This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File:                     hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier:          DljU7xtIG4YivA5LhKu/MFoTs8DVKk6WV2O0zLNUgQU=
Subject key identifier:   2D:31:EA:CE:B6:8D:66:39:D8:A6:24:14:5E:41:6A:F9:44:A7:4D:1B
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer:       /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial:       019C21DFDB2EA87E953E7AD9A89DA8A447E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number:          1493
Signing time:             Tue 03 Feb 2026 05:00:44 +0000
Manifest this update:     Tue 03 Feb 2026 05:00:44 +0000
Manifest next update:     Wed 04 Feb 2026 05:00:44 +0000
Files and hashes:         1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
                          2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: KSH2fw1Yc2CCBRSzJQ0u2l06XV0LlUCoMQ7/0MhunMM=)
                          3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:df:db:2e:a8:7e:95:3e:7a:d9:a8:9d:a8:a4:47:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
        Validity
            Not Before: Feb  3 05:00:44 2026 GMT
            Not After : Feb  4 05:00:44 2026 GMT
        Subject: CN=2d31eaceb68d6639d8a624145e416af944a74d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:a4:44:a5:f6:dd:b7:65:ac:0f:42:75:e4:
                    84:74:9b:96:f3:ab:ec:f0:0e:56:00:1d:bf:28:be:
                    88:85:05:21:b1:51:65:6b:29:e0:c6:4a:0c:ae:6c:
                    9a:78:86:aa:f4:1b:47:23:98:89:45:df:b3:ff:34:
                    85:83:c2:ae:3f:15:ef:ce:cd:40:54:bd:74:5c:e0:
                    e0:ab:5f:53:e9:53:91:2c:94:92:85:29:e8:ca:b1:
                    18:50:6f:f4:a9:72:f9:63:bd:ce:fd:85:e7:ae:dd:
                    fa:f5:e6:e3:1e:87:1c:d5:9b:25:89:23:0a:0e:1e:
                    c0:db:02:2b:84:97:5c:19:78:38:c9:64:ce:10:90:
                    01:ed:dd:21:25:86:14:02:38:ed:21:f6:78:96:b6:
                    92:11:0e:9b:0e:bf:01:54:de:65:68:09:ab:64:3b:
                    32:10:34:78:59:40:19:f0:0f:c7:3a:02:d1:51:7f:
                    93:6c:29:56:16:fc:3c:f4:66:33:be:ca:11:7e:f8:
                    5e:c2:10:de:52:23:b2:46:dd:a3:08:da:81:c3:b1:
                    91:bc:92:3c:1e:36:c0:82:21:c5:89:50:53:68:a0:
                    c0:05:09:22:05:75:79:cd:3a:67:27:2e:d4:e2:d0:
                    9c:46:6e:d2:12:b3:e7:78:03:3c:62:29:49:31:e5:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:31:EA:CE:B6:8D:66:39:D8:A6:24:14:5E:41:6A:F9:44:A7:4D:1B
            X509v3 Authority Key Identifier:
                keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:5f:ec:54:ae:3f:b1:b9:b2:ea:e9:27:2c:b7:f3:86:57:83:
         69:d7:45:0a:ab:13:29:d1:0a:82:86:e4:ab:5c:48:be:40:7b:
         9d:c7:26:ef:cc:cf:af:b8:43:a8:70:a3:95:43:5e:17:94:d1:
         80:93:8f:6c:f0:71:bf:22:16:b3:dc:b9:94:eb:0f:cf:09:86:
         e0:e5:a6:dc:71:e8:61:24:be:f1:02:da:51:5a:c1:a8:0a:99:
         8a:6c:4a:b3:04:56:06:ee:e0:30:76:59:b5:01:05:2e:7c:44:
         54:a3:11:a8:88:44:6d:25:56:d9:0d:c1:86:09:4c:14:a7:da:
         f4:78:40:4b:7f:db:a2:43:a6:21:ef:29:38:00:80:c3:4f:f7:
         83:52:f3:99:c0:aa:f9:f0:55:8a:91:19:4b:98:06:10:29:57:
         91:95:f2:aa:a7:16:b4:43:f0:ec:1a:5c:c1:da:67:b7:79:55:
         18:84:48:90:3a:ee:e4:a8:a8:2e:ca:8a:ca:1b:34:3a:04:5f:
         b4:0a:19:2f:a4:41:b6:41:3d:3e:18:5f:1d:01:1f:9e:2f:b1:
         04:83:28:00:38:a8:41:a3:e8:64:74:c1:28:c0:a0:37:05:b8:
         c7:23:72:99:ae:a5:19:9d:a6:a5:46:dc:b1:70:ae:b9:d7:00:
         8a:d3:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 08:13:49 2026 by rpki-client