This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          HsH3NH4JF1PizU4sSzZP6p99i5aFeliN/iCuHYAFxdw=
Subject key identifier:   B1:73:3D:2D:E0:E0:F4:6B:C3:BD:A4:52:15:52:67:54:F2:C6:28:8C
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       019BDDA3BC470DE0A4DFC793EF9952809FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          116F
Signing time:             Tue 20 Jan 2026 23:00:53 +0000
Manifest this update:     Tue 20 Jan 2026 23:00:53 +0000
Manifest next update:     Wed 21 Jan 2026 23:00:53 +0000
Files and hashes:         1: 1-BjMSdO6iVbOpkDl-BE8qpgDZLg.roa (hash: F+ot0aUOSLbQbycLUgEkSCqZvG9RZcn5sPnsPXjM3Zs=)
                          2: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=)
                          3: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
                          4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
                          5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=)
                          6: Rvb_MYoiUHFCOaA-RbHwVikspwQ.roa (hash: u+02TSm2IbZTqUuUBwPekY51BpwcVFSZdhS945AWzxs=)
                          7: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
                          8: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
                          9: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
                          10: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=)
                          11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: PdDaTZ4i75huFr8l/yTTiQ5kix2da6c6sHbD12CPWYU=)
                          12: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
                          13: sCKbGnkLwgEhS7pIIJjS0biYxrc.roa (hash: I2ey4PW/vo4FB5Fjc9jrXP4LPxpKbbEJ9En7gwlq4XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 23:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:dd:a3:bc:47:0d:e0:a4:df:c7:93:ef:99:52:80:9f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jan 20 23:00:53 2026 GMT
            Not After : Jan 21 23:00:53 2026 GMT
        Subject: CN=b1733d2de0e0f46bc3bda45215526754f2c6288c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:fb:17:29:23:e8:4f:34:29:69:87:cf:af:
                    cc:1a:39:e8:77:0e:dd:b5:71:d2:7b:71:d1:6e:d2:
                    d7:44:12:22:49:7b:2f:c1:13:13:80:ad:52:99:b8:
                    7d:bb:f3:b2:8c:57:1e:12:96:8d:da:ae:12:c8:d8:
                    4b:31:86:dc:b8:ec:87:c2:2a:c7:7f:1b:e9:4e:d8:
                    07:df:23:d4:43:6a:b3:bd:2a:1b:b2:b7:52:34:4e:
                    c2:18:18:da:44:99:ab:19:e1:0d:ac:ee:e4:b1:1e:
                    48:1c:93:2b:9d:db:62:b1:fb:5b:75:59:29:d4:a4:
                    d9:c6:b3:3c:27:90:e8:98:7e:b7:7e:63:f5:d7:06:
                    28:2e:97:3e:a8:94:42:46:8d:16:d4:9b:97:97:ec:
                    1c:a6:16:78:18:18:6c:b8:07:00:1c:24:2a:ba:d2:
                    cd:77:12:f3:1d:d6:d5:8e:71:63:9f:1a:d4:2d:b8:
                    6d:d6:a4:05:85:48:de:a4:f9:87:6a:75:8a:c8:4f:
                    bf:2d:6e:70:30:55:e1:81:31:cf:2a:a3:5e:99:13:
                    b5:62:45:00:66:0a:9d:30:25:64:f7:d8:e4:b2:62:
                    66:a3:7b:90:20:be:e5:be:27:c5:d5:50:71:2f:9b:
                    13:a0:3c:4d:22:90:76:63:25:6f:61:39:65:61:a2:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:3D:2D:E0:E0:F4:6B:C3:BD:A4:52:15:52:67:54:F2:C6:28:8C
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f0:ca:ff:ac:51:67:91:7a:7d:0e:ea:6e:e8:de:a5:bc:95:
         a2:3e:c1:6f:14:77:80:19:07:b4:48:89:07:60:b2:f8:5f:e4:
         76:b2:9a:10:f0:e3:40:8d:f7:a6:a4:c9:97:83:da:22:bf:0e:
         f5:75:16:48:fb:8b:4e:68:f4:fe:1e:1b:d4:c4:dc:11:7d:59:
         80:76:36:28:b1:eb:08:89:03:a0:49:29:c4:2d:bf:dd:43:be:
         ef:7b:aa:c4:9f:42:3f:57:9a:dd:9d:ca:b1:fe:9c:5a:ad:95:
         db:94:aa:f3:08:a5:1c:80:d5:d1:48:cf:08:d5:29:ed:80:b9:
         08:5a:9c:a6:3a:ce:e7:45:9f:80:9e:ba:88:53:ed:43:9e:7d:
         31:b7:8d:25:17:71:60:70:01:0a:83:ef:98:ef:65:9f:eb:77:
         1b:24:8e:89:b8:db:2b:f6:96:f8:bd:d5:e6:65:04:ef:98:de:
         62:0a:22:8f:33:62:bb:d9:bf:26:cc:02:d1:d0:ee:b6:57:93:
         09:39:c9:c3:2e:63:f8:7b:5e:8c:bd:f2:5e:37:11:ec:a5:10:
         a3:2a:d9:35:ad:7e:06:8b:42:1b:2d:11:a1:07:ae:8c:44:3c:
         28:2c:e5:72:0f:85:a8:ec:c5:cf:89:99:56:78:ac:13:67:ef:
         1b:65:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 02:52:39 2026 by rpki-client