This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File:                     Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier:          5BQ2vAv8SYQY3aJ5EXcAeJ3A8zIZmbwI83efSFiIuRg=
Subject key identifier:   27:81:EA:E8:01:4A:CC:F2:67:BE:05:73:1B:30:AF:C7:68:76:CE:53
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer:       /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial:       019BF5E4205C4EC4B88E05291E6308784CCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number:          03E6
Signing time:             Sun 25 Jan 2026 16:02:06 +0000
Manifest this update:     Sun 25 Jan 2026 16:02:06 +0000
Manifest next update:     Mon 26 Jan 2026 16:02:06 +0000
Files and hashes:         1: 3P3-QRL_mRQBI4J541PgUW3JkC8.roa (hash: UXe72QHNvakdgW1FdgY1L4eDueqV3Q9/yGntSIAIixI=)
                          2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: EHiTdjSYRmWrutyv4h/JkcVG2SWI8/yb0nHFQSUOKT4=)
                          3: itvEUHoAaJl17faWlj6NT_FxL94.roa (hash: AjucNzluWbTiJYxrYlGErePUiK0Itei7jfiA2tx5Tk0=)
                          4: krg0r2wU_k1UtI2XJIebIOIlBlo.roa (hash: egntaPC7sNCVC4f8EmkepYo0ee+r9xw1kBBN3SZR0DY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e4:20:5c:4e:c4:b8:8e:05:29:1e:63:08:78:4c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
        Validity
            Not Before: Jan 25 16:02:06 2026 GMT
            Not After : Jan 26 16:02:06 2026 GMT
        Subject: CN=2781eae8014accf267be05731b30afc76876ce53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:c2:40:93:b5:dd:f4:ba:b2:5c:a1:6d:8a:
                    55:e9:58:13:a2:f8:a4:b2:f5:35:ec:21:e5:ca:89:
                    b2:27:e5:2c:bf:e9:1c:37:21:8b:9b:d3:aa:4f:5f:
                    10:51:bf:3a:45:d0:71:e8:8c:c6:de:01:79:19:ef:
                    f6:20:fa:57:34:e9:9a:bf:e7:bb:30:08:3b:c8:b1:
                    02:a8:4c:65:90:62:64:1d:aa:93:69:74:b0:2e:bf:
                    af:4d:77:fd:0e:10:0f:cb:02:99:6e:06:d0:ae:cc:
                    b2:30:f2:9d:8e:9f:d4:4e:0a:76:de:01:bf:1a:2d:
                    0f:9b:82:2e:af:ee:9b:a6:17:fd:6b:12:a1:e4:3c:
                    2e:cb:34:29:1a:ba:de:2f:4e:77:96:e6:0f:40:09:
                    a7:b0:ae:bf:7a:c1:b1:93:b7:42:bf:22:ff:f1:f7:
                    17:c2:46:be:38:04:ac:0b:b6:63:51:5b:af:07:3c:
                    01:3b:53:30:46:1a:d8:1e:00:e1:70:0c:8f:33:84:
                    6c:3c:46:6c:63:ce:83:24:b1:96:42:04:74:e7:10:
                    8e:00:97:bb:8f:59:3d:51:39:a8:99:de:e4:a2:ca:
                    ee:2f:0b:78:1e:17:0c:11:fb:88:28:b2:cc:48:15:
                    8a:fa:d9:70:f5:7e:6b:b5:bf:c7:f5:b8:01:53:12:
                    58:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:81:EA:E8:01:4A:CC:F2:67:BE:05:73:1B:30:AF:C7:68:76:CE:53
            X509v3 Authority Key Identifier:
                keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:29:c6:3f:3f:a3:5a:4f:d2:88:a9:0e:16:d7:c9:b8:a5:9a:
         05:1f:d0:f1:2f:b8:9f:39:18:9f:8f:6a:ba:cf:4c:5e:cd:e5:
         2e:16:52:4b:3f:e1:70:21:02:69:e3:81:56:4a:a5:80:4a:34:
         65:e1:8b:30:46:c5:76:f2:ed:c2:67:22:d3:7a:c9:17:a8:38:
         e3:05:09:58:95:cc:48:e1:12:ec:54:21:00:4e:e0:69:bf:14:
         c2:5f:ff:c4:c0:82:fa:cd:d7:b9:18:cc:a2:c5:ea:71:49:b5:
         99:5a:4b:bd:15:f6:ef:03:e3:38:d0:94:ae:d2:40:ec:f9:eb:
         0d:cf:ef:a0:64:0b:54:5b:91:f3:b0:2e:4a:60:2f:cf:92:24:
         6d:79:07:15:49:8c:c9:4d:34:d8:e4:b3:8f:ba:92:9c:b3:c7:
         58:2d:7d:f7:21:de:53:b0:d3:13:20:ba:96:f7:4a:e5:6e:c0:
         6d:e5:45:38:ab:fe:c8:4c:3f:53:d3:4f:b1:51:cc:19:ff:01:
         63:09:6b:8b:fc:12:01:fc:ab:28:51:ce:2a:b0:d8:88:21:d9:
         8c:cb:55:d3:87:b4:7b:ca:65:73:64:b5:f1:9c:f7:38:c4:ca:
         a3:f7:6f:30:cf:82:61:b9:00:0a:28:82:fa:38:48:ef:d2:b8:
         45:d6:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:54 2026 by rpki-client