This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File:                     saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier:          OJt0JSzWkaPIxKGSKEupZuANld70kxKtK5SaK9bWV94=
Subject key identifier:   83:C2:49:45:FB:83:97:96:79:DC:D9:6F:FD:F9:CF:19:80:48:49:34
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer:       /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial:       019BF6883F53A70D8F51442690A6F1227879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number:          17FC
Signing time:             Sun 25 Jan 2026 19:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:22 +0000
Files and hashes:         1: JIuy1yADZ-WZO4oAxQqNA1Wq5AE.roa (hash: Z5LJLNpxBzdsKbIiGUAut0ZaWggo2BNQFiKt/gU6WAI=)
                          2: W03Nbk16lpsFFFHwZEVyGb3GdCk.roa (hash: 2uorc6ih53DwXRdYsCumZcTs0fUh5iNGE9WcBcj9AO0=)
                          3: km0TI5gSsaXM0ksLgopKp3QzU78.roa (hash: duTA4ngL0m0KQkmYbp4PQQqGU8slrpfiT+Ukyerp3dc=)
                          4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: mhzdKsbH5FpL+IM4G8PqIjQ0pdStN0ygVVgluVxYPC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:3f:53:a7:0d:8f:51:44:26:90:a6:f1:22:78:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
        Validity
            Not Before: Jan 25 19:01:22 2026 GMT
            Not After : Jan 26 19:01:22 2026 GMT
        Subject: CN=83c24945fb83979679dcd96ffdf9cf1980484934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:05:de:34:8c:2a:5c:15:ac:73:98:c4:49:
                    eb:de:43:21:7b:6d:03:76:50:b4:1f:12:73:ec:33:
                    92:9a:e7:2e:45:35:7a:23:75:f5:af:a9:ae:bd:03:
                    6a:5a:10:e1:e6:e7:9c:c3:e6:31:de:c8:52:d5:7a:
                    69:5d:69:57:e3:1c:d9:06:80:fe:4d:cc:1c:8e:6e:
                    d5:a1:f7:2e:f5:0e:df:94:24:15:aa:a1:79:ff:31:
                    6f:83:4e:59:a3:6e:39:a3:a4:f7:48:bc:5c:f5:8d:
                    19:b4:ab:2f:bf:41:8f:2c:b7:de:98:a0:41:7c:69:
                    54:9a:84:e6:6e:a1:09:67:bb:8e:76:6b:65:cb:fb:
                    6b:af:6a:e5:89:75:f3:b8:30:6c:bc:dc:12:51:5c:
                    5a:08:cf:55:1a:f5:b2:2d:e9:cc:2c:70:5b:ca:4b:
                    fa:01:87:ee:8c:27:c3:06:14:ec:18:2b:ce:ab:7b:
                    fe:1c:4a:2b:08:7c:5c:d1:8c:bc:c0:fd:38:b9:70:
                    8e:57:22:e0:e8:d0:7e:05:93:f4:aa:cb:96:95:76:
                    fa:23:2f:e1:1e:ff:86:e2:82:7a:3c:fd:46:7d:7a:
                    61:23:fd:17:96:e4:0e:a5:69:2c:c6:8e:da:75:6d:
                    05:3b:82:27:e4:2d:60:26:06:d0:e6:82:6a:21:61:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C2:49:45:FB:83:97:96:79:DC:D9:6F:FD:F9:CF:19:80:48:49:34
            X509v3 Authority Key Identifier:
                keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:61:d1:c8:4c:1e:84:42:c0:f0:b9:a4:25:38:c3:ff:1b:bf:
         a7:e1:39:f8:f0:60:47:de:18:83:d9:82:e2:f7:98:79:f6:c1:
         8d:d0:7e:31:b9:32:28:fd:cb:fd:e7:56:c3:9b:cc:f6:8b:31:
         a9:12:5b:18:aa:73:ca:57:58:80:a2:95:ce:3c:e6:e3:fd:bd:
         5e:85:b4:7c:1e:aa:37:ca:3c:50:73:80:04:ae:70:04:69:9c:
         68:7f:7f:22:1c:c8:d2:1d:e7:13:d5:73:43:73:51:d3:c1:e6:
         4d:a3:62:61:17:f9:93:f4:28:3e:c7:c3:ba:69:1e:90:f2:3a:
         59:12:9e:07:e2:c3:20:e0:b3:2c:d3:92:5a:48:c2:88:6c:9e:
         55:49:06:b3:6f:d8:af:e2:3f:72:7e:b2:b8:90:7d:65:46:e5:
         fd:c7:56:99:0b:17:15:fa:04:7c:03:46:2d:55:ff:b2:00:30:
         39:8a:a9:0d:bc:35:2b:27:28:21:2e:8c:78:3c:9c:1e:0a:02:
         45:f8:8d:cb:61:e9:52:ac:12:66:f4:35:30:31:fd:11:dc:1e:
         5a:35:01:5f:c9:55:9e:1f:4c:21:c2:28:a4:6c:38:ea:f7:de:
         8d:af:06:cc:dc:49:bb:bc:06:dc:7c:7f:e4:4a:68:35:02:93:
         31:82:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:19:58 2026 by rpki-client