This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File:                     SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier:          mJ4gxgIc61jqjpbI7SMQ/BoHgBgjjdBA2cIip43HDbw=
Subject key identifier:   50:67:63:83:E5:D0:86:51:9A:8B:62:A6:FE:50:9C:22:B2:E9:29:30
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019BF8AD8F3FFE1CF9F56D3852A6ACDCD403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number:          10D8
Signing time:             Mon 26 Jan 2026 05:01:22 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:22 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:22 +0000
Files and hashes:         1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: FHEqZPrSwxg2lTpcm9qFiMdfAYxa/bnVHaPhnYaE/a8=)
                          2: dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (hash: KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:8f:3f:fe:1c:f9:f5:6d:38:52:a6:ac:dc:d4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jan 26 05:01:22 2026 GMT
            Not After : Jan 27 05:01:22 2026 GMT
        Subject: CN=50676383e5d086519a8b62a6fe509c22b2e92930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:e7:0b:f5:16:f4:c5:f3:ad:3b:55:24:e3:
                    51:73:81:26:5e:0f:20:1b:23:6c:e9:39:0d:f4:e7:
                    68:8e:39:68:be:97:08:42:1f:c9:ca:f5:8a:6b:4a:
                    a0:a3:c4:21:aa:35:5f:c8:5a:c2:78:7f:3f:45:ec:
                    6d:ed:e3:ad:2c:10:5a:8f:5a:35:f4:26:59:72:2f:
                    80:8c:e7:14:53:12:fc:ad:7c:5b:8d:eb:19:29:6f:
                    09:df:e5:26:6c:6b:7c:27:7a:dd:0d:ee:12:22:ef:
                    68:1f:36:18:4f:4e:20:65:5a:d3:37:e0:db:c5:35:
                    8f:fc:30:3a:80:34:3d:b7:89:50:f3:b1:73:5e:e4:
                    22:10:c3:25:9c:04:5e:f3:c3:fa:ca:e6:6b:62:dc:
                    73:9b:66:83:f5:3f:77:3d:df:c5:b8:e1:fa:fb:c7:
                    ff:ce:01:f8:22:f9:e1:86:e8:ef:18:04:1d:39:f8:
                    cd:b5:09:08:12:7d:a2:c1:0b:cb:2f:86:44:f7:5f:
                    b6:1d:e5:44:4c:3b:cb:1d:b0:7f:27:c9:32:a9:d1:
                    ad:d6:f7:9f:c9:63:10:95:58:42:17:54:3f:4d:ba:
                    47:fa:28:02:cc:a2:13:10:18:37:a6:0e:30:d8:17:
                    7c:90:6a:b3:ca:ce:8e:64:da:b4:9f:c3:1d:99:eb:
                    bb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:67:63:83:E5:D0:86:51:9A:8B:62:A6:FE:50:9C:22:B2:E9:29:30
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:96:33:68:11:e6:73:2e:e4:46:74:ee:ab:d2:23:62:2c:1b:
         d4:4a:e6:56:20:b7:32:9e:41:a5:3a:87:2a:e9:aa:2f:a7:52:
         f8:03:cd:9c:5e:e3:83:4c:51:2c:59:9b:1e:18:67:b1:6d:38:
         32:80:d3:9a:f8:b2:77:f2:5d:18:b3:0d:c0:fe:c5:ca:95:84:
         71:28:ae:c9:0e:93:d4:71:1e:a2:b8:c1:4d:7d:29:3d:4f:f5:
         b2:59:cc:08:13:12:74:d8:c3:d9:b0:ca:f9:5f:c1:99:b8:4a:
         0c:7a:13:3b:d5:30:a8:22:05:59:8a:32:c2:86:49:ff:ea:24:
         94:8c:3c:c5:d6:ea:1a:2e:85:8b:75:03:df:8b:c7:2a:42:0f:
         d8:b8:a3:c7:5e:c3:70:2b:17:7a:39:84:29:09:b4:04:41:fe:
         8c:49:1b:91:90:eb:36:20:bb:3c:08:fa:02:5a:d3:d7:0e:12:
         7b:34:c9:23:82:7d:1b:66:bc:17:9c:d8:42:47:72:bb:8e:de:
         d4:f9:2a:ea:f3:30:7a:78:e9:91:12:9c:13:f7:7d:fe:90:1a:
         4d:f4:0b:f0:dc:4a:a0:48:14:fa:98:0f:45:45:65:07:fa:81:
         7d:3f:02:5e:d7:d1:61:71:da:23:6e:6c:ae:df:56:87:15:cd:
         ea:ec:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:09 2026 by rpki-client