This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File:                     hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier:          hU49WYSkrF5dxYCwG8eZ+FhagNj6VD1tASoGhDI4os0=
Subject key identifier:   01:32:5E:84:A8:16:6D:F0:54:D6:D6:76:8D:2F:0E:56:27:F2:65:81
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer:       /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial:       019BFB76F6A7D4FE5729F27EECC22247576B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number:          0BE4
Signing time:             Mon 26 Jan 2026 18:00:36 +0000
Manifest this update:     Mon 26 Jan 2026 18:00:36 +0000
Manifest next update:     Tue 27 Jan 2026 18:00:36 +0000
Files and hashes:         1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
                          2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
                          3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: 90gzpf54lJRSHJn/1gfrmQRqHKQMCJxQoSByIWuSNN4=)
                          4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:76:f6:a7:d4:fe:57:29:f2:7e:ec:c2:22:47:57:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
        Validity
            Not Before: Jan 26 18:00:36 2026 GMT
            Not After : Jan 27 18:00:36 2026 GMT
        Subject: CN=01325e84a8166df054d6d6768d2f0e5627f26581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:80:1d:a9:4e:ea:e9:cd:d0:66:29:b9:cb:
                    7f:b9:5f:c6:91:fe:6e:ea:21:ba:5e:fe:d1:f5:b8:
                    c1:47:64:4e:56:bc:5d:29:43:dd:c8:5b:f4:0b:e4:
                    3a:ff:db:9b:bb:76:28:4a:72:33:ff:ff:0b:ee:e5:
                    3d:10:7f:6c:10:b8:7a:25:79:f0:b3:b1:5b:08:5f:
                    26:ab:b3:9d:38:04:6c:24:f6:2b:e1:d9:36:3a:2f:
                    3a:11:d2:84:55:8b:94:e2:54:e8:10:6a:ce:20:64:
                    8d:fe:35:08:1f:aa:70:ec:3e:cf:4c:32:c7:12:fa:
                    44:4b:0e:47:b4:27:3d:16:21:24:43:24:b2:ae:49:
                    f1:95:b8:3a:d8:d3:06:42:20:43:19:76:f4:8c:a4:
                    dd:83:05:21:f1:ac:1f:15:aa:5d:6f:ca:82:de:f5:
                    1c:ed:ca:61:f6:4a:da:6c:82:85:23:46:b5:79:1c:
                    8f:7b:27:70:f8:80:f9:25:9b:21:08:e6:0e:86:c7:
                    b7:1c:e6:c7:d0:58:44:88:01:f0:1d:de:60:80:05:
                    8a:68:11:1e:21:ef:36:68:22:e8:d9:41:bd:ec:fa:
                    6f:3d:f7:f9:d1:08:21:99:56:0b:cf:d7:48:b4:78:
                    29:f2:f9:87:5f:12:8e:84:29:0a:1d:6f:3e:c1:99:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:32:5E:84:A8:16:6D:F0:54:D6:D6:76:8D:2F:0E:56:27:F2:65:81
            X509v3 Authority Key Identifier:
                keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:24:7a:42:f1:55:53:53:09:34:4d:9b:d5:7e:81:75:43:f1:
         bf:3f:6e:2c:13:cc:3e:8e:71:25:e7:03:72:68:02:79:62:bf:
         af:83:14:24:dd:dc:5e:de:b5:b2:4f:80:b7:03:66:bd:d4:d5:
         80:3d:92:54:e3:70:d8:f5:a0:2f:88:75:19:44:82:7d:33:29:
         c6:01:b0:05:be:62:cb:80:67:f2:23:10:f2:55:71:36:44:8e:
         49:23:eb:28:b9:6b:05:27:d2:4c:81:e6:89:97:3c:f5:a5:12:
         88:40:cc:94:9a:90:b9:e3:2f:33:55:e8:33:ec:de:ee:8d:25:
         e8:35:b2:22:60:c2:5d:6d:4e:17:77:6f:8a:f4:8b:ab:d9:b9:
         aa:68:23:02:5a:92:48:07:e2:02:18:37:13:61:e0:07:02:24:
         84:46:1b:48:35:3a:38:dc:fc:04:65:13:c2:82:0e:91:4e:00:
         d3:44:33:b2:a2:92:9e:de:68:75:a8:da:a4:45:77:3a:cc:92:
         c0:a4:03:bc:83:68:00:48:cd:dd:f0:ff:d5:bc:48:cd:93:d1:
         1c:27:6b:69:b3:0f:6f:0d:f2:d1:9b:a4:88:a0:ad:a6:7b:37:
         0a:0d:3a:64:c7:86:63:89:6a:9d:44:3d:6a:01:63:e1:01:d5:
         aa:83:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:29:23 2026 by rpki-client