This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          2XZUWKt6Ud/jXPb6KhOeEOb1HOJYmssRXnKxFEOwauc=
Subject key identifier:   C5:50:38:B4:6C:CC:19:B4:DF:DC:69:85:F7:84:B2:81:27:84:13:09
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019C07B2CDC552DF1ABB8FB807FD69F11A98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          14C9
Signing time:             Thu 29 Jan 2026 03:01:24 +0000
Manifest this update:     Thu 29 Jan 2026 03:01:24 +0000
Manifest next update:     Fri 30 Jan 2026 03:01:24 +0000
Files and hashes:         1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
                          2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
                          3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
                          4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: xRppFZ6h+XUAnNTGL/8UGPUsY7vSWX68CSJ5CUYN/So=)
                          5: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
                          6: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
                          7: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:07:b2:cd:c5:52:df:1a:bb:8f:b8:07:fd:69:f1:1a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Jan 29 03:01:24 2026 GMT
            Not After : Jan 30 03:01:24 2026 GMT
        Subject: CN=c55038b46ccc19b4dfdc6985f784b28127841309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:01:20:8d:ba:74:78:78:78:fc:21:2b:86:
                    a7:f0:64:bb:0e:e4:66:76:c3:db:49:3e:5f:b1:a3:
                    71:16:01:ac:4a:a4:5c:00:63:3a:59:cd:0a:24:6d:
                    2e:42:41:d0:dc:34:35:e9:f4:38:63:d4:fe:00:5e:
                    6a:33:e8:15:7d:63:be:21:50:c4:cd:84:a1:c6:df:
                    98:5f:30:d6:c3:bb:01:d7:72:9e:6c:2a:88:00:a6:
                    68:13:05:48:8a:61:49:ce:44:8e:ab:93:99:95:05:
                    f3:88:01:c3:2b:74:ed:94:b3:df:74:61:79:0c:d8:
                    a6:1b:db:0c:bb:d4:04:b8:c9:08:0d:7e:e3:35:04:
                    0e:1c:0f:4b:9f:17:c5:11:c3:86:b0:e8:e4:57:87:
                    03:a8:1c:84:13:d0:5f:a4:fc:35:bd:0c:89:89:52:
                    dc:2c:cc:f0:e0:5c:5f:50:1d:08:be:b1:fc:27:57:
                    37:a3:eb:28:f4:03:6f:47:11:55:b9:60:fc:88:55:
                    c6:79:bf:b1:40:9c:19:bd:8d:f8:2a:d5:5e:bd:ca:
                    34:5e:a2:7e:55:18:f5:fb:aa:f5:19:12:a8:a8:c4:
                    f7:a3:1b:17:0f:e5:f7:83:0c:10:84:9c:74:b3:b2:
                    94:ea:b0:da:14:c3:11:86:77:19:7d:27:92:e4:ef:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:50:38:B4:6C:CC:19:B4:DF:DC:69:85:F7:84:B2:81:27:84:13:09
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:64:1b:64:08:6e:ae:49:a1:a2:79:e7:00:08:2c:64:10:db:
         95:4e:fc:0e:f6:0c:aa:4d:57:e8:94:e7:d1:ed:ed:93:6c:01:
         56:33:f8:83:a9:7f:62:bb:fd:49:d1:24:db:a3:8e:92:a4:a5:
         78:ce:b8:a3:69:c2:f4:90:68:d7:cf:83:8c:5b:4a:ff:72:77:
         c8:62:91:79:48:27:74:f9:4a:87:3b:ce:ac:49:44:85:c6:de:
         02:a7:77:30:d6:88:ee:2c:e1:07:a8:4f:98:1f:54:80:9c:70:
         5d:a4:c5:7e:83:bb:7c:9e:5b:bb:e6:41:27:20:4a:cc:8d:c5:
         7b:0e:d9:61:5d:8d:d6:55:35:e7:9f:d5:85:ff:53:f6:75:03:
         0d:f2:34:ec:85:09:65:96:33:bd:99:2d:77:7b:3e:5d:aa:30:
         a2:b0:fe:8a:12:03:c7:46:c4:5c:00:c2:f3:72:57:7f:58:21:
         e3:3f:2d:62:7c:30:d5:72:da:f0:96:dc:c2:c1:b9:66:28:c1:
         5d:5b:9f:c7:1f:d3:c9:e0:16:fc:fd:08:7d:5d:02:07:cf:30:
         5b:48:53:dc:35:ff:de:86:e3:79:53:60:cc:a3:37:84:2d:23:
         39:67:73:01:77:2b:97:64:84:e3:7b:19:2b:2c:59:58:c5:2f:
         d4:3d:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 06:17:48 2026 by rpki-client