This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          VtcjWtXUbHDN6LA/BUmbuNiHh/2FBCCPaWGkKYRY9Ns=
Subject key identifier:   B9:3C:03:2D:84:12:69:86:68:D6:64:97:66:04:87:A8:84:E9:CB:57
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019C1F836B23FBE72465AD123D02D0A04B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          14D6
Signing time:             Mon 02 Feb 2026 18:00:32 +0000
Manifest this update:     Mon 02 Feb 2026 18:00:32 +0000
Manifest next update:     Tue 03 Feb 2026 18:00:32 +0000
Files and hashes:         1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
                          2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
                          3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
                          4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: 3pJeY++KikF4a8Iy4LgghDIqBanrIDlmL50qvDsa3NU=)
                          5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
                          6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
                          7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
                          8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:83:6b:23:fb:e7:24:65:ad:12:3d:02:d0:a0:4b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Feb  2 18:00:32 2026 GMT
            Not After : Feb  3 18:00:32 2026 GMT
        Subject: CN=b93c032d8412698668d66497660487a884e9cb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6e:a5:de:2c:d2:b0:2c:04:1d:32:da:d3:b8:
                    6b:98:cd:39:c5:16:47:32:a8:b8:72:94:c6:7c:d3:
                    0c:3e:8a:f7:14:7a:b5:c8:bd:22:eb:d3:5d:93:70:
                    b3:59:cc:e6:fc:5d:8d:c8:5c:a7:b4:0b:4d:a6:aa:
                    57:19:1c:2e:9c:9c:cb:5a:2e:f3:f2:1f:cc:d3:56:
                    5b:16:01:51:f2:c8:4d:ed:38:d9:e9:1b:bf:57:59:
                    39:3d:34:40:20:1b:03:be:21:60:4b:89:29:85:c0:
                    84:82:21:ba:29:f1:7f:0b:c9:31:ca:46:97:a3:6b:
                    31:68:43:03:6f:7f:44:d6:09:e9:54:39:00:77:14:
                    27:65:1e:55:95:8b:c0:52:9a:f7:2f:48:75:5c:80:
                    06:eb:0e:1f:fe:c9:70:82:c9:de:2f:b5:b0:e5:ba:
                    5d:b9:41:a3:14:d7:6d:dd:05:a1:70:f2:90:01:af:
                    6e:db:5a:8a:c2:23:a8:b8:9d:18:87:64:f6:63:b0:
                    da:94:3d:20:4e:69:86:03:6f:0a:61:38:5b:e0:a9:
                    0e:5c:c7:43:d8:d4:fb:ac:61:49:2d:7b:44:e9:4e:
                    e4:d0:c8:df:ce:e1:67:13:43:92:14:34:d6:45:f8:
                    a2:49:d8:b8:8a:1a:06:1d:4a:06:b8:99:f6:3f:3d:
                    42:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3C:03:2D:84:12:69:86:68:D6:64:97:66:04:87:A8:84:E9:CB:57
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:93:2d:7d:05:10:e9:b9:47:4f:74:29:4d:c1:e4:b9:ec:cf:
         17:cd:b8:74:74:59:38:0b:54:23:a1:2f:09:ed:35:98:09:92:
         ad:9a:e3:be:e5:cd:b2:ad:7f:fe:cc:b9:50:10:5b:39:8a:24:
         e4:c4:64:a1:34:b0:b6:06:2c:34:7b:0c:f8:46:bb:b9:8a:c1:
         87:d1:08:60:ef:46:b1:0d:00:50:e4:d9:ac:b3:2f:74:0b:f6:
         37:bc:ed:d7:be:46:76:49:ac:55:26:21:98:9f:77:ab:0e:aa:
         93:48:ab:20:5c:d1:57:d2:53:31:81:ef:c7:33:2e:75:0c:ba:
         de:50:bd:55:7a:28:1c:69:66:fa:63:7c:08:fa:66:53:48:47:
         e4:47:16:63:97:6d:c4:05:3a:05:f3:ba:85:89:f0:07:cc:96:
         51:76:57:42:9d:de:b2:44:a6:a9:77:4f:19:d4:1a:d0:ae:58:
         9a:0a:7d:28:78:50:2c:19:2f:32:3e:56:8c:95:01:c3:cb:58:
         46:23:c5:b4:a2:bb:90:59:7a:9a:84:b2:f7:87:e7:01:b4:50:
         ee:21:c2:98:b7:15:b2:51:68:42:24:91:9a:3c:fc:64:c5:24:
         b2:a2:1b:4c:f0:8e:74:69:d4:91:18:4a:d2:99:f4:91:05:62:
         92:67:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 03:04:35 2026 by rpki-client