This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          yTTRbQqTc4n8B+VkG+IkiPrmr+pfCW1kdlES3vqC45M=
Subject key identifier:   66:51:43:4A:DD:A5:A7:DD:83:F1:47:41:F1:7F:2A:A7:75:40:AA:33
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       019BF2E1EA36DC05A0162C634B401D4E4263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          1802
Signing time:             Sun 25 Jan 2026 02:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:50 +0000
Files and hashes:         1: 2km5CePTq7_BnWDbbdzBAnFRzXw.roa (hash: odLHriDBowdLruRMyp7oP30CTWfC4IMigBLHf3TCMXY=)
                          2: P3pMTXaPEJ3pF-gEwjCXB342FMw.roa (hash: ctsyJFlW0Oa24uSpietN5XHoRYpf4UiDm+Wb7QP+anM=)
                          3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: SV/lBlJDaAcIcGOgR5iahT+bbInECwgAlmolSStAZQQ=)
                          4: sncS8S2NsUSvaykCM37LNBlWYeU.roa (hash: qh0is7RUGO8WSotkmc+90Ufb2ZAu2P4HHEPVCF4ovi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:ea:36:dc:05:a0:16:2c:63:4b:40:1d:4e:42:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: Jan 25 02:00:50 2026 GMT
            Not After : Jan 26 02:00:50 2026 GMT
        Subject: CN=6651434adda5a7dd83f14741f17f2aa77540aa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:c2:17:23:55:e9:9b:97:4e:2e:af:55:1a:
                    24:f6:6d:5f:a9:bf:88:af:6f:d6:67:da:37:75:33:
                    1a:78:9b:b9:84:17:d2:cc:f4:de:39:b3:25:ac:b4:
                    9f:10:0a:23:21:1c:7a:48:cd:0c:83:e1:3d:da:bf:
                    58:05:10:39:f7:7a:38:cb:f0:11:dd:1d:bd:2d:ce:
                    90:97:03:55:e1:2d:c2:ae:e5:99:56:5d:87:b6:cb:
                    8f:14:93:8d:a8:f6:4a:af:42:73:b5:14:3f:64:1a:
                    7f:4a:53:52:b0:a6:c0:ba:51:4f:73:14:6b:54:09:
                    37:3f:dd:17:a4:e0:68:ad:59:b3:d1:ff:2e:10:82:
                    8f:ee:0e:ed:cd:43:71:aa:b1:49:52:d0:60:e0:db:
                    c7:86:20:4d:c3:5b:e9:96:1a:64:fd:c8:75:73:ba:
                    af:e6:42:e0:88:e9:af:c5:5f:58:29:da:db:b4:9d:
                    30:11:89:e2:d8:f5:37:f3:79:af:22:bf:8f:d1:c3:
                    bc:5c:50:50:16:ae:29:bc:cf:fd:4d:19:b4:b5:a1:
                    bb:0e:00:0c:70:c2:16:3c:32:c1:99:2c:11:6a:b5:
                    4f:ce:24:8b:d9:24:3f:85:98:d3:44:15:3c:b3:9d:
                    de:97:59:87:d7:b7:c1:d0:2a:47:38:9e:55:bb:a3:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:51:43:4A:DD:A5:A7:DD:83:F1:47:41:F1:7F:2A:A7:75:40:AA:33
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:f2:48:a8:3c:48:d6:c8:29:12:ea:4c:b1:2c:1e:59:a6:
         35:47:8f:d5:ed:eb:45:c0:ff:b9:59:60:30:4d:ab:43:9e:f4:
         58:83:ae:8f:17:ad:47:54:e6:49:d9:74:0c:60:0a:77:54:33:
         1f:e1:d9:1f:92:62:79:fe:ff:fb:0b:7a:b2:30:7d:44:87:01:
         92:7b:d9:57:a0:55:58:1e:aa:91:e0:e6:42:ca:c1:55:84:e0:
         c1:40:34:33:0b:a1:7e:22:f2:33:53:cd:ad:c9:63:86:44:9d:
         0f:48:69:50:b8:42:3a:60:12:83:4b:51:ea:f6:20:31:66:12:
         9b:b9:b5:7d:89:03:5a:30:5a:7a:5a:5c:8b:8b:3a:7f:8c:36:
         01:7f:cc:57:fb:1e:9f:8e:6b:6a:25:48:4c:a6:27:2d:e7:1f:
         a4:d7:07:9f:ec:0b:47:06:f4:51:d5:ef:d4:62:1f:9c:11:4c:
         77:d8:25:10:80:af:6e:b0:90:fa:74:eb:4d:ec:0e:c0:fb:06:
         67:b4:4c:5e:35:21:38:0b:3b:de:04:02:e3:ee:66:59:5e:f8:
         fc:82:0c:6e:96:43:c1:fa:3e:57:4c:4c:a7:ac:da:db:05:77:
         f8:98:65:6f:44:9e:18:cf:07:3e:61:69:56:f1:16:02:54:c1:
         6c:93:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:49:48 2026 by rpki-client