This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File:                     SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier:          h6SenYgPYovl4xcOy2pE4He77YqXFgvOQMrIoSOrWTs=
Subject key identifier:   AF:52:93:4F:BB:50:58:A8:A2:40:00:B4:71:B3:3B:F9:1B:33:6B:52
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer:       /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial:       019C1BA6C8C76E0638E195E5A8D4AF2FF639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number:          9F
Signing time:             Mon 02 Feb 2026 00:00:40 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:40 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:40 +0000
Files and hashes:         1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: kyVnLGvgruf5BcpmR0BlhZOnW9yEaLIWieTX/+iRCG4=)
                          2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
                          3: rMUucMZwyHqVe68VNeoN6D-FuLA.asa (hash: nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a6:c8:c7:6e:06:38:e1:95:e5:a8:d4:af:2f:f6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
        Validity
            Not Before: Feb  2 00:00:40 2026 GMT
            Not After : Feb  3 00:00:40 2026 GMT
        Subject: CN=af52934fbb5058a8a24000b471b33bf91b336b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:57:1e:36:6a:a5:63:24:ef:07:2f:a3:60:
                    96:61:83:03:f2:ee:ad:fe:04:aa:0d:a9:92:81:c2:
                    ae:58:94:2a:d6:84:db:f7:ce:a1:2c:33:1e:09:03:
                    ee:be:38:08:8e:df:58:52:4c:b6:f7:b9:eb:85:76:
                    87:1d:a9:69:0b:72:bc:ac:9d:c1:4f:d5:b0:97:82:
                    ec:f5:d3:4d:af:09:35:6f:69:32:9d:bd:01:f6:c5:
                    11:d2:69:23:55:9b:16:a0:d5:63:d2:6e:5e:02:91:
                    9b:6d:14:2d:67:4c:aa:77:fe:51:cb:0e:6d:b0:44:
                    ba:2a:69:bd:66:a8:fe:92:02:08:45:e4:2e:ce:a7:
                    5a:c4:76:9b:01:a9:0e:c7:fd:67:31:72:e7:9d:44:
                    75:fe:5a:bc:50:ef:83:ca:0a:83:fb:73:ef:ef:3f:
                    8b:75:15:3a:a6:a3:c0:6e:16:28:53:eb:e8:23:77:
                    d8:6d:52:ff:61:f6:e2:4f:76:f5:b9:07:0d:6c:90:
                    f6:1f:6a:89:a5:09:db:d8:29:e3:43:35:02:a1:02:
                    21:26:ae:bf:db:0a:a1:f6:99:67:c9:a5:fe:d8:43:
                    3c:ad:31:50:ca:58:b7:41:6d:ab:5a:78:37:af:b8:
                    c5:5f:e4:cc:4c:9d:03:e9:b4:6a:6a:06:5b:00:cd:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:52:93:4F:BB:50:58:A8:A2:40:00:B4:71:B3:3B:F9:1B:33:6B:52
            X509v3 Authority Key Identifier:
                keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:b2:67:f1:85:67:65:51:4a:21:d7:33:f3:c2:f0:56:cd:
         ba:68:39:64:94:44:86:3b:1b:7e:b1:fd:26:53:cf:84:99:47:
         ed:94:3f:29:20:18:b2:d6:79:f4:78:3d:7c:f8:36:d1:6e:e4:
         b6:82:95:a8:c7:3c:d3:9a:cd:1d:fa:93:50:33:da:2f:d8:46:
         e0:8e:69:4b:05:06:70:33:9b:af:61:b0:ef:a3:bb:5f:20:0e:
         71:b3:22:08:35:ce:4e:10:74:f2:78:b3:2f:a3:76:61:03:1a:
         03:b8:64:25:c6:d1:63:d8:86:b4:31:ea:5a:46:b5:91:f8:dc:
         24:2b:b1:27:39:08:61:8f:3b:1b:5d:35:0b:b0:7e:68:8a:42:
         82:1f:21:ed:fd:c4:dc:c0:8e:b5:33:76:9c:9f:18:9f:0a:c8:
         73:62:0d:0b:27:5b:84:73:7a:20:3e:d0:9b:26:9b:e0:06:09:
         b1:e5:a3:70:c8:0f:20:76:38:b9:54:d2:9e:9f:6b:fb:87:85:
         ea:0c:30:61:4d:c8:55:42:69:b6:d0:ca:34:62:2c:80:9b:52:
         06:d2:a9:25:3f:07:8f:5e:7a:41:af:62:73:e6:c2:3c:d4:5a:
         d8:3f:7e:94:15:3c:e8:68:2f:e3:c2:01:e6:df:5c:3b:c6:69:
         35:6b:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:22 2026 by rpki-client