This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File:                     hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier:          5Sd8h4ySaTIbRYJODTwDThJNiFVy+2b5U9/0y2opdX8=
Subject key identifier:   59:D9:98:5A:1D:47:7E:FE:B5:1B:34:70:B5:B2:EB:CA:6D:2C:82:5F
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer:       /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial:       019BCFB15CC533451AF933B571E6A664F08B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number:          166C
Signing time:             Sun 18 Jan 2026 06:01:05 +0000
Manifest this update:     Sun 18 Jan 2026 06:01:05 +0000
Manifest next update:     Mon 19 Jan 2026 06:01:05 +0000
Files and hashes:         1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
                          2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
                          3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: bf6meEu3EN1Td+9vKk+4wCY4UyXaRJvnPwVionfGD4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cf:b1:5c:c5:33:45:1a:f9:33:b5:71:e6:a6:64:f0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
        Validity
            Not Before: Jan 18 06:01:05 2026 GMT
            Not After : Jan 19 06:01:05 2026 GMT
        Subject: CN=59d9985a1d477efeb51b3470b5b2ebca6d2c825f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:b1:66:6d:b7:ac:24:0c:68:2b:c1:25:ab:
                    f4:62:10:21:7c:5e:1f:6d:e4:fe:bc:41:ba:98:74:
                    07:ca:a9:7c:01:d3:aa:57:5f:15:19:e5:e6:ea:5a:
                    d6:a7:5c:97:b3:4c:a6:bf:a1:96:e3:17:e3:48:3e:
                    d6:c5:4d:4e:17:b8:d7:a8:ea:4c:fc:f6:f4:74:d8:
                    76:bc:d6:9a:c7:9f:65:61:49:e8:e8:b6:73:47:93:
                    c6:c3:16:9b:5c:17:8a:a2:c5:c8:aa:da:be:26:cc:
                    d3:2e:af:a1:e0:53:bb:2c:27:56:93:f1:5b:3f:eb:
                    2e:e9:2e:7b:96:75:18:67:75:25:f1:16:2e:08:d3:
                    ed:a2:b1:f5:2b:f1:2e:c4:5c:ba:f0:4a:86:84:44:
                    d8:31:7b:ed:86:6d:32:24:97:b4:ba:a4:ef:cd:b2:
                    b9:16:b8:77:40:fb:13:b9:ea:20:ce:f4:c2:41:ee:
                    52:90:b7:5a:0c:ef:97:0b:c3:61:d6:b7:7f:0e:91:
                    d1:19:df:3c:16:d9:76:14:ae:32:5f:92:af:06:19:
                    6f:2d:ce:c4:07:2f:62:2a:7d:91:3f:12:52:df:7c:
                    f0:16:4f:98:e6:80:fd:5f:e8:ab:bc:ed:d1:58:37:
                    b1:1a:02:ce:83:ea:4c:f2:e1:62:54:82:95:3a:64:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D9:98:5A:1D:47:7E:FE:B5:1B:34:70:B5:B2:EB:CA:6D:2C:82:5F
            X509v3 Authority Key Identifier:
                keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:d0:61:ef:f6:8f:eb:65:7d:4e:db:be:00:2e:4c:fb:18:
         3c:cd:b8:4e:eb:76:93:49:71:63:37:c2:72:6e:da:27:11:9d:
         c8:92:3b:e1:d5:2a:34:e2:06:3a:71:1e:6a:8f:9a:ed:8e:48:
         24:65:a1:e9:9e:a3:39:b3:00:5b:bb:84:ff:8d:35:4f:cb:3d:
         7a:19:6e:47:2d:f1:74:e8:b3:4b:65:49:37:af:64:d1:8e:8e:
         8c:78:4c:e2:3b:8e:ee:46:59:f0:f9:f7:c9:0a:ac:00:fe:7f:
         27:4e:39:8a:0b:e1:7b:4f:16:ac:f3:e0:7d:ab:99:2c:4e:2f:
         90:42:e8:c4:aa:83:25:01:11:4a:0c:e4:49:da:43:24:7f:b5:
         59:c3:d5:bd:cf:6a:36:f7:a0:20:49:76:7d:75:41:b9:0d:d0:
         48:37:98:7a:dc:fb:24:cf:f1:0e:8b:f4:0b:7d:15:fa:4f:1b:
         dc:93:06:22:20:36:2c:20:9e:48:5b:51:29:d1:6e:c5:38:71:
         1f:73:0e:dc:f3:79:02:c4:a7:d7:07:4d:bd:aa:a7:68:d1:01:
         f1:35:c0:96:e3:57:c9:38:1a:22:58:3d:c1:d9:65:98:71:23:
         59:2e:70:36:e0:43:25:d0:cd:52:fe:9c:91:99:1e:c3:ad:8d:
         cb:56:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 14:17:47 2026 by rpki-client