This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File:                     HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier:          gGUrvo2XdB6TFMtQgwfgf/ZyYKLqP5NUJxSz/OoYHeo=
Subject key identifier:   D9:CD:B1:19:1E:4F:0C:D9:B5:E5:41:CF:13:66:3E:43:4E:37:19:8C
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer:       /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial:       019BA56C69D21ED43B2084136E215534F861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number:          12EB
Signing time:             Sat 10 Jan 2026 01:01:44 +0000
Manifest this update:     Sat 10 Jan 2026 01:01:44 +0000
Manifest next update:     Sun 11 Jan 2026 01:01:44 +0000
Files and hashes:         1: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: 7czKdyCTs/q5s2vk+7/2MVNu/cGoRwnYGXLMnXzwsvA=)
                          2: MUqDsVkna7G4MyO1lSn72i-Jbow.roa (hash: IVcowk46pxZyKS0pkiAyx+n+WI60LUgzwvxTDQ5wrNc=)
                          3: N4IzrH0qD40Woupyn9pXT2Z1eMg.roa (hash: Day6JScG9JRnBC85UOxG3a1DX4Ksh0LMtFWjdlB6gU0=)
                          4: dRHnWg8xgMV7IsHlZGz8N74fQIs.roa (hash: gSF6LAUwiGyd8EI+BN4CEzTlS4d9BOM234ihF2xKvGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a5:6c:69:d2:1e:d4:3b:20:84:13:6e:21:55:34:f8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
        Validity
            Not Before: Jan 10 01:01:44 2026 GMT
            Not After : Jan 11 01:01:44 2026 GMT
        Subject: CN=d9cdb1191e4f0cd9b5e541cf13663e434e37198c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:ef:f5:a7:5b:9e:ae:fa:2c:fd:44:c9:1c:
                    a6:f7:5c:f9:d2:87:27:de:8d:86:9b:f2:b6:55:2f:
                    b2:c4:80:b1:b9:5f:f7:f1:98:5f:32:5c:c0:ce:de:
                    68:05:94:09:ef:e3:bb:3d:34:5d:01:b9:0d:12:cc:
                    4f:db:eb:8f:31:bf:f8:8d:e4:b8:bd:92:47:48:5c:
                    c9:49:ef:05:ef:e5:68:fd:9f:58:8f:f1:bd:6d:73:
                    50:7f:eb:a4:db:62:b3:22:a8:35:8f:39:75:13:73:
                    17:b2:85:7b:97:34:eb:e5:a0:11:69:4a:79:2f:c1:
                    a0:7f:79:35:07:13:b8:e9:67:4f:9e:12:8a:11:97:
                    b6:c4:af:a2:2b:8c:99:c7:06:f4:1b:9a:38:79:8e:
                    bf:a5:53:3e:de:35:65:f9:6d:7e:3c:e4:01:3b:0d:
                    1d:b9:34:86:61:33:34:1c:d0:4f:63:d9:7a:a9:b9:
                    0a:90:ec:6b:26:56:6b:47:d3:a9:82:a3:15:da:bc:
                    0d:da:80:ad:c4:3f:4a:27:af:93:d1:6b:90:1c:d0:
                    bf:94:6d:dc:17:5a:fd:13:11:27:33:78:fe:b3:b1:
                    1b:63:0e:93:55:32:d8:0c:85:c5:fe:13:5f:e2:cf:
                    81:7f:18:6c:1e:5e:c2:9e:9e:6a:9e:59:ce:f0:86:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CD:B1:19:1E:4F:0C:D9:B5:E5:41:CF:13:66:3E:43:4E:37:19:8C
            X509v3 Authority Key Identifier:
                keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f3:3d:12:5e:9b:ed:85:19:44:c7:d2:ff:82:cc:c0:83:ae:
         41:83:e8:d4:20:b1:7f:f2:1c:c2:21:c9:9a:27:7c:12:87:aa:
         4b:f3:29:64:db:5d:ff:e8:f0:2e:dd:2d:2b:8f:02:6a:27:cd:
         0e:82:18:ab:ae:a2:91:95:fb:f8:cd:07:96:71:45:33:6b:e4:
         3f:ad:45:ff:0d:77:a1:90:2e:d8:cb:26:47:e7:ca:95:54:04:
         b5:ea:45:84:2c:65:44:ba:fa:68:1d:72:a4:97:b4:6e:d2:d4:
         87:9c:71:79:98:f6:b7:29:00:41:36:3f:38:fb:d6:dd:fa:d6:
         f5:1e:e2:33:ec:94:32:99:8f:ff:30:4e:3b:f0:a9:e6:d4:7d:
         c2:2e:fd:56:86:b5:cf:3a:af:3c:3d:26:34:35:5e:48:e1:40:
         4e:ec:5a:ad:e6:88:bd:ce:7e:26:fe:d6:80:8c:5e:4f:d9:e9:
         3e:67:23:b1:cf:0c:2a:b2:c7:2a:df:ef:91:50:fa:6a:4d:ed:
         73:ee:ed:43:0b:7f:65:e1:d9:ac:7b:f0:72:23:59:1e:3f:6c:
         e4:df:f1:ca:f9:65:0a:73:3c:19:54:86:ee:ba:d7:56:89:63:
         a6:35:29:49:ae:ef:0a:89:e9:98:b1:46:84:33:a7:6a:de:42:
         ec:3a:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:56:17 2026 by rpki-client