This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File:                     sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier:          FviAgpSwNj/nQpu1PgJzt4jxCMwgDHzCYVrh/uJLRe8=
Subject key identifier:   01:89:89:53:1B:61:A7:28:6B:42:3C:F8:BB:8E:DC:5C:B0:7F:37:2D
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer:       /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial:       019BFA9B9BA5531E8DA6CD23BC555F0F2260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number:          0230
Signing time:             Mon 26 Jan 2026 14:01:00 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:00 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:00 +0000
Files and hashes:         1: 0HI-hYUQzf4SnFU50ilapMC-N0M.roa (hash: OXBTJCBE8s4VmNGyaynb87VbRk7167Q44yiSXd1oMkw=)
                          2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: 2yJ7rTkdEUVkrUQsW0/EkGAlqrcUH52SmT1GWzAj4FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9b:9b:a5:53:1e:8d:a6:cd:23:bc:55:5f:0f:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
        Validity
            Not Before: Jan 26 14:01:00 2026 GMT
            Not After : Jan 27 14:01:00 2026 GMT
        Subject: CN=018989531b61a7286b423cf8bb8edc5cb07f372d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:e3:96:2d:72:a9:3d:4c:8b:55:68:85:46:
                    16:07:70:e1:81:61:76:c4:3d:44:94:52:09:2f:d1:
                    b5:ad:6f:f5:40:1f:5d:d0:10:db:88:cb:92:5d:42:
                    94:59:06:05:c3:58:13:2f:e2:e1:b5:24:ba:ed:0c:
                    c1:21:59:ff:cf:79:0b:82:8b:6c:0b:eb:3e:e8:33:
                    96:48:54:83:90:54:73:3c:66:3f:b0:e4:f6:c1:23:
                    e1:11:8b:3b:80:2b:12:7d:9a:f5:eb:21:a5:87:a4:
                    10:12:ea:b2:b5:b3:a0:4e:18:0d:78:cc:5d:47:aa:
                    22:5a:0f:b0:69:56:45:8c:32:da:0d:3e:4c:40:c4:
                    f9:45:a6:74:30:c9:f0:50:f8:76:a2:95:29:5c:76:
                    09:f3:c3:36:65:94:88:ba:10:4c:72:fc:10:21:82:
                    28:7f:f4:e1:77:94:b3:d2:50:ee:e9:c6:fa:54:3e:
                    df:86:e0:8c:bf:9b:1f:58:26:75:11:ca:32:0d:0a:
                    7e:5d:62:50:f6:d9:b0:be:d8:13:9c:fd:e6:0b:21:
                    95:02:1f:6e:80:9c:55:fa:33:26:f3:54:a7:fc:a7:
                    60:e7:3c:27:a0:f5:47:fc:d2:6c:19:ef:81:22:e5:
                    d5:ce:e3:3d:d2:38:d2:f8:22:af:00:bb:12:bd:4c:
                    ec:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:89:53:1B:61:A7:28:6B:42:3C:F8:BB:8E:DC:5C:B0:7F:37:2D
            X509v3 Authority Key Identifier:
                keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:47:ce:34:05:10:38:1f:73:5b:0a:8c:52:3c:51:12:73:
         a0:87:65:48:95:b6:22:90:fb:24:a7:88:b6:14:78:90:5d:90:
         1d:9c:a9:7e:e1:cd:a9:b1:bf:9e:6d:3c:26:1d:62:2d:91:9f:
         30:de:b3:d6:6d:81:51:05:36:c3:f0:cd:96:33:85:8c:a3:2b:
         9a:6f:30:1f:91:53:ea:08:da:cf:60:83:43:45:a4:00:69:a8:
         c0:d1:5b:71:a3:33:29:34:92:46:ce:31:84:03:a8:32:3f:37:
         e3:42:a5:88:2f:70:5c:ce:9c:c3:aa:f9:6a:b7:86:37:30:aa:
         24:df:a7:8d:4f:9c:48:23:44:5a:24:95:fa:e0:fb:2b:55:37:
         6d:80:46:1e:40:18:29:5e:06:59:56:d6:d7:17:ce:cb:e2:0c:
         8c:6c:61:62:f9:af:24:41:1d:78:23:67:fd:e8:03:df:1a:00:
         62:14:ea:bb:ca:08:af:19:7c:be:18:36:32:f7:2a:53:45:5c:
         b0:34:e4:2d:ee:f7:e1:49:63:c3:12:47:9a:98:ce:cc:a4:44:
         a4:7c:76:80:1c:a0:b8:34:1f:a0:dc:e6:67:0b:2c:19:5c:e3:
         c1:ea:80:cb:78:82:b4:ae:17:5d:af:0e:cf:e7:21:66:60:33:
         73:a0:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:11:37 2026 by rpki-client