This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          qCuzpqPp445uxYnDeg3HpX7iGJZB+CHapHDhO/SUfWg=
Subject key identifier:   A1:AD:D4:83:B4:D3:94:47:11:DE:2F:7B:51:06:72:F3:5C:BB:24:1D
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       019BF462D0E40573F3AF3B6AE83741365AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          1500
Signing time:             Sun 25 Jan 2026 09:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:15 +0000
Files and hashes:         1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
                          2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
                          3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: BTCaqdrbMO1X/ZGLbZlaZcYd2MaQegrPi1tyjmZKirY=)
                          4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
                          5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:d0:e4:05:73:f3:af:3b:6a:e8:37:41:36:5a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Jan 25 09:01:15 2026 GMT
            Not After : Jan 26 09:01:15 2026 GMT
        Subject: CN=a1add483b4d3944711de2f7b510672f35cbb241d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:19:37:a6:70:17:14:ee:ba:03:6a:17:8a:
                    ad:05:8f:68:94:d5:15:9d:14:17:86:36:21:a7:0b:
                    d5:54:48:e1:1f:ff:4b:19:e4:3b:be:82:ab:ab:d6:
                    b0:4b:0f:b6:b9:cc:30:b4:26:9e:41:00:e4:4e:de:
                    35:5c:4b:00:41:a0:26:7a:74:b8:9a:47:54:25:71:
                    66:c9:8c:79:9c:d7:df:eb:37:ee:79:0c:f2:db:14:
                    07:87:e7:1e:e6:86:8d:69:8d:d3:dc:0d:43:e6:e8:
                    a5:59:d3:43:9c:9e:c5:38:da:77:aa:0b:fc:6a:50:
                    68:8e:35:c5:0d:e5:06:76:ea:a7:fa:bc:f7:14:5c:
                    97:08:7e:ff:7d:d1:e9:2d:d0:ce:07:6d:16:da:44:
                    6b:e3:0d:36:44:9b:84:90:a1:00:bc:d7:35:0c:80:
                    48:e8:fe:4b:f3:3e:08:b3:75:a4:07:e0:c3:de:a0:
                    0e:88:2f:69:07:d4:95:60:39:bc:c8:53:df:d7:bf:
                    fb:ab:8f:ce:ce:5a:16:60:4d:ab:89:20:5b:39:90:
                    d6:6a:64:b0:93:bb:fa:36:48:fe:0f:d2:af:d8:84:
                    e3:89:16:2b:00:4a:05:2d:d0:6f:56:74:28:eb:25:
                    a6:df:00:ff:ca:dc:33:84:75:49:87:cc:81:2b:3c:
                    cd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:D4:83:B4:D3:94:47:11:DE:2F:7B:51:06:72:F3:5C:BB:24:1D
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:96:64:40:f8:25:34:bc:06:1c:00:ed:34:b3:1b:7e:0d:a7:
         45:62:91:3a:08:6f:31:7a:d4:aa:b0:9d:6d:48:ec:dc:95:02:
         a1:64:1b:c0:42:58:8a:b9:32:61:e5:61:3b:73:8d:da:f2:9a:
         5e:5c:69:2c:ce:f8:e6:78:ea:fc:8e:2e:c7:9a:0b:ee:ef:89:
         f4:d1:1b:a6:20:5a:44:65:fd:f6:3d:2b:04:d2:c7:d5:8f:5e:
         74:2f:20:60:f3:bd:ec:1d:92:51:79:2e:da:1c:78:0a:28:eb:
         19:94:a3:77:3a:6d:aa:12:52:ae:45:9f:2e:70:d1:6a:96:1f:
         68:c4:81:39:0c:53:42:bc:38:0f:5c:7b:2e:00:5b:d1:f7:bc:
         74:3c:be:c6:f2:3e:1f:b7:75:1c:f1:c7:7e:92:23:72:fc:bc:
         e0:dc:33:cd:3a:7d:f3:0b:09:ad:1e:25:f9:b7:93:1c:3c:a5:
         49:b6:0f:16:9f:ab:85:aa:73:0c:85:a8:66:ce:49:c6:fa:ce:
         79:4f:41:f1:b6:00:71:28:ea:c7:e5:55:61:76:16:65:26:0b:
         ea:b4:ea:fc:6c:57:b2:cb:3f:db:7a:1e:9e:71:93:48:7a:74:
         b1:c6:1a:f9:a0:94:2a:ab:5b:da:c3:96:05:c1:d2:e5:4d:e6:
         1e:29:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:13:48 2026 by rpki-client