This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File:                     SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier:          pceHmSmzwRznyX5BMfr3YmryYnNRSAk9LdLs2CTc/DM=
Subject key identifier:   FC:9D:EA:2E:84:E8:BD:2E:42:E3:4C:97:18:CF:62:C4:C3:AD:6E:E5
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer:       /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial:       019BF5E3694E430D3350D637DBAD3E4EF206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number:          0C43
Signing time:             Sun 25 Jan 2026 16:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:20 +0000
Files and hashes:         1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: YuiKUJCwn6byIamVCinMQDu2itNZo1UN8C/69oumaHU=)
                          2: r0m1872U6WFK52zTuHKr_z62s0E.roa (hash: fs/NQYOW8kLu0+d2MC/W9zC6jnh40QEwXnfZoyCgClc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:69:4e:43:0d:33:50:d6:37:db:ad:3e:4e:f2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
        Validity
            Not Before: Jan 25 16:01:20 2026 GMT
            Not After : Jan 26 16:01:20 2026 GMT
        Subject: CN=fc9dea2e84e8bd2e42e34c9718cf62c4c3ad6ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:06:df:be:d8:12:61:2d:3b:f6:16:83:6e:
                    06:c6:6b:ac:a8:c2:09:7c:74:1e:dd:19:e0:dd:17:
                    1d:20:c3:3a:3f:d5:39:c1:d2:eb:04:c9:fc:d3:20:
                    7a:2f:d6:20:66:d4:bd:f2:c0:ed:94:a1:44:5e:7d:
                    4a:1c:f0:d8:da:a4:b8:48:00:35:62:22:ad:d7:c6:
                    8a:1a:77:f6:c2:a2:64:8f:e3:f5:19:4b:bc:8a:0a:
                    36:62:3e:53:e2:1e:83:dc:55:bf:b6:c1:f0:c1:25:
                    c7:80:4b:cd:39:3e:2b:d7:15:dd:5a:db:8f:32:d6:
                    fc:84:65:38:88:1b:66:01:dd:25:69:25:c5:bd:66:
                    13:0d:e7:4a:47:70:a6:96:7c:69:07:84:1d:af:7d:
                    e3:a7:4d:55:c7:66:2c:ea:cc:7e:d6:c5:95:85:bd:
                    61:09:05:81:15:50:7d:63:6d:c3:67:78:01:46:c4:
                    dd:4d:34:ce:14:b0:bf:3b:b0:34:2b:67:8f:f7:e6:
                    61:25:ec:7c:4b:77:60:7a:a9:26:c6:9a:41:43:38:
                    ca:cc:ad:e2:7b:76:54:3a:d5:21:69:c8:3d:12:e3:
                    69:1d:bf:86:89:c9:4f:0b:05:16:1f:02:b5:bd:2d:
                    ca:af:bd:a2:f1:76:9e:24:b9:9d:bc:72:3a:15:90:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9D:EA:2E:84:E8:BD:2E:42:E3:4C:97:18:CF:62:C4:C3:AD:6E:E5
            X509v3 Authority Key Identifier:
                keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8d:45:2c:c2:cc:08:30:7b:fa:cf:a3:7d:af:86:9d:8e:a9:
         19:e5:4b:e6:c9:00:2e:02:ef:19:10:14:d0:de:2f:20:0d:93:
         01:ae:d1:b2:77:87:88:30:d4:f3:ff:d2:fa:8f:25:c1:3f:60:
         21:53:52:68:b8:64:11:cd:e2:67:f3:5c:e7:50:9e:48:f1:f2:
         72:64:9d:71:94:ab:22:6a:0d:7e:aa:15:89:66:8d:58:1f:21:
         56:46:4c:f4:43:a4:f4:0d:29:a4:01:01:7d:83:36:4d:95:da:
         52:4e:76:20:82:5e:8b:1d:66:fe:f5:ff:3f:a9:f9:0c:5d:8d:
         e1:a4:ce:e1:28:e9:37:7b:c8:57:98:8a:71:1b:b0:85:08:8d:
         08:3f:dc:5f:8b:21:c2:b1:c8:92:ec:b5:66:98:0f:a6:fe:b8:
         da:8c:be:59:b5:df:bc:ee:f5:87:22:60:28:10:31:d4:f0:95:
         1f:0f:71:df:ed:cc:81:73:1a:3a:61:05:e9:a7:ff:7a:bb:84:
         b7:2b:07:76:c7:2e:1b:a3:ac:95:1e:1f:fe:7a:eb:1a:a8:7f:
         98:70:38:cf:96:4a:5c:0e:f3:61:20:76:8e:43:a8:47:93:7a:
         9b:2a:f5:bd:0a:4c:1c:1c:4d:cd:8a:df:33:6c:7a:9e:58:19:
         11:04:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:09:54 2026 by rpki-client