This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          EW+i5I4v0WvcbM2ckqAI5GELd7cmrTMqkII4yQIQg5E=
Subject key identifier:   42:24:B7:94:B0:94:79:73:BE:F5:FF:52:B5:62:AD:39:8F:83:5C:B9
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       019BF763EA27E777AB7E1A94EE0ABFE2226A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          15E8
Signing time:             Sun 25 Jan 2026 23:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 23:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 23:01:18 +0000
Files and hashes:         1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
                          2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
                          3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: +niRk8W5hucIUqjWlGD8IBIYl1gALrzqN4z4QbquELU=)
                          4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
                          5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:ea:27:e7:77:ab:7e:1a:94:ee:0a:bf:e2:22:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Jan 25 23:01:18 2026 GMT
            Not After : Jan 26 23:01:18 2026 GMT
        Subject: CN=4224b794b0947973bef5ff52b562ad398f835cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:da:67:97:98:75:ff:8b:40:f3:97:a2:93:4c:
                    01:13:02:6f:fc:dd:6e:3d:6b:c6:81:1f:29:7f:e8:
                    af:a0:b7:11:6a:a8:34:1d:2c:f2:62:96:40:ee:12:
                    f4:56:f5:13:5c:de:05:55:e3:95:e3:c9:09:1c:07:
                    68:11:b8:cb:26:5f:b4:28:b8:22:1d:eb:56:31:87:
                    d2:8d:27:02:b1:dd:d6:3d:ce:b6:17:1b:30:aa:73:
                    59:c4:18:c0:78:67:b9:e2:3d:0e:da:e6:2a:9f:2b:
                    5c:db:b7:97:8c:70:b4:3e:78:03:67:fe:ff:a6:76:
                    18:e4:47:a6:e3:a8:3e:4f:0c:c9:45:d3:ab:8e:e4:
                    b8:8e:85:2b:44:7d:f8:05:00:31:aa:db:0c:63:15:
                    93:88:08:2d:91:13:a4:20:4d:c0:34:b0:30:b6:1c:
                    cc:58:5e:12:8f:32:93:4e:7c:29:0c:90:1b:5e:d5:
                    00:61:de:a2:2a:a2:a0:b4:29:f7:a2:fb:9d:97:27:
                    8a:a2:c4:2d:58:95:6f:f8:15:38:27:8b:06:f3:38:
                    dc:ef:ac:d5:22:7e:10:36:71:dd:cf:23:37:55:31:
                    17:47:55:17:95:f9:51:01:01:ab:bb:7e:21:2c:fc:
                    a5:1b:35:c5:82:fa:3b:7e:db:dc:2c:86:a3:a0:d5:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:24:B7:94:B0:94:79:73:BE:F5:FF:52:B5:62:AD:39:8F:83:5C:B9
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:35:00:cd:f3:e1:47:98:82:a4:82:54:f0:0f:1e:c1:e3:d7:
         c8:ad:c5:2a:d2:37:40:8f:bd:1e:af:ea:68:37:57:dd:e3:8a:
         8c:67:30:8f:15:28:ca:5c:78:dd:7e:7a:f4:62:ed:cf:76:7c:
         47:59:53:3d:35:42:65:12:58:26:6e:b5:b3:4e:1d:55:33:e5:
         a3:7f:01:08:ba:b3:68:a2:6b:71:d6:58:2e:9f:64:de:89:20:
         9a:33:e1:f1:08:e2:f4:cd:0d:c8:c8:88:2d:61:c9:da:0f:54:
         f3:a7:1f:a3:83:ed:f2:f1:e6:d9:67:7f:73:2c:12:e0:33:18:
         8f:04:71:8b:da:d9:97:66:f1:32:dd:8f:80:36:92:33:79:fc:
         23:2c:72:12:07:0d:14:f5:19:0c:a0:69:29:0e:a4:85:41:e7:
         ad:15:6f:df:6f:11:5d:67:4e:41:e9:fe:6c:a8:c9:07:5f:be:
         73:5d:86:14:a0:46:13:01:cf:4d:04:87:77:bb:0d:ef:05:69:
         0a:ab:76:b7:a5:66:1e:f3:af:89:da:15:ba:57:d4:dd:c2:29:
         b6:86:38:59:09:81:5d:32:fc:31:95:84:d9:50:9d:1b:6b:7a:
         4c:21:01:56:b2:69:0e:6c:87:b0:39:66:6c:d4:eb:45:2b:e3:
         9f:62:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:57:07 2026 by rpki-client