This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File:                     hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier:          ahSnFCJ5IgsCu7hFXAHpird9yKIJLRLIgD1kxeSWShs=
Subject key identifier:   0D:AB:94:85:45:A2:F2:7E:DF:22:BD:3A:EC:BF:73:7A:1D:F5:65:3C
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer:       /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial:       019C1B3926EDDCE799D0DDA0F0864D0CFDC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number:          013B
Signing time:             Sun 01 Feb 2026 22:00:56 +0000
Manifest this update:     Sun 01 Feb 2026 22:00:56 +0000
Manifest next update:     Mon 02 Feb 2026 22:00:56 +0000
Files and hashes:         1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: g6G6Yl5HinThYgBWhhbthLEGLWdxfHUMzXj0v/TSL3g=)
                          2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
                          3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:39:26:ed:dc:e7:99:d0:dd:a0:f0:86:4d:0c:fd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
        Validity
            Not Before: Feb  1 22:00:56 2026 GMT
            Not After : Feb  2 22:00:56 2026 GMT
        Subject: CN=0dab948545a2f27edf22bd3aecbf737a1df5653c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:be:66:03:4f:f7:4f:57:f2:e9:0e:87:dd:
                    be:bb:de:96:e3:17:f9:cc:69:e3:08:5a:11:d1:60:
                    0e:7c:16:cf:15:b3:e0:f0:de:69:53:26:31:7b:5d:
                    6c:30:3f:05:54:28:a0:1a:8b:4a:1b:9c:c3:ed:8d:
                    aa:96:ee:96:40:af:b7:78:7f:84:0a:a8:b3:4d:fa:
                    bf:d4:95:cd:3d:0c:30:af:3a:6a:e9:46:af:9f:fa:
                    02:e8:8e:9d:56:5b:75:4d:de:99:2a:b2:b2:42:c1:
                    2c:ff:2e:b3:b3:be:47:a5:df:fe:55:ff:4c:8d:a2:
                    a7:57:b1:63:a5:81:30:f3:fa:e5:b8:c7:e3:85:85:
                    dc:02:b0:7e:1e:eb:78:65:e6:84:a7:02:48:49:c5:
                    90:0b:e5:02:03:a1:a7:23:8e:0e:29:ef:5b:9a:bb:
                    40:c4:4a:3e:af:15:29:0c:6b:a7:e7:5b:c4:28:e7:
                    d0:b0:ca:0b:f5:15:6a:8a:35:a1:5d:b0:cf:ed:cb:
                    25:78:7d:de:8e:f0:5b:87:c3:02:da:29:b4:03:63:
                    ff:49:4d:64:86:2c:99:5c:31:bf:67:d7:23:4d:05:
                    fc:f5:7e:da:3a:cb:b1:41:a7:35:90:fe:ab:77:52:
                    9c:e7:ed:b2:eb:de:91:81:8a:59:c1:03:c5:6e:d6:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AB:94:85:45:A2:F2:7E:DF:22:BD:3A:EC:BF:73:7A:1D:F5:65:3C
            X509v3 Authority Key Identifier:
                keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:79:bb:54:04:e0:4d:1d:ca:e0:21:c1:40:0d:5f:1c:52:
         cf:52:64:cb:f7:54:2f:23:19:26:ad:a2:8e:69:0c:1b:80:df:
         df:f4:5b:cf:29:89:65:9a:5b:23:ba:cb:96:c8:32:29:be:85:
         b8:ea:4e:a1:be:5c:97:27:e9:a1:5f:1d:8b:fd:0b:8f:d2:98:
         0f:87:94:b4:a0:4c:8b:bd:0e:eb:0e:f2:aa:8e:93:cc:d1:54:
         3e:92:8e:a8:b0:58:51:c9:18:6f:3c:30:de:d3:a8:04:12:ec:
         0e:69:e6:fc:98:ee:7c:f6:d3:03:88:a2:f9:da:4d:30:a0:ba:
         d2:af:aa:90:28:78:ed:99:3d:96:30:b7:10:cc:57:0a:46:c0:
         33:85:4a:bf:e0:ed:b5:fe:50:6c:4e:62:95:27:db:e5:88:01:
         b1:cb:c0:e2:79:ec:c7:c2:a4:ee:2d:92:40:ee:4d:8a:bc:c7:
         be:ab:c5:a5:b6:25:2e:05:77:34:47:ad:f8:73:05:07:78:26:
         bf:98:02:bb:f6:1e:66:fa:93:2c:73:a7:ed:d4:84:e5:27:de:
         0e:8e:9e:08:33:29:62:c2:18:3f:a2:72:94:ab:f1:47:8c:12:
         12:f7:96:c7:e7:82:1a:9a:2c:ab:b0:88:86:7c:2b:46:f8:58:
         4b:fc:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:31 2026 by rpki-client