This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File:                     HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier:          PjhNJQSe4YNC0u81W0ln82VnkPMRSlRy5U37Wfl7heM=
Subject key identifier:   42:55:69:A5:7A:A6:0A:21:25:23:C5:9E:E2:F2:E8:99:2B:68:28:52
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer:       /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial:       019BFC89A6D1F735FC99EC125D9CD0CDB7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number:          17F4
Signing time:             Mon 26 Jan 2026 23:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 23:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 23:00:37 +0000
Files and hashes:         1: 6dv_L1DDphVKsaPUbNVgrio2mco.roa (hash: u/UqpDhbgxCW0Bpgwy3j9fMc8sf/q9V3Bh/vCaaYoAQ=)
                          2: FLGDI-HNGLyavIFHPkaqz0x2dyA.roa (hash: p43U03mDQXL/wNzoMe4V67qrIM7B3GFIc1QcZlkxGyI=)
                          3: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: urHWnpVgT99yAPjRsMOQfqf7MhoOaj3blOCNjD+NnA0=)
                          4: SNT8hJvMVBfYKWPwF8E6mRsCbIk.roa (hash: fIUVYcxClsJOGEyEKMH1vBZ+eD6MkSZpeWY8XXK6vEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:89:a6:d1:f7:35:fc:99:ec:12:5d:9c:d0:cd:b7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
        Validity
            Not Before: Jan 26 23:00:37 2026 GMT
            Not After : Jan 27 23:00:37 2026 GMT
        Subject: CN=425569a57aa60a212523c59ee2f2e8992b682852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b0:47:ca:81:e0:6d:45:be:3c:f3:42:52:19:
                    51:2a:d4:f6:39:41:bf:78:9e:a5:a6:8b:c7:9a:15:
                    78:cb:78:cd:0f:b3:22:52:8d:74:8a:51:bb:95:32:
                    07:e7:69:0c:7d:b2:69:05:93:fd:71:8e:65:f8:18:
                    3a:be:09:44:34:1a:58:82:db:e2:66:f6:0e:ca:c7:
                    c3:d9:96:03:e1:eb:3c:34:43:45:8d:f8:2f:70:a3:
                    82:a0:73:62:d2:68:80:19:76:16:9c:f5:3c:d5:58:
                    2f:21:f9:f0:65:7b:fd:26:f1:0a:25:c7:8a:cf:53:
                    1d:0e:1f:6d:fb:5f:42:b0:19:38:2e:1b:6b:6b:cf:
                    f1:af:b8:56:95:68:12:57:e7:e1:08:53:d5:00:4e:
                    db:90:95:f6:8b:03:f2:3d:5e:fc:a7:c7:76:95:fa:
                    fd:31:08:a3:b1:4c:71:4f:17:38:2a:96:27:1f:b8:
                    ac:22:6c:d2:58:16:2a:a1:f9:5b:c2:ee:cc:fa:ea:
                    45:2d:9a:71:fe:0e:1e:21:aa:8f:8e:3b:b9:a6:18:
                    98:ff:82:b2:0b:cb:c7:35:73:ba:bb:99:53:fb:82:
                    42:b8:f9:70:81:22:b0:68:1e:e4:fc:48:46:67:db:
                    3c:2f:4e:96:ef:21:90:9a:fa:2c:b4:73:60:fc:75:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:55:69:A5:7A:A6:0A:21:25:23:C5:9E:E2:F2:E8:99:2B:68:28:52
            X509v3 Authority Key Identifier:
                keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:63:bd:29:d4:61:fd:1c:9d:de:bb:fe:2a:74:7c:23:b7:6d:
         ce:22:63:ec:1a:98:b4:ba:16:a9:aa:a9:96:d9:a9:24:49:06:
         5b:1b:25:3e:7c:a6:04:f9:b2:06:53:92:ab:4a:1b:21:88:d2:
         9b:41:43:72:3c:6c:6b:04:06:e8:5e:8c:a5:73:75:23:9a:04:
         43:52:a1:cc:e8:9f:76:7a:0e:00:62:c7:a0:c4:6d:84:74:2a:
         3c:73:ac:f5:6a:22:56:9d:9a:6f:44:06:68:a0:20:67:06:ca:
         11:9d:36:61:bc:de:e1:b7:92:66:12:6e:e2:cb:cf:d2:20:62:
         59:a8:b3:53:d5:e2:3c:79:06:81:48:94:2b:c3:f8:68:d6:f9:
         51:aa:96:78:57:71:96:ec:f5:d7:f0:ed:db:f8:8e:c8:eb:79:
         85:8d:ba:94:63:14:b0:af:55:0b:ca:98:a4:dd:f7:89:89:4b:
         e6:16:ce:99:72:41:b8:fa:55:c3:6c:2a:fa:c7:44:f6:ab:c5:
         04:56:ca:8f:90:4a:cc:0d:59:0e:76:b3:34:72:eb:a6:a0:26:
         14:9a:ad:7d:e2:28:0a:7c:62:cb:46:58:4b:45:b6:4d:77:aa:
         cc:bf:e1:91:28:fe:75:69:3b:c9:09:1a:2f:cc:a6:d5:7f:92:
         f1:76:3d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8iabR9zX8mewSXZzQzbfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjYwMTI2MjMwMDM3WhcNMjYwMTI3MjMwMDM3WjAzMTEwLwYDVQQD
Eyg0MjU1NjlhNTdhYTYwYTIxMjUyM2M1OWVlMmYyZTg5OTJiNjgyODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rBHyoHgbUW+PPNCUhlRKtT2OUG/
eJ6lpovHmhV4y3jND7MiUo10ilG7lTIH52kMfbJpBZP9cY5l+Bg6vglENBpYgtvi
ZvYOysfD2ZYD4es8NENFjfgvcKOCoHNi0miAGXYWnPU81VgvIfnwZXv9JvEKJceK
z1MdDh9t+19CsBk4Lhtra8/xr7hWlWgSV+fhCFPVAE7bkJX2iwPyPV78p8d2lfr9
MQijsUxxTxc4KpYnH7isImzSWBYqoflbwu7M+upFLZpx/g4eIaqPjju5phiY/4Ky
C8vHNXO6u5lT+4JCuPlwgSKwaB7k/EhGZ9s8L06W7yGQmvostHNg/HXFBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJVaaV6pgohJSPFnuLy6JkraChSMB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGO9KdRh
/Ryd3rv+KnR8I7dtziJj7BqYtLoWqaqpltmpJEkGWxslPnymBPmyBlOSq0obIYjS
m0FDcjxsawQG6F6MpXN1I5oEQ1KhzOifdnoOAGLHoMRthHQqPHOs9WoiVp2ab0QG
aKAgZwbKEZ02Ybze4beSZhJu4svP0iBiWaizU9XiPHkGgUiUK8P4aNb5UaqWeFdx
luz11/Dt2/iOyOt5hY26lGMUsK9VC8qYpN33iYlL5hbOmXJBuPpVw2wq+sdE9qvF
BFbKj5BKzA1ZDnazNHLrpqAmFJqtfeIoCnxiy0ZYS0W2TXeqzL/hkSj+dWk7yQka
L8ym1X+S8XY9Ug==
-----END CERTIFICATE-----
Generated at Tue Jan 27 04:28:58 2026 by rpki-client