This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File:                     HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier:          ZrtwwIiNx1Dz3xoz5BAUVB9uG+0QOXNaOI5iFi8+oyc=
Subject key identifier:   42:00:87:DB:5A:17:27:12:91:AD:C4:59:8A:48:ED:7A:9C:7A:08:50
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer:       /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial:       019C2B87B1E55796E3B2DC685B84037E8A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number:          148A
Signing time:             Thu 05 Feb 2026 02:00:38 +0000
Manifest this update:     Thu 05 Feb 2026 02:00:38 +0000
Manifest next update:     Fri 06 Feb 2026 02:00:38 +0000
Files and hashes:         1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
                          2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
                          3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: iCFLqvPtYeyAGaE1Bny131DQRpWXVRXTiB8eY49Nvpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2b:87:b1:e5:57:96:e3:b2:dc:68:5b:84:03:7e:8a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
        Validity
            Not Before: Feb  5 02:00:38 2026 GMT
            Not After : Feb  6 02:00:38 2026 GMT
        Subject: CN=420087db5a17271291adc4598a48ed7a9c7a0850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:bd:7b:5a:c5:e9:54:b0:73:8c:67:26:ae:
                    7d:dd:9c:c7:1a:fa:7f:33:42:32:b4:45:7d:83:8f:
                    b9:ba:62:82:50:79:bf:49:b5:4b:b2:ec:6a:cc:02:
                    b9:0a:32:f6:dc:fa:a2:e0:f8:07:4d:37:8c:a9:41:
                    94:43:95:47:3a:36:2e:61:4b:5a:95:61:55:cd:58:
                    55:98:43:4b:4f:4f:5b:a1:29:e8:23:e3:34:20:37:
                    82:6b:ae:ea:78:28:e3:d5:7e:44:c8:e3:24:72:73:
                    d1:7b:fb:a6:3e:35:b8:a7:f3:6d:1d:69:27:1f:91:
                    90:06:16:a3:81:c6:2c:d3:a7:bd:8d:a5:35:7b:59:
                    f4:fa:c7:b0:ea:5f:c2:5b:87:25:bc:1e:47:54:cd:
                    cc:d0:b8:fc:08:a5:e4:28:9c:a1:84:80:69:03:a2:
                    3a:fa:6e:d0:dc:3c:2c:5d:88:d5:69:25:25:4f:21:
                    09:5b:06:22:35:7d:82:e8:62:75:f9:d4:72:00:8d:
                    ba:a1:30:86:20:9b:48:b1:d7:15:c6:24:fc:a6:55:
                    a6:95:ff:17:df:d9:41:e6:bc:f8:f3:e1:a9:e8:ea:
                    dc:ff:51:d2:2f:04:cc:b6:db:b8:30:ea:b7:0a:d2:
                    b6:ee:7f:ce:1b:c8:d8:e8:aa:3e:63:a1:b7:39:06:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:00:87:DB:5A:17:27:12:91:AD:C4:59:8A:48:ED:7A:9C:7A:08:50
            X509v3 Authority Key Identifier:
                keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:3f:20:3e:80:2a:69:85:c9:00:d0:36:01:ba:29:94:83:
         f6:62:af:65:73:48:77:47:c0:a2:76:e5:a6:7f:93:69:1e:92:
         1e:bc:09:e1:8b:fa:c0:41:f3:8c:71:74:09:b3:c1:e8:07:a5:
         ee:c2:ed:a7:3f:da:9d:23:bd:7b:bd:17:f6:78:b8:2f:7b:31:
         cd:f1:84:63:06:33:55:43:52:26:49:dc:0b:4c:f5:5f:98:98:
         73:a8:82:83:7c:5d:d2:22:db:24:a6:7b:2e:f8:5a:6b:83:6f:
         01:98:7c:53:d0:14:c7:62:ae:b6:73:57:c6:38:c6:cd:18:6a:
         fe:76:05:86:12:47:9e:b4:a5:3c:77:74:4d:7b:f4:ee:90:ae:
         39:06:e3:94:e7:8a:e9:b9:19:e6:f1:b5:6e:3b:aa:27:0d:c3:
         7b:90:24:a8:09:36:9e:98:e0:08:a4:27:a4:77:a3:78:82:8f:
         e6:8a:b4:7c:50:ba:4c:38:ea:77:27:af:74:08:c8:89:6c:16:
         25:0c:c4:db:e2:36:9a:e0:8f:1b:cb:8d:3a:de:cf:13:34:c3:
         e7:0b:bc:b0:21:00:13:1d:91:ed:d1:df:c5:c1:8a:ec:c4:c3:
         ec:cb:37:f9:63:a4:60:6f:75:9e:13:86:5e:a6:f0:46:6c:e2:
         a1:4a:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 10:39:46 2026 by rpki-client