This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          0G/wM+u667EmyaIxWIBClx8Ghz8MuS7Jb0SavLp0BFU=
Subject key identifier:   3E:50:DB:54:5F:6D:5E:7E:B4:4C:DE:B0:58:6B:EC:6E:40:FC:95:62
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       019BF6F5EAF0A1D3C95C49B1B46A3B428A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0D95
Signing time:             Sun 25 Jan 2026 21:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:10 +0000
Files and hashes:         1: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (hash: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: eGH1Y6fD8cyW2FTbPYveXTAuz2d3DT1epRmiOeXOEQo=)
                          3: KLpxcziAIHIxQSEYpd_o6PvM4vE.roa (hash: itbhxLzSGakvliHpbibpLq6gl91E3V9yH4QUfsh7/Gk=)
                          4: Sgc_Gnaj8DBJHADUAweAsgC-9Hs.roa (hash: SsfE892wv31doCM1yCrfDrfn/qQfmDFe4kz7AyxvqoI=)
                          5: TA_UQQnUzcyb4z4VNBXIFoSiKOQ.roa (hash: 5coZuaEZYCG1SDhEG5622pcijd3TmgMAYuwLwdnG3Xk=)
                          6: ThxZ_zz0qI-5X_9-MC23lXGeW4c.roa (hash: v+wF6wFf27Ypcfgbcy3yS1RY4Bsxs0fkYYHyrIRuiQE=)
                          7: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (hash: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:ea:f0:a1:d3:c9:5c:49:b1:b4:6a:3b:42:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Jan 25 21:01:10 2026 GMT
            Not After : Jan 26 21:01:10 2026 GMT
        Subject: CN=3e50db545f6d5e7eb44cdeb0586bec6e40fc9562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:8b:9c:1b:3f:f5:9c:db:29:60:0b:f4:6f:
                    e2:e9:e8:ad:f7:c9:0b:ed:86:69:9a:94:cb:41:dd:
                    d2:b1:5e:50:c7:c0:a7:04:14:8a:02:de:77:3a:49:
                    87:37:0b:ba:df:49:fc:96:ae:4a:a0:37:40:61:87:
                    49:44:f6:a1:cd:5b:60:be:64:0f:ba:59:b1:11:1b:
                    de:06:c8:c9:fe:25:21:59:27:84:ae:b9:97:37:87:
                    bc:90:90:0b:d3:e6:92:fa:ae:aa:2e:c3:3a:f0:a8:
                    d5:ea:24:61:10:ac:33:9e:be:9a:c5:b6:f6:27:54:
                    bd:2c:27:4c:95:5f:8b:e9:47:a8:fd:f8:aa:a6:39:
                    e8:01:d2:15:09:01:88:a3:83:97:50:2e:aa:40:da:
                    c1:6c:a0:c2:b9:0e:b3:72:56:17:e5:f7:fb:8d:fa:
                    f0:d8:33:8e:11:a0:a0:7d:0f:12:2b:18:d9:89:8a:
                    56:09:d5:42:15:95:ed:15:4b:c7:19:6f:a5:36:ad:
                    77:66:c4:ec:5f:86:b2:4a:4b:88:cf:cb:ec:11:d6:
                    40:0b:92:57:36:fb:63:17:ef:b9:aa:a6:93:85:88:
                    c3:93:23:44:5f:2b:dc:43:0c:e5:42:87:34:bc:d3:
                    56:80:94:44:16:bd:51:76:f6:32:19:a6:66:6b:a1:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:DB:54:5F:6D:5E:7E:B4:4C:DE:B0:58:6B:EC:6E:40:FC:95:62
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f1:12:63:35:b4:f5:a2:3a:a1:85:07:3d:dd:04:8a:05:d3:
         d3:26:f2:66:78:be:2a:a2:81:64:3c:a6:46:73:d0:15:ca:04:
         71:ad:e5:de:92:98:1e:63:d2:07:7f:16:25:6d:4a:6e:bf:cc:
         ea:2e:e4:1e:e9:1c:08:14:11:6a:f6:55:5a:48:de:04:a4:2c:
         2a:50:69:89:c0:a0:e1:6a:09:7c:fe:2d:46:0a:c5:2b:b9:0f:
         62:e2:3d:4e:35:d2:50:af:b3:07:9b:15:a5:81:6f:c9:e6:a6:
         8f:cb:cc:1d:ff:aa:9d:6e:e2:c4:5d:28:aa:d9:6a:6f:b2:47:
         09:0e:50:81:b2:62:89:ae:28:bc:82:15:c7:28:d5:86:60:22:
         4f:c3:44:19:a8:49:63:ff:1c:91:6c:44:23:02:c6:aa:3b:4c:
         23:49:16:d7:da:62:3c:e4:ed:e3:95:20:63:43:e3:63:50:6f:
         32:2d:5d:04:df:f7:d1:ca:ef:e9:0a:fe:bd:5d:d2:c9:e0:05:
         bf:c5:ce:7b:be:aa:4d:ce:16:6e:4b:e5:2b:d3:29:96:9d:a6:
         41:ed:fb:ab:4f:08:89:7e:03:10:0f:65:96:08:d1:ad:2a:03:
         fa:52:78:ab:3c:7c:3a:be:e9:8a:95:41:1b:55:a5:ac:43:7e:
         84:c7:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:47:30 2026 by rpki-client