This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File:                     IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier:          QMrUQK8Ynsa9SH12vmCH+8c0Xqf7zXawaJEDUGAbLDI=
Subject key identifier:   00:70:84:18:DD:42:51:CE:61:CB:56:1E:2E:EE:DB:2B:90:E4:76:55
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer:       /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial:       019BF72CCF115C6079000B79E4E00FE20A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number:          155A
Signing time:             Sun 25 Jan 2026 22:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:07 +0000
Files and hashes:         1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: A33AdiEXQrYkMvXRzHtWa0OVN4WeOK1dyotW6sSww/I=)
                          2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
                          3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:cf:11:5c:60:79:00:0b:79:e4:e0:0f:e2:0a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
        Validity
            Not Before: Jan 25 22:01:07 2026 GMT
            Not After : Jan 26 22:01:07 2026 GMT
        Subject: CN=00708418dd4251ce61cb561e2eeedb2b90e47655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:05:fb:f9:70:31:c1:4a:ae:04:99:cf:70:
                    82:72:17:2b:0a:1e:58:d6:35:6b:be:ef:e4:c4:df:
                    73:5f:65:57:8f:cb:21:0f:fd:fc:ce:84:2e:ed:70:
                    04:bc:4a:ab:d0:2e:8b:83:86:15:33:d0:fa:40:3b:
                    6f:f5:01:23:7e:e5:4b:aa:d3:e0:0c:fd:fb:71:c5:
                    f0:2a:3f:36:a8:05:83:56:01:56:00:39:e5:44:b9:
                    dd:4f:32:62:c8:f5:c6:29:12:34:f3:e5:26:dc:39:
                    47:6f:40:24:3d:17:5e:ca:c3:c5:f7:77:6d:f1:48:
                    5a:16:41:67:d7:11:74:98:53:a3:60:bc:24:3f:fa:
                    a1:37:92:08:39:be:f6:06:70:c8:bf:75:68:38:23:
                    bb:dc:93:dd:1a:c0:2b:ac:68:b2:0c:a4:29:5c:58:
                    92:0e:e4:8a:4b:9d:a8:27:04:78:3e:4f:ef:cb:d3:
                    ea:f7:54:44:d2:d1:76:2a:be:13:78:67:a0:a2:3d:
                    bd:d6:37:ea:f2:97:94:74:36:65:2d:c3:68:54:ac:
                    53:d5:f3:38:ff:61:6f:6b:7c:8b:36:75:0a:07:e8:
                    34:5e:f5:27:48:41:fc:9f:2b:30:22:99:78:10:70:
                    c6:60:37:9b:9a:68:63:ae:d6:d7:2a:22:93:f2:a2:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:84:18:DD:42:51:CE:61:CB:56:1E:2E:EE:DB:2B:90:E4:76:55
            X509v3 Authority Key Identifier:
                keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:14:0c:01:67:ed:15:1c:a7:3b:6e:58:e7:b4:12:80:fc:
         43:7a:a5:ad:b7:08:74:dd:1b:69:96:35:f4:50:f9:bc:89:9e:
         32:66:7b:34:a3:cc:77:24:da:1c:ab:9e:2b:b1:e2:be:37:65:
         ad:03:8b:83:36:7d:5f:d9:cf:d8:be:c4:08:ae:08:0e:3b:ae:
         9f:22:7a:30:9c:00:c5:22:02:dc:d5:43:bf:6d:f2:16:12:f0:
         a2:e4:c2:9a:9f:4a:23:4e:6a:7e:0c:f7:7d:3c:83:c6:44:cd:
         51:06:0d:8d:50:e9:4c:7f:8a:fa:d1:9a:f2:56:75:3f:cf:9e:
         d6:34:4e:91:bc:d3:a1:93:21:ab:fc:09:e7:21:a9:16:2b:bb:
         71:51:63:f9:e4:95:1b:8c:7e:92:90:d1:e0:4f:17:48:d3:af:
         02:80:46:3c:a2:f3:1c:bb:87:02:55:94:a5:e2:d2:d3:d8:68:
         57:f8:29:df:bd:b9:78:80:2f:c5:89:51:1e:60:7b:cc:e9:30:
         1e:30:c3:e0:64:62:76:0e:b2:05:45:68:92:82:d4:07:c3:2c:
         ce:9f:32:f7:69:ac:d0:92:9e:46:54:8b:c5:58:a3:57:4e:c0:
         f4:56:4d:4a:fc:51:4e:9c:8b:e2:4f:20:86:9b:e5:1c:0c:8a:
         68:ad:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:49:31 2026 by rpki-client