This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          u+xtxMKf0AWE37SbGNd+da0zQI2bih2aU1QrpBXFOT0=
Subject key identifier:   B5:24:F5:94:71:34:44:BF:34:1B:B8:FE:A1:4E:FB:27:D6:EC:71:2A
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       019BF5ABFD64FD824A946E0410DECFF6C940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 15:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:48 +0000
Files and hashes:         1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
                          2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
                          3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
                          4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: UwjDf8DJo/q7auYBjSs+FI20VFNm6kmLPDfIVC+RZsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:fd:64:fd:82:4a:94:6e:04:10:de:cf:f6:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: Jan 25 15:00:48 2026 GMT
            Not After : Jan 26 15:00:48 2026 GMT
        Subject: CN=b524f594713444bf341bb8fea14efb27d6ec712a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:be:f4:55:cd:77:67:b1:72:2c:e7:4b:a0:
                    6e:0c:66:84:c7:0c:4c:9c:31:e3:24:c6:df:09:ef:
                    16:f6:45:25:2d:58:9e:65:27:f7:b1:1d:a3:b4:12:
                    30:c5:8b:a4:3e:65:b6:3d:38:0b:44:05:1b:4a:de:
                    ee:21:5c:1a:40:a0:85:be:44:8d:69:76:1a:78:a6:
                    bd:b6:82:21:8b:98:4a:56:5e:9e:c5:61:d3:9b:06:
                    ce:7f:14:8f:b8:c8:fd:cb:56:b5:51:d2:10:3f:15:
                    89:bc:c3:f2:45:e3:17:b8:2b:a6:0a:e8:4a:16:43:
                    88:a8:f4:de:8b:71:81:5c:7b:93:f3:21:2a:5c:e7:
                    ca:be:a7:7a:85:36:54:85:e2:a7:22:8a:7d:fb:cf:
                    fc:12:6b:99:07:eb:b2:1c:9e:f1:4b:83:2e:16:06:
                    2b:77:cd:fd:1f:82:9d:3e:28:4d:99:50:9c:ca:48:
                    34:f8:0f:34:da:0b:68:71:c9:60:d1:69:93:6b:0b:
                    e2:2e:48:84:fb:24:4a:0c:cc:1f:50:03:22:06:1b:
                    dc:58:e9:4a:f2:3a:32:3c:4d:93:4e:dc:91:8d:52:
                    ed:3f:b9:ce:0d:84:db:fe:aa:50:9b:6f:9c:fb:6b:
                    57:18:de:75:27:d5:8d:02:94:4c:bd:2f:5a:73:ce:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:24:F5:94:71:34:44:BF:34:1B:B8:FE:A1:4E:FB:27:D6:EC:71:2A
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:f5:28:43:97:99:de:4b:44:0b:40:6b:69:68:5e:d2:71:
         fb:f8:55:4f:8d:b6:31:39:81:f7:46:e0:04:ac:7c:e6:1b:af:
         55:fc:cd:14:86:7b:b3:66:be:1b:a1:5e:47:8a:5d:49:70:93:
         4e:4b:35:af:9f:a3:a7:75:10:87:9b:69:6f:72:70:63:25:3b:
         cd:76:0c:0f:38:60:b6:06:ca:7d:37:e8:64:a5:9c:00:66:f5:
         50:36:3d:f0:20:15:02:73:62:87:fd:70:d5:2c:d2:f1:c2:14:
         f6:65:a2:2f:16:97:df:bd:71:9e:da:6b:a2:83:90:72:b6:66:
         1e:c6:b6:e8:89:b3:79:35:8a:f6:b5:1f:cd:74:03:a5:7a:d3:
         2f:6d:d7:cf:be:32:56:f4:79:71:27:a9:25:cb:b3:0e:2c:fb:
         f4:43:1b:40:8b:3d:d6:5e:b7:b8:a9:04:f8:17:f7:78:15:a5:
         d1:55:db:1c:6d:d6:0d:c8:f6:e5:4e:f2:85:0f:0f:26:d6:e2:
         98:72:14:a8:73:19:9a:70:a9:d3:bf:8b:e7:b7:21:c0:47:81:
         13:88:13:59:f5:5a:bc:aa:2d:7d:27:3d:29:c8:5e:ee:db:51:
         d2:5d:8f:e3:fa:2c:d4:23:d7:0c:93:a7:15:c3:55:4f:23:4f:
         5a:02:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:04 2026 by rpki-client