This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
File:                     SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft (raw, json)
Hash identifier:          IQlyCZK1i7PnNGAuj+aRhGnMjGVBJk93xswhRRi1g14=
Subject key identifier:   17:80:48:9A:5B:DD:08:A3:52:66:29:FE:FB:37:41:DF:CD:EB:FA:54
Authority key identifier: 48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E
Certificate issuer:       /CN=48949d3c873503dbd296bda60eb777bc541d514e
Certificate serial:       019C42B460852269D402EADEC01926D4B743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
Manifest number:          05CB
Signing time:             Mon 09 Feb 2026 14:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:43 +0000
Files and hashes:         1: SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl (hash: UqwsmZPUJOmvL0JoY2drfHj2jlCQa7ai1H8cPXVarHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:60:85:22:69:d4:02:ea:de:c0:19:26:d4:b7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48949d3c873503dbd296bda60eb777bc541d514e
        Validity
            Not Before: Feb  9 14:00:43 2026 GMT
            Not After : Feb 10 14:00:43 2026 GMT
        Subject: CN=1780489a5bdd08a3526629fefb3741dfcdebfa54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:60:79:1a:55:66:17:6a:c4:26:1b:b4:64:
                    ea:93:c8:2d:da:ed:8a:29:4b:df:1e:dc:99:ab:59:
                    fa:67:3a:9b:c3:e1:86:9b:27:76:6b:a9:ac:35:23:
                    de:65:f9:c1:04:12:6d:84:8c:21:35:dd:9c:44:f0:
                    48:0b:81:00:48:8f:e1:2b:23:40:49:52:e9:24:f6:
                    5c:8d:30:5b:43:99:1d:4d:b7:6e:36:43:28:ad:86:
                    fe:13:46:5e:8b:09:ee:e7:9e:4c:83:2e:d1:ce:d4:
                    f7:ae:bf:bb:37:6f:19:27:d5:24:e2:b4:c9:63:b9:
                    53:10:aa:b1:6f:7f:8d:61:5c:03:c5:ed:bd:f6:19:
                    fd:67:9f:7e:a8:01:7a:31:8a:d1:0e:b3:f6:2b:b3:
                    e5:d7:82:fd:81:0e:9c:28:c1:20:4c:33:e2:d1:2e:
                    95:6b:4d:13:d6:e7:67:a9:9e:06:e9:48:a9:8b:fc:
                    67:6b:ef:a1:79:c5:e6:c5:2b:64:a1:02:be:f3:85:
                    b0:fa:14:78:bc:c1:7b:d2:28:8b:f1:cd:d2:c2:6a:
                    ff:6c:fb:43:07:e1:d5:55:d7:e5:a3:28:85:0e:ea:
                    00:f7:dd:7a:64:6c:63:37:4d:fe:e4:04:0a:36:22:
                    4a:cc:9f:bf:06:ad:e3:2c:8d:9f:fc:99:85:01:16:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:80:48:9A:5B:DD:08:A3:52:66:29:FE:FB:37:41:DF:CD:EB:FA:54
            X509v3 Authority Key Identifier:
