This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File:                     sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier:          Tig/8Owb9CeH9PUVOrQnoubBVHm6g49oaskGkTn0p78=
Subject key identifier:   B2:9E:19:F7:1C:FD:FA:9A:25:E1:CA:EE:64:B8:5B:45:06:55:3D:F7
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer:       /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial:       019BFB0976B6CCDBDBD292EE8ECC5BAE1335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number:          1395
Signing time:             Mon 26 Jan 2026 16:00:59 +0000
Manifest this update:     Mon 26 Jan 2026 16:00:59 +0000
Manifest next update:     Tue 27 Jan 2026 16:00:59 +0000
Files and hashes:         1: Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa (hash: juQkDFo0AIVz1+RSIS9ayHrDC2gpBK7MmNeN9tyG2go=)
                          2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: g7cu+ia67IvPfTha1/fHioCxhZnF/iSqvz+DWmdKVOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:09:76:b6:cc:db:db:d2:92:ee:8e:cc:5b:ae:13:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
        Validity
            Not Before: Jan 26 16:00:59 2026 GMT
            Not After : Jