This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          Jhl8hevBs7f49LYLqVrE/7ofvotKomulznLl543wRnA=
Subject key identifier:   A2:E5:93:5A:C6:96:86:97:A2:D0:89:E3:71:FA:39:A1:32:3A:85:56
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       019BFE0B3C6D9711DDB8B7FDE0D06101335D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          1641
Signing time:             Tue 27 Jan 2026 06:01:47 +0000
Manifest this update:     Tue 27 Jan 2026 06:01:47 +0000
Manifest next update:     Wed 28 Jan 2026 06:01:47 +0000
Files and hashes:         1: 6JHRudMQv1ts55_v1uK9-5jgVw8.roa (hash: 8w4nPzLYmF84ovTkRJjHxfMW9Rc6qNpNxfP833exyBk=)
                          2: dhlvPCZXb2EkhMlEiuEIkVAgyec.roa (hash: 8F9BXDtvGEBkwGg2A4bRIhZ8Kc7R53vk/fY6rvM59Ro=)
                          3: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: i0OfBul9gCMb4jXaZbXNE+3YaLommV39xW+OBvkeW5w=)
                          4: mMfA_Od6bVQoe9XLziP1BQjaefk.roa (hash: sybseYJpXfIXWEJrTC3jNcJjadRJhSifMo8BV1Ei+q0=)
                          5: ybwCxgYuP6yL02aaO7mZuOTMAE8.roa (hash: TVTGU5or9DtUlyZroM126ho51dpCPSF51pljBNSRFfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0b:3c:6d:97:11:dd:b8:b7:fd:e0:d0:61:01:33:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: Jan 27 06:01:47 2026 GMT
            Not After : Jan 28 06:01:47 2026 GMT
        Subject: CN=a2e5935ac6968697a2d089e371fa39a1323a8556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:13:c4:3d:b8:4f:65:8f:ce:61:b8:5f:c5:
                    36:b6:2e:36:54:3a:67:f5:23:79:7f:08:13:87:0c:
                    a9:3f:02:05:24:ff:40:ed:95:d3:c2:bb:f8:93:31:
                    2c:cd:de:da:e6:da:28:ad:a0:62:fe:d0:9a:02:93:
                    1c:00:b7:e6:4a:3e:ea:f9:92:79:a6:90:14:4e:02:
                    98:5e:57:c4:b9:b9:e6:7f:5a:f4:78:35:25:cf:45:
                    b8:91:90:85:6d:74:96:c4:eb:53:d9:6e:ec:34:e7:
                    64:73:79:50:43:23:a3:1f:95:cb:14:f5:04:f0:37:
                    e5:bf:c9:f6:be:45:70:98:bb:57:52:1c:c8:d4:12:
                    ea:6c:09:a4:66:1e:68:30:3d:9b:5b:86:22:b9:e3:
                    a8:15:1f:5f:67:7a:bc:2f:06:55:7e:f1:86:43:5e:
                    57:99:05:8d:d5:f4:1c:18:8d:2f:25:51:de:bd:99:
                    38:89:89:84:5a:cf:b4:54:0c:20:3f:42:6c:30:1e:
                    b2:d4:2f:cc:0f:b3:d4:3e:0e:11:98:d0:2b:54:54:
                    32:e0:41:a1:ae:d7:6a:b9:69:28:63:ff:99:31:4d:
                    fb:77:5f:b5:d7:62:1b:ec:85:5a:4a:ec:5f:0b:af:
                    ab:25:86:0d:9e:43:a3:1a:55:75:4b:52:d1:1a:01:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E5:93:5A:C6:96:86:97:A2:D0:89:E3:71:FA:39:A1:32:3A:85:56
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:12:67:8e:06:11:87:b8:e5:f6:28:a3:6d:a7:c3:52:40:
         64:99:a0:b9:95:79:ed:dd:76:5e:a6:f3:5d:b3:cc:9d:83:00:
         cb:7b:9d:ab:41:4b:3e:07:b0:18:17:71:36:e6:5b:a4:bc:08:
         bf:69:bc:c5:1b:e3:0d:48:a5:8c:b1:7b:ad:01:c6:d5:3f:2f:
         55:5c:79:c6:92:e8:fd:78:0e:6f:c3:76:91:87:dc:1b:0d:42:
         ea:33:71:1d:2a:19:7a:23:04:93:bc:43:01:8f:e2:41:b5:79:
         69:2c:1f:b4:5d:cb:cc:00:6a:0f:e5:9b:76:6f:61:10:fc:3b:
         c6:48:1d:23:a5:38:1b:cf:39:46:66:38:be:8a:b4:c0:2e:34:
         88:be:ca:2c:7d:fc:55:0f:7c:44:f0:3a:61:82:e7:68:d7:dd:
         6e:d0:ea:e0:15:fd:f8:3d:48:f7:42:ff:cd:5d:0e:86:ed:fe:
         a0:ee:85:6e:22:6e:7c:59:a9:ce:c5:f7:b6:4b:27:46:c6:bf:
         5a:a8:c5:70:f3:8d:e6:50:55:76:49:06:19:cd:cb:60:aa:99:
         46:b7:ff:1f:96:6f:b6:62:97:d4:11:a0:78:e6:fe:49:ef:f7:
         c4:49:d8:83:bf:19:1e:67:3e:d6:f4:56:ae:f0:08:02:49:f7:
         01:7b:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:13:14 2026 by rpki-client