This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          UNcUrSTmFqIIIZPTIcWdPyV7OBI5ctlaMdNEezNWEWE=
Subject key identifier:   A1:97:35:62:DD:FF:75:4A:37:12:7C:7E:22:9F:89:95:6A:D2:87:C5
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       019C2CD1E1EA706762048B3FDE3D17B5EF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          160E
Signing time:             Thu 05 Feb 2026 08:01:18 +0000
Manifest this update:     Thu 05 Feb 2026 08:01:18 +0000
Manifest next update:     Fri 06 Feb 2026 08:01:18 +0000
Files and hashes:         1: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: qJ4fc8wFJ8aqTWHOfqkXU+yvqNcaGYMcMVdhYhX5zyk=)
                          2: CtXB1y_WiGwg9xFRHui6XM2zZos.roa (hash: akg6U1CtXak5LkwHmU54KWXlOWQ+wwDwzm5wZMHKxY4=)
                          3: e6PpS1e5NlOWchpSmQTjpUAhjek.roa (hash: VTTrgOOXJ+TNjub4/DbQZh7PcZakQyvp5nrmcjU97tg=)
                          4: nhHb3BbrnrJ7gnySXYLgpTF0_N4.roa (hash: 5BeBHQUGbG/OpKaLkyfVStYZf7js8qtgIamUEyYDRAs=)
                          5: tFxjCwXyMaEt_QnMeC7XIYXxC2w.roa (hash: PxrGTWaTcjZcpK9gCVSwzRCuIdE/O6cOmfGjhOCu2XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 08:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:d1:e1:ea:70:67:62:04:8b:3f:de:3d:17:b5:ef:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Feb  5 08:01:18 2026 GMT
            Not After : Feb  6 08:01:18 2026 GMT
        Subject: CN=a1973562ddff754a37127c7e229f89956ad287c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:31:60:11:8c:d6:70:37:11:dd:0b:90:3c:
                    15:4b:d8:46:57:40:5f:56:45:e1:05:ea:69:90:00:
                    dc:02:8b:d5:09:94:65:2b:d4:7a:ad:4c:a2:c4:0c:
                    40:f0:bc:f8:d1:2d:80:ef:ab:e2:09:b8:a0:7e:57:
                    ee:58:40:d3:bb:48:97:d6:0a:12:16:15:cd:07:b0:
                    3c:01:28:f4:2c:49:0e:7a:6d:9b:f7:cb:c2:09:6b:
                    69:ef:08:59:d3:ef:db:8d:80:7f:9d:2b:ed:73:6c:
                    b8:f4:72:be:4e:d7:43:27:16:40:b9:e5:fa:a7:41:
                    9b:a0:5a:0b:af:d7:f5:8e:9a:65:7e:9b:7c:b8:c5:
                    92:ef:b9:07:0c:4f:fa:e7:62:35:25:ea:c6:6f:50:
                    10:b0:9d:ba:11:56:8a:bb:3c:eb:fa:64:93:46:cf:
                    8c:58:8d:21:f0:3c:d4:58:a5:5a:86:9e:c5:69:2b:
                    43:60:68:9a:7d:20:e2:fc:cd:58:d7:36:b9:9e:6e:
                    61:3d:c3:06:36:6f:a6:fb:a6:2f:6c:f9:80:c3:47:
                    b4:e9:69:d9:a9:be:42:af:26:5d:76:ac:bd:47:7f:
                    ee:46:f6:52:98:cc:ab:f5:12:72:1d:b7:c3:58:ba:
                    e4:e2:8f:46:36:c7:67:12:17:b1:6b:c9:28:79:7d:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:35:62:DD:FF:75:4A:37:12:7C:7E:22:9F:89:95:6A:D2:87:C5
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:03:74:11:08:17:f6:b3:aa:0e:05:ad:79:1a:47:6c:80:
         b3:6a:f0:63:47:fe:d9:1f:7b:d7:03:39:2d:58:de:fb:35:fa:
         d9:95:5f:16:35:88:9a:f0:58:7f:6b:cc:ad:a3:2f:9d:69:89:
         68:6f:4c:e2:12:00:8f:fc:ad:7f:af:fa:1d:a7:6a:e0:d7:7b:
         b9:05:8d:6a:30:6b:cc:99:de:82:ca:d0:63:99:ad:23:ff:1f:
         fd:bc:0e:75:3b:16:11:ee:d3:d1:8c:c2:a1:c3:bf:df:cb:98:
         06:3f:87:cc:d0:f4:aa:98:a6:44:be:90:b3:b0:87:b7:12:10:
         d1:ed:24:ff:b8:05:46:93:92:1c:9c:94:2c:e3:09:1a:cc:2f:
         0b:a8:af:12:e5:82:71:c8:8a:cb:34:25:75:36:4c:f7:6c:a9:
         44:97:ef:f0:e4:2a:15:3e:96:da:bc:37:e2:ba:1b:fa:42:9d:
         9a:4d:c4:c5:f5:e5:a8:55:ce:87:19:21:7b:fb:51:19:43:25:
         fb:b8:c5:bc:50:5b:42:3f:ee:68:79:c8:12:3c:4b:a7:bb:10:
         89:5a:d9:ee:b6:48:54:9d:c7:58:a0:ec:4e:22:20:c2:1d:ce:
         ff:0c:93:86:8f:4d:e6:c7:3a:3f:13:b0:91:ae:fe:4e:3e:81:
         71:23:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 18:30:04 2026 by rpki-client