                keyid:48:94:9D:3C:87:35:03:DB:D2:96:BD:A6:0E:B7:77:BC:54:1D:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJSdPIc1A9vSlr2mDrd3vFQdUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4e637-729b-47be-a0ab-534962019460/1/SJSdPIc1A9vSlr2mDrd3vFQdUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d9:93:4d:65:4f:c2:43:46:01:7c:62:1f:40:21:79:32:ba:
         9b:32:20:dd:2f:58:04:9e:70:e0:82:47:0a:b5:6a:c2:a2:25:
         69:77:b7:63:ce:f8:3f:8e:25:55:5c:9e:67:0b:27:ff:03:0f:
         5e:03:76:ee:7b:f6:91:15:40:e2:18:ec:42:c8:87:44:d2:3d:
         b4:8b:eb:52:74:00:47:d3:79:ef:b2:ef:77:43:04:d1:90:fc:
         76:fa:d0:a6:b4:f9:30:22:58:dd:9d:2c:f8:02:aa:de:15:54:
         6e:d0:b7:e8:f1:92:ea:2d:4b:00:6a:e8:a1:03:0d:04:d2:ee:
         ef:4b:9e:33:9e:ff:de:0c:ce:9f:70:b0:f7:2e:fc:97:a9:f8:
         ed:1b:9e:1f:e8:87:85:10:f4:71:ad:47:7d:86:85:f7:ea:95:
         80:b4:64:a4:0a:ea:f5:82:d8:b9:c1:15:4c:3f:97:66:2b:b4:
         4e:8f:ea:ed:bd:fb:34:03:6d:a7:da:3e:be:5f:1b:f1:dc:c5:
         05:4c:53:e1:8e:be:2e:de:de:37:8d:49:4f:c0:50:bf:b2:c1:
         67:f3:dd:b0:27:de:27:a3:9a:f0:1d:f9:41:47:d2:47:46:1e:
         13:b7:49:6a:b2:8b:21:c0:e9:36:5a:2b:29:c4:20:79:b8:cc:
         ee:bd:ee:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtGCFImnUAurewBkm1LdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OTQ5ZDNjODczNTAzZGJkMjk2YmRhNjBlYjc3N2JjNTQx
ZDUxNGUwHhcNMjYwMjA5MTQwMDQzWhcNMjYwMjEwMTQwMDQzWjAzMTEwLwYDVQQD
EygxNzgwNDg5YTViZGQwOGEzNTI2NjI5ZmVmYjM3NDFkZmNkZWJmYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwddgeRpVZhdqxCYbtGTqk8gt2u2K
KUvfHtyZq1n6Zzqbw+GGmyd2a6msNSPeZfnBBBJthIwhNd2cRPBIC4EASI/hKyNA
SVLpJPZcjTBbQ5kdTbduNkMorYb+E0Zeiwnu555Mgy7RztT3rr+7N28ZJ9Uk4rTJ
Y7lTEKqxb3+NYVwDxe299hn9Z59+qAF6MYrRDrP2K7Pl14L9gQ6cKMEgTDPi0S6V
a00T1udnqZ4G6Uipi/xna++hecXmxStkoQK+84Ww+hR4vMF70iiL8c3Swmr/bPtD
B+HVVdfloyiFDuoA9916ZGxjN03+5AQKNiJKzJ+/Bq3jLI2f/JmFARZltQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeASJpb3QijUmYp/vs3Qd/N6/pUMB8GA1UdIwQY
MBaAFEiUnTyHNQPb0pa9pg63d7xUHVFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWIt
NTM0OTYyMDE5NDYwLzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lNGU2MzctNzI5Yi00N2JlLWEwYWItNTM0OTYyMDE5NDYw
LzEvU0pTZFBJYzFBOXZTbHIybURyZDN2RlFkVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtmTTWVP
wkNGAXxiH0AheTK6mzIg3S9YBJ5w4IJHCrVqwqIlaXe3Y874P44lVVyeZwsn/wMP
XgN27nv2kRVA4hjsQsiHRNI9tIvrUnQAR9N577Lvd0ME0ZD8dvrQprT5MCJY3Z0s
+AKq3hVUbtC36PGS6i1LAGrooQMNBNLu70ueM57/3gzOn3Cw9y78l6n47RueH+iH
hRD0ca1HfYaF9+qVgLRkpArq9YLYucEVTD+XZiu0To/q7b37NANtp9o+vl8b8dzF
BUxT4Y6+Lt7eN41JT8BQv7LBZ/PdsCfeJ6Oa8B35QUfSR0YeE7dJarKLIcDpNlor
KcQgebjM7r3uzA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:39 2026 by rpki-client