This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File:                     1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier:          /O06NZtVMqkbHdt2tAFTtPdVAVN0HHvk2yRMepsjC44=
Subject key identifier:   BD:26:F8:E0:C6:04:55:44:84:98:FC:12:7A:FD:E9:13:FA:00:27:AF
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer:       /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial:       019BFE417F4EA745903ECDF44A60123A77E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number:          158D
Signing time:             Tue 27 Jan 2026 07:01:03 +0000
Manifest this update:     Tue 27 Jan 2026 07:01:03 +0000
Manifest next update:     Wed 28 Jan 2026 07:01:03 +0000
Files and hashes:         1: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: VrJqfVtC8lkS6wazDxhRy3VbKuWnfCu/bG6IKMnNw2I=)
                          2: PUUwIBjC303THXtn2K3lOKUKhuI.roa (hash: HhMLqxayKaNmF7vR/Oe2S/c5VG2M+qGYz3fgytaRJ/8=)
                          3: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (hash: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:41:7f:4e:a7:45:90:3e:cd:f4:4a:60:12:3a:77:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
        Validity
            Not Before: Jan 27 07:01:03 2026 GMT
            Not After : Jan 28 07:01:03 2026 GMT
        Subject: CN=bd26f8e0c60455448498fc127afde913fa0027af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:60:82:b9:4c:b0:ed:0a:4a:fc:bc:7f:7e:
                    b7:7b:08:13:e5:de:12:68:65:39:bd:7c:4a:74:39:
                    73:13:fe:8b:8b:c9:e4:50:81:c5:23:52:bb:dc:57:
                    df:89:63:2f:09:12:9b:0a:db:07:14:9c:3d:20:56:
                    c7:ac:02:a0:52:6e:cc:28:db:fa:5e:8e:55:d8:9a:
                    14:3e:ad:2c:86:f6:d0:b6:4d:91:24:aa:56:af:bb:
                    04:7a:8c:d3:f0:01:1d:ce:3c:96:1e:b4:9d:94:9d:
                    43:65:78:a6:e7:85:a7:7e:d3:27:42:53:32:aa:de:
                    be:23:26:b1:3d:63:80:6f:82:14:7b:96:1b:b5:fa:
                    21:14:ee:93:50:22:02:68:64:76:24:e9:0e:39:a1:
                    09:ff:a6:11:04:04:db:49:60:b1:61:3c:df:19:42:
                    cb:f0:6c:d1:54:a4:a5:71:4c:af:e8:e4:60:4c:ea:
                    96:5b:14:cd:38:34:85:68:2b:dc:c2:69:5a:b3:10:
                    b4:1c:df:4e:71:9f:2f:71:cb:3f:9f:c1:8a:0a:d1:
                    53:c9:9f:a9:b6:41:a0:74:ce:6c:93:0e:31:db:af:
                    7f:c3:df:d4:b5:80:78:ff:96:90:69:34:b8:83:4a:
                    6b:42:f4:c7:eb:39:4a:97:4d:0b:d9:cd:ff:6c:65:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:F8:E0:C6:04:55:44:84:98:FC:12:7A:FD:E9:13:FA:00:27:AF
            X509v3 Authority Key Identifier:
                keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f5:06:7c:54:f6:5a:06:3f:8c:bf:d7:a4:c9:57:d3:8e:81:
         74:f4:68:4e:ab:54:4b:e2:99:06:56:31:e6:a3:53:71:92:8c:
         fd:bb:ce:3b:49:aa:32:6b:b5:b1:04:5b:7d:28:ea:66:7a:61:
         d4:62:a3:e3:7a:94:19:e3:fc:30:3e:2f:a5:a4:f1:94:71:90:
         dd:e5:91:04:89:6c:36:e8:da:07:94:c1:b9:38:8a:4e:c3:a3:
         56:fa:31:b7:c3:34:06:ed:79:fc:e6:1c:ce:1f:68:b0:e9:bd:
         06:9e:12:a5:0f:53:db:be:ee:41:94:eb:c2:5f:e8:54:f2:a2:
         ee:71:54:33:09:d1:42:9f:b9:e7:5c:4a:c2:20:5b:ee:55:67:
         f8:79:88:a5:b4:f9:ed:a3:dd:18:75:44:57:13:99:fa:5b:36:
         05:4d:60:8d:ee:47:96:c4:23:11:d8:66:f2:6f:ec:f8:32:6c:
         c4:76:03:bb:f6:57:8b:07:0f:15:42:b9:50:5c:d1:3d:93:9a:
         7b:59:aa:5e:cf:ec:d4:f5:58:3b:f1:e7:fe:c9:63:83:60:23:
         84:46:2c:ac:f0:d9:8e:7c:ff:dc:52:3e:d9:01:4c:c0:21:11:
         9b:e5:89:b3:4f:1f:dc:aa:a0:a4:d4:a4:e1:e6:dc:66:9f:1c:
         9a:08:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:01:16 2026 by rpki-client