This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File:                     SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier:          /+8qQ5tKc4qYMdbY/iTuMmxd8kNjWj8rMEyPU50b4fQ=
Subject key identifier:   53:06:53:60:89:F8:3B:FC:A4:B6:50:FC:EB:38:D3:41:AE:58:B2:46
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer:       /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial:       019BF79A4E6C6B978551C83D7C00FDF333C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number:          14CF
Signing time:             Mon 26 Jan 2026 00:00:43 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:43 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:43 +0000
Files and hashes:         1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=)
                          2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: eOVHB0PB+8abbepX6+EJg1rFW7jbZODMFOENFT7ZBDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:4e:6c:6b:97:85:51:c8:3d:7c:00:fd:f3:33:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
        Validity
            Not Before: Jan 26 00:00:43 2026 GMT
            Not After : Jan 27 00:00:43 2026 GMT
        Subject: CN=5306536089f83bfca4b650fceb38d341ae58b246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:8b:a2:c5:dd:7b:6f:e5:9a:ba:af:e9:af:
                    6f:d2:30:83:5f:5f:c0:62:14:a7:72:0c:d3:10:38:
                    bc:8a:2f:a2:59:cd:9b:33:01:ff:1a:ac:0d:a9:30:
                    82:0e:7a:c7:6f:63:1b:55:5a:fa:60:bc:a0:82:e6:
                    08:28:28:f9:df:a4:01:9e:14:10:b9:a7:e1:b9:65:
                    79:db:31:53:ae:53:f7:43:c5:1c:8d:aa:98:1a:91:
                    e6:b4:8e:ce:89:f6:1d:89:a8:2f:0d:51:69:a6:fd:
                    b9:f0:46:75:46:25:3e:ed:bf:67:28:41:12:8a:96:
                    27:25:fb:a6:9f:d3:6f:da:c0:9d:81:ca:43:f4:87:
                    92:7d:dc:82:75:e9:68:11:b1:a0:5d:0d:22:32:e2:
                    1c:28:b0:99:82:0a:b9:05:fe:15:73:95:ff:4f:78:
                    4a:fe:88:f5:29:28:0a:af:1b:80:e2:a4:71:fd:a6:
                    2e:b3:b5:cf:ab:f2:60:cd:81:82:1e:80:db:04:0e:
                    86:b9:a6:fd:50:23:e8:68:58:42:6d:7a:84:7e:be:
                    a7:20:b4:de:00:56:53:df:fe:a8:26:01:09:35:81:
                    33:5a:a9:7e:5d:44:aa:90:67:03:28:f5:8f:4d:78:
                    97:75:7d:5e:e9:d4:d5:b5:37:ad:03:5a:92:37:b3:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:53:60:89:F8:3B:FC:A4:B6:50:FC:EB:38:D3:41:AE:58:B2:46
            X509v3 Authority Key Identifier:
                keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:87:c5:99:70:06:d6:76:c9:6e:98:da:93:3c:44:ab:a6:
         18:62:45:6c:4b:ca:89:96:e8:6d:26:2a:ab:d9:38:3f:da:10:
         d1:f2:32:b1:d8:f5:76:26:1a:be:32:74:59:9b:f5:03:67:45:
         b1:da:20:43:55:a3:6f:c0:8c:28:56:51:6d:b1:11:cf:e0:24:
         da:d2:9e:b8:d2:05:9b:52:d9:4a:48:18:ac:81:3a:c6:ea:f8:
         f9:f8:0b:0a:53:6a:e7:6f:60:27:10:08:35:77:1e:44:f9:dd:
         3f:96:97:72:66:d3:82:7d:e3:8f:4b:dc:3a:c4:f7:5a:46:ce:
         e9:da:b6:3b:2d:c0:30:0a:89:9b:b8:67:d5:fb:07:f4:d3:81:
         68:4e:f7:ea:6d:d4:bc:c6:ca:66:86:47:2e:ad:54:a4:99:b6:
         dc:71:be:23:43:ff:ca:87:74:a4:85:66:ba:18:19:30:57:98:
         49:b9:a7:01:90:a1:12:7d:dd:da:79:b6:ce:18:c9:4c:ee:87:
         61:2b:f8:6b:38:19:3b:6c:21:32:67:c7:3e:68:76:c3:1d:97:
         bc:29:c0:e1:5d:09:53:e0:29:95:d0:51:5c:7f:62:57:39:e9:
         41:0f:f1:d0:08:7c:de:b1:e7:ad:5b:45:a9:a3:30:bf:f0:8a:
         f5:e4:53:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mk5sa5eFUcg9fAD98zPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0
YzdjZWUwHhcNMjYwMTI2MDAwMDQzWhcNMjYwMTI3MDAwMDQzWjAzMTEwLwYDVQQD
Eyg1MzA2NTM2MDg5ZjgzYmZjYTRiNjUwZmNlYjM4ZDM0MWFlNThiMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnaLosXde2/lmrqv6a9v0jCDX1/A
YhSncgzTEDi8ii+iWc2bMwH/GqwNqTCCDnrHb2MbVVr6YLygguYIKCj536QBnhQQ
uafhuWV52zFTrlP3Q8UcjaqYGpHmtI7OifYdiagvDVFppv258EZ1RiU+7b9nKEES
ipYnJfumn9Nv2sCdgcpD9IeSfdyCdeloEbGgXQ0iMuIcKLCZggq5Bf4Vc5X/T3hK
/oj1KSgKrxuA4qRx/aYus7XPq/JgzYGCHoDbBA6Guab9UCPoaFhCbXqEfr6nILTe
AFZT3/6oJgEJNYEzWql+XUSqkGcDKPWPTXiXdX1e6dTVtTetA1qSN7N8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMGU2CJ+Dv8pLZQ/Os400GuWLJGMB8GA1UdIwQY
MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt
NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2
LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVuHxZlw
BtZ2yW6Y2pM8RKumGGJFbEvKiZbobSYqq9k4P9oQ0fIysdj1diYavjJ0WZv1A2dF
sdogQ1Wjb8CMKFZRbbERz+Ak2tKeuNIFm1LZSkgYrIE6xur4+fgLClNq529gJxAI
NXceRPndP5aXcmbTgn3jj0vcOsT3WkbO6dq2Oy3AMAqJm7hn1fsH9NOBaE736m3U
vMbKZoZHLq1UpJm23HG+I0P/yod0pIVmuhgZMFeYSbmnAZChEn3d2nm2zhjJTO6H
YSv4azgZO2whMmfHPmh2wx2XvCnA4V0JU+ApldBRXH9iVznpQQ/x0Ah83rHnrVtF
qaMwv/CK9eRT9w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:47 2026 by rpki-client