This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          PV/8XD77mZl+J5BPlz8F2wz+WCy51+tt81BVsKzVxUQ=
Subject key identifier:   E3:F2:A5:4A:60:32:92:BE:AD:4E:F5:B5:F2:01:48:FD:AD:75:E3:0E
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019BF3F4F2BBDB4CC1447A0489C4B6A69895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          135D
Signing time:             Sun 25 Jan 2026 07:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:14 +0000
Files and hashes:         1: HXYHaazK-agsXQtrAp4TdIiFPCw.roa (hash: 8c6r2+HmrNIxR72NP8l7eeROpR6oXO6CEMfBkvZx7+M=)
                          2: IDDMpCjqYwAGI-peC47tdVFpVME.roa (hash: Wn6wDDm3PxHp8jcuiJeMcmVpL1iWQEDeRHHD8I7chpQ=)
                          3: Ic-s3BxEKNsh-PbVJpc1Xz23AYs.roa (hash: oUF2uyrZqrkZx39wCYRgq/1hjdMckUA4FiG0GID4cJw=)
                          4: hnzz_PU7efQx6H153s8gnlp79IY.roa (hash: n+Gty9V7GKTlH1GHsjEfP3vQhmL0KYOhTaCWQIcvZc8=)
                          5: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: s0Vl8BVkkmyE9CW4y9Z9jT/hwfcO20uaV5Sl7Oktdpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:f2:bb:db:4c:c1:44:7a:04:89:c4:b6:a6:98:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Jan 25 07:01:14 2026 GMT
            Not After : Jan 26 07:01:14 2026 GMT
        Subject: CN=e3f2a54a603292bead4ef5b5f20148fdad75e30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:6d:fc:e1:4a:33:e1:29:87:3d:93:d1:d4:
                    58:3f:ed:bf:81:37:2e:34:95:51:cc:cb:9d:ea:8d:
                    17:52:ca:39:1c:db:18:4f:65:47:8c:79:27:41:36:
                    6b:0a:05:86:ab:b7:4f:f1:cd:47:e7:90:e8:6a:17:
                    97:80:92:a5:fa:35:87:d2:bc:3b:57:bc:59:f9:3d:
                    c3:53:dd:a0:19:e9:8a:e2:58:ea:60:bf:56:5f:f6:
                    fc:2b:b1:75:2e:6f:ff:6f:1d:8a:d4:db:3f:6b:80:
                    b0:6f:ec:5e:f0:96:13:7f:f1:87:bf:d0:ed:98:c1:
                    a4:44:ba:91:00:76:45:e6:96:67:22:ae:ab:6d:cc:
                    40:ad:d1:95:e9:c0:4b:ee:db:41:83:6f:bd:57:54:
                    06:b8:f1:32:b0:c9:49:57:2a:c4:57:8b:d6:c6:d6:
                    dd:3d:65:c8:94:c0:00:35:2f:95:ff:2a:c8:e4:35:
                    56:d2:61:21:41:e5:ac:cc:c3:2a:0f:7a:1b:23:9b:
                    10:0c:e1:35:45:00:89:d8:d5:5d:2a:f6:16:24:90:
                    9e:72:5a:3b:12:f6:2e:c7:f0:83:45:ef:08:54:ed:
                    02:b0:6c:97:71:3a:83:50:b6:4c:ae:7f:84:4d:ea:
                    88:1f:f8:40:b9:27:63:34:97:29:49:32:1d:1c:b8:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F2:A5:4A:60:32:92:BE:AD:4E:F5:B5:F2:01:48:FD:AD:75:E3:0E
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:53:7d:8f:15:e7:cf:fe:b2:cc:51:cf:b1:93:a8:e9:39:
         92:c1:f1:13:dc:74:da:d6:12:7a:96:03:45:67:52:7a:46:6b:
         47:a0:2e:bd:77:b8:2f:27:56:b4:6a:87:f5:92:f0:95:2d:2c:
         16:d8:2d:8f:72:1e:49:f5:99:1b:25:83:b7:02:3a:e9:25:6e:
         74:1a:9a:f5:b2:00:a2:3b:5d:5a:66:95:54:fa:df:c1:89:9d:
         40:87:4d:6b:62:6a:e9:91:90:dc:af:b4:94:8b:d3:5f:30:66:
         ab:cd:53:bf:ec:c7:f8:ae:58:98:b4:f8:fd:9a:d1:50:f7:0c:
         df:97:f7:e9:b4:c5:21:80:aa:8e:97:05:12:a7:55:23:ea:a5:
         34:3e:67:1d:86:53:27:ce:06:fe:39:df:6c:a6:1c:1c:78:e7:
         0d:88:fb:f0:1a:5c:2f:1e:35:1d:be:28:6e:a4:2f:b8:ce:1b:
         3b:df:73:1e:06:41:22:7a:70:b4:4f:e6:25:f2:36:7c:43:5a:
         af:6e:0f:be:a1:9c:b1:27:cb:20:f5:71:b4:63:c5:63:b4:19:
         d7:ea:1a:cb:63:a6:c0:9e:61:b2:c8:6f:2d:c9:70:b0:ac:27:
         2c:95:6c:0c:fb:a3:cf:ff:bf:51:3e:9a:e1:31:84:c9:ea:56:
         16:00:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:53 2026 by rpki-client