This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File:                     HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier:          PropUMQRwQSKCWccyf+1IQyHMDKawtX+X1Fa64E1LyU=
Subject key identifier:   9E:D7:0A:E7:96:55:5C:99:59:C6:7C:E5:27:0E:F3:77:16:A6:EF:E6
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer:       /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial:       019C17CA2A4B103879D89554E68E1D2BF7FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number:          14D2
Signing time:             Sun 01 Feb 2026 06:00:50 +0000
Manifest this update:     Sun 01 Feb 2026 06:00:50 +0000
Manifest next update:     Mon 02 Feb 2026 06:00:50 +0000
Files and hashes:         1: 7tr02EpUIgM-HOku4hUZ5kLPFzU.roa (hash: KnxkjjUpMVBgQObR9BIU6ZkMGqLPWpaw72b9yunDWDA=)
                          2: 9hVZarMZXXFecBErtuPkYLQrriE.roa (hash: KsiiLeHicnzuMLdpx8BniCnY9e3C72b9G03ZzbEor1A=)
                          3: 9m20uAAFdgNoVQH3076gaYQmYYU.roa (hash: ly6A2Lm/ZdDnqWIOLhpR56go+OLBASNK0cUewK9eTjc=)
                          4: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: zQZ+1bEISd+rawyU1l/jVqkEHCiWf7FTrO6tsZHGLWg=)
                          5: NGlmkCgm01T6khNRIi3SlPjUhn8.roa (hash: Ep6augckrz7DoH277AG4kWwV5ufRUKmF/zoXSa8Kack=)
                          6: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (hash: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU=)
                          7: QDsntjcOt3fxAoY-_3bsGRuRxHo.roa (hash: 8Wg5bkOdvAsky6YfIg1CDs57PHLp5vOyQI0z4fcD3vE=)
                          8: cOY-DC2HVK8oGsGuJBqrFqkU9C8.roa (hash: MwPd12qekQ7oRDjQ5MzO5S3l6bIuuruJk/odjgKUjg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:17:ca:2a:4b:10:38:79:d8:95:54:e6:8e:1d:2b:f7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
        Validity
            Not Before: Feb  1 06:00:50 2026 GMT
            Not After : Feb  2 06:00:50 2026 GMT
        Subject: CN=9ed70ae796555c9959c67ce5270ef37716a6efe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:18:54:81:c9:6f:06:36:cb:15:94:b1:ed:
                    ce:94:33:b3:6f:32:70:59:c9:bd:e7:b4:9b:5e:4f:
                    a1:d5:40:f5:be:e6:ab:0c:7f:b5:64:49:3c:0a:fc:
                    2f:26:56:45:32:d9:e2:35:f2:bb:d6:48:d5:db:89:
                    dc:de:6c:fc:fa:36:70:72:f3:29:4f:2c:ca:6f:d6:
                    5c:84:be:e7:cf:d3:2e:7e:68:c1:45:ea:5a:dc:e7:
                    7c:ce:06:90:52:1c:21:eb:a5:73:ef:5e:7e:c7:1d:
                    1f:f5:17:45:1c:f4:db:3b:8f:85:9a:2c:a1:99:a7:
                    48:18:2f:3f:a1:9b:ac:80:c0:82:7b:1c:3e:79:92:
                    73:5a:b2:0e:29:42:bf:88:64:00:77:38:87:65:77:
                    24:6b:75:88:ec:c8:50:7d:b5:8f:09:b0:c5:04:e0:
                    c1:91:6a:8b:55:e1:c6:5c:e7:9d:95:ce:e3:be:f2:
                    a4:e4:cd:d7:d0:b4:31:57:93:74:14:e1:78:02:6b:
                    ed:92:34:47:9c:ae:9f:82:16:0c:51:24:9d:e7:7a:
                    b4:ee:6c:74:8d:e6:b5:9c:72:6f:9e:f3:a2:fe:0e:
                    cb:ec:2a:66:ae:d6:8c:e0:de:35:26:af:5b:dd:d2:
                    7b:d5:aa:20:85:ee:33:58:b2:14:fe:a5:16:db:7f:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D7:0A:E7:96:55:5C:99:59:C6:7C:E5:27:0E:F3:77:16:A6:EF:E6
            X509v3 Authority Key Identifier:
                keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:73:b7:5e:2d:2d:84:61:7b:12:96:ba:c7:af:d8:31:28:24:
         e6:24:21:3d:c3:0f:6c:93:6b:b4:0c:90:eb:93:69:31:68:03:
         3e:09:8e:9b:7e:0d:c1:dd:7c:e4:e3:0b:83:01:d0:6a:f2:06:
         ad:6f:d2:c1:61:8b:d3:9b:ee:f3:ff:0e:9d:bd:21:8a:63:70:
         fc:f5:27:ba:2d:dc:36:9c:07:01:78:29:9b:42:90:1c:eb:b7:
         8e:55:0f:95:e4:a4:d9:63:13:c2:7f:5f:e3:f1:a1:d4:58:e7:
         b0:be:c7:52:14:ec:72:f3:f5:0f:d3:6c:98:a0:fa:56:4a:a8:
         84:49:12:07:a8:d9:77:3e:88:d6:16:d5:37:35:c2:6f:fe:3c:
         e5:25:16:23:20:b8:d9:09:c4:36:ae:e5:06:32:07:48:8b:a0:
         97:8b:c5:e9:de:a5:e4:d2:76:e3:49:5c:12:10:46:a2:b6:99:
         84:f6:94:ad:68:42:60:80:0e:e8:a7:84:3e:b2:99:88:ce:4d:
         8b:b8:49:6a:82:d6:04:63:b8:ec:9c:ca:f9:e0:96:a5:8d:2e:
         c9:08:53:ed:8b:a4:11:cf:ba:7a:2c:a8:c9:24:bb:12:29:de:
         f7:92:18:4a:8f:e2:9b:34:da:45:7f:c4:46:61:36:e7:29:4a:
         24:2f:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 1 11:51:41 2026 by rpki-client