e:8e:76:
                    86:07:00:a3:99:e6:d9:97:b5:bf:f1:a7:76:1e:be:
                    2f:e5:1a:9a:7d:d3:92:fe:7f:7a:fe:60:77:3e:38:
                    43:ad:bd:24:c1:d8:4e:84:d0:67:da:87:32:2b:7f:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:59:5E:ED:70:0E:FB:FA:29:F0:25:6E:70:C4:D8:6C:10:E8:7A
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e8:5b:93:90:7d:ab:10:65:38:45:08:49:da:09:12:74:45:
         12:d4:f0:37:f2:f9:19:41:ff:02:7c:a6:b5:b8:71:0d:68:12:
         1c:d0:75:be:07:7e:95:41:d9:2d:23:db:e0:1a:56:1a:8f:58:
         85:5a:10:34:d0:15:77:fe:20:da:96:ee:3e:b5:07:41:25:62:
         31:34:33:30:84:55:ba:d1:7d:86:6e:51:3d:9c:83:49:a4:8b:
         58:1d:74:58:f1:2e:9a:49:0d:db:c0:0c:4a:3d:09:ac:fa:4c:
         1c:e0:44:32:82:fa:02:e5:20:3a:db:a1:73:41:f7:65:43:9b:
         c8:65:76:cc:f7:02:1a:8c:cc:90:7d:a4:98:fc:81:79:72:0d:
         22:0a:9d:b2:b9:0b:4c:a0:de:b0:af:7e:67:37:b6:e8:61:f5:
         9a:29:93:3c:c8:73:77:07:31:e1:4a:f2:52:bc:da:0e:5c:90:
         66:6f:15:eb:c3:4d:3f:4b:cc:c0:8f:cd:cf:64:9e:a1:60:ce:
         b6:d2:69:7d:d6:0b:4c:eb:b7:8d:32:7a:2a:8e:32:63:df:b9:
         2f:32:8b:5f:84:46:d6:fe:d1:f3:4a:84:7b:90:d7:8e:1b:58:
         ba:d9:63:81:fb:2c:f5:f4:8f:ce:89:bb:8d:08:fe:d3:c8:84:
         85:e4:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:06:57 2026 by rpki-client