This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File:                     SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier:          PriJ5aPzQARPwLyzHy4P/dQldpPjUYrCre3YJMHKzOk=
Subject key identifier:   0B:85:D0:CF:82:49:3F:C1:4E:39:1D:18:30:B3:29:AA:92:AE:8B:97
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer:       /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial:       019BF462B6582E661BA7969503CC1D84E4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number:          109A
Signing time:             Sun 25 Jan 2026 09:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:08 +0000
Files and hashes:         1: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: STaPoUReKC7ucl7a5I+UIdDIRooZjfsbOmaYwPHqF28=)
                          2: TJJSAPMgtegk_5bRBgN5vKjTATY.roa (hash: bl9XKlzffVceG2IALUNkUkQaVh7Nue05fPn90utKRgY=)
                          3: lTZKaZdtmALrgg30d96Um4kPOmw.roa (hash: wc0aB7Ni4EKk0dSQ3idcDTvKajeMiNgmVf3XdjlXW34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:b6:58:2e:66:1b:a7:96:95:03:cc:1d:84:e4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a409555105040578cb296070074f45107252eeb
        Validity
            Not Before: Jan 25 09:01:08 2026 GMT
            Not After : Jan 26 09:01:08 2026 GMT
        Subject: CN=0b85d0cf82493fc14e391d1830b329aa92ae8b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:86:10:76:b9:44:8e:40:86:05:40:85:06:
                    28:c9:f0:be:a3:1f:fa:27:a2:98:21:e1:06:e5:3c:
                    6d:cd:38:92:bc:9d:46:b9:d8:ca:00:d7:88:7f:38:
                    d8:ee:0b:f7:d2:26:b0:8d:43:06:89:96:d1:1b:3b:
                    52:39:60:e7:0d:fc:5a:49:2a:94:1a:55:59:20:ef:
                    1a:e2:50:69:c5:b5:27:9e:42:28:c7:eb:c4:3d:e2:
                    9e:8c:15:ca:c3:0c:06:1d:18:58:c4:86:07:ba:27:
                    3e:21:60:14:6e:5d:44:8e:01:89:f2:23:81:8e:d9:
                    f0:1b:94:e6:60:b5:0b:86:e4:d3:81:60:93:9f:65:
                    2a:a8:8b:e3:26:d0:63:2c:2b:a0:ba:b8:0f:09:20:
                    b5:27:8d:b3:2f:eb:b9:7e:0a:83:9f:69:56:ea:9f:
                    89:75:44:d0:95:c8:ab:6a:b0:6f:d6:7d:65:97:26:
                    bf:09:d2:c3:4d:64:8f:0b:32:af:39:cf:d2:ba:1f:
                    01:04:5d:48:45:7b:8a:69:39:95:4d:6e:83:c2:8e:
                    d0:9e:7d:21:60:02:4f:31:d8:39:a7:e9:6e:27:49:
                    76:67:49:95:3f:2c:49:74:4d:bd:09:3d:7b:98:d5:
                    3c:03:de:05:ab:7a:68:67:12:e1:a8:08:7a:bc:55:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:D0:CF:82:49:3F:C1:4E:39:1D:18:30:B3:29:AA:92:AE:8B:97
            X509v3 Authority Key Identifier:
                keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:54:33:94:06:ae:e6:2f:ad:53:fc:5d:71:40:57:57:58:20:
         91:6f:3c:ec:dd:d0:a3:2c:3c:a8:f3:28:44:d5:f4:68:1a:90:
         1f:92:d5:d5:e9:d8:2d:3f:19:26:8a:48:ac:f0:ee:a7:0d:75:
         1f:84:0a:b5:6a:72:03:24:dd:ed:5f:17:c3:10:b0:43:52:b4:
         e7:6c:c1:3c:c1:93:27:31:d4:4e:a3:72:6f:26:cd:bc:5c:88:
         bf:68:10:72:6e:7b:dd:3d:02:4e:78:fd:55:cb:6c:70:43:5f:
         37:a2:db:49:e7:12:1a:49:ff:df:ab:cc:d0:df:73:e6:b7:5d:
         33:de:9b:7b:31:8b:f9:91:5b:76:83:56:d2:f4:e6:55:68:5a:
         1e:06:27:f5:6e:d1:07:0e:5d:6c:dc:47:66:60:20:3f:55:a9:
         8a:c5:66:53:c5:f6:d2:85:26:8c:c3:2b:43:61:49:8a:77:cc:
         c7:58:53:d9:fc:29:0f:06:f2:81:66:97:23:11:5c:29:0d:e7:
         21:c0:98:b8:38:68:23:5c:b1:3b:79:05:ca:40:ec:38:59:80:
         00:76:65:d6:59:cf:ae:d2:0c:87:05:1f:2a:52:d4:25:e3:31:
         55:15:1b:2c:22:ae:e4:b2:d7:d5:e1:f7:60:46:7b:78:40:16:
         27:68:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:42 2026 by rpki-client