This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          6tAUuY1H/3RWKwI+8/Hy/stX71H0tNT2bYwVxcOFg1M=
Subject key identifier:   68:34:5F:BC:15:3F:B2:AD:A6:53:21:4F:6F:F7:DC:56:D2:BC:5E:48
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       019BFA64A2195A9FE00FB2F1BC06083ABD85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 13:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 13:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 13:00:57 +0000
Files and hashes:         1: 6-MYWUgNN_QLhajw01TPQypu9qo.roa (hash: u38LNGCNm7hapDrGswDbeJazlaHgAyILiY9j6QwpBsg=)
                          2: E9zZAnLobJdxCJ_CMObNo6B0tg0.roa (hash: gKx/4RJ8SdZlVgi0Sh6XpvjZo+kkGJvfp88hpXTMS3s=)
                          3: Is4ZsOkA4ognMGIQHzhjm6hHarA.roa (hash: EQqUs3Tbbc3EDtczOgdmk5Vx/6Xxwbf61H1i0BVYet0=)
                          4: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: poEYkdAaHbdOrw5pKC0e+5VouuPNDYX7dVV7zDCwGYQ=)
                          5: piqonsXFBrG6rXRd3eemw24RFpc.roa (hash: nKq7t9jFZ72mSjyumQVPsGsNkyCxwxThmoOAWXTbJcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:a2:19:5a:9f:e0:0f:b2:f1:bc:06:08:3a:bd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Jan 26 13:00:57 2026 GMT
            Not After : Jan 27 13:00:57 2026 GMT
        Subject: CN=68345fbc153fb2ada653214f6ff7dc56d2bc5e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:87:91:99:bf:73:0e:ad:d2:2e:fa:66:5f:
                    56:1b:e1:45:5f:ff:1d:58:26:ea:9a:23:3f:b4:85:
                    20:f9:66:ca:d0:28:3c:31:0d:8f:2c:29:38:f6:d6:
                    26:53:a5:d5:f3:37:67:e3:09:36:9d:22:d8:90:41:
                    4d:ed:7c:50:c8:a7:c4:03:37:59:f6:5b:9d:ad:03:
                    bc:30:8f:23:49:31:7b:19:5f:8b:c6:95:33:db:df:
                    0e:f2:e6:67:9f:ed:40:4d:58:1a:f2:c0:a0:0a:85:
                    cb:60:86:75:90:2b:3a:f2:c7:09:96:bf:6d:66:4c:
                    79:6b:68:00:52:85:9a:20:aa:d4:d2:93:e3:69:4e:
                    a3:cb:a7:be:2a:9b:26:26:6c:dc:14:0c:ea:7f:87:
                    ab:3e:c0:33:8c:5a:17:b8:d6:2a:74:1e:d5:d5:30:
                    8e:31:20:05:0f:f6:a7:b3:e3:b3:67:37:71:ce:ca:
                    c1:6b:f2:ba:05:ff:1e:cd:d3:7e:b0:35:90:5b:44:
                    b4:60:78:32:56:e0:a0:78:89:3f:55:c3:5f:03:74:
                    ad:8b:81:3a:0c:40:1c:ba:b5:69:11:92:35:6e:83:
                    c8:af:3b:dd:2e:b2:3d:85:12:00:1e:7c:ab:b8:72:
                    f0:4d:da:31:10:af:13:ed:fe:00:9f:1f:74:30:e2:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:34:5F:BC:15:3F:B2:AD:A6:53:21:4F:6F:F7:DC:56:D2:BC:5E:48
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8b:73:b6:12:d3:ca:f6:ec:77:8a:41:13:dd:0e:80:60:60:
         04:b3:7b:1d:36:1b:67:24:5b:e9:db:21:65:37:e9:1a:08:51:
         7e:81:e7:7d:e8:75:6f:7a:43:c1:a3:c5:f3:56:4f:a0:95:85:
         45:87:ce:1c:84:34:ed:de:9b:3d:87:4c:f2:d4:d5:6e:31:2b:
         e5:a0:44:2e:46:6f:8a:4f:6c:a1:1b:8c:a5:2d:1b:14:6f:bf:
         d8:a8:8d:4d:43:57:93:6b:ad:e9:7b:56:55:4b:12:c0:cb:d4:
         34:34:1b:d7:36:59:cc:c3:0f:21:79:64:36:34:22:83:0e:a8:
         1e:ed:f0:bf:f4:4e:40:56:53:f0:74:aa:eb:de:cf:92:a8:d5:
         69:27:66:d9:f6:7a:94:aa:db:c2:df:e1:05:5c:05:f1:96:12:
         f8:7a:4d:63:55:f8:16:7e:69:d5:84:3c:7c:d7:68:29:0e:90:
         04:33:45:20:35:3d:94:f1:fa:cc:db:35:fa:41:1e:e5:19:cb:
         c2:5e:99:01:52:cd:db:b8:7c:bd:6c:df:ee:11:ff:39:e4:13:
         4d:6d:23:66:b9:54:fa:25:23:d3:9f:90:51:43:85:ec:3d:7b:
         a6:ee:de:bc:7d:33:71:6d:f0:3d:9a:45:6b:d7:e5:79:f1:96:
         7a:44:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:18:11 2026 by rpki-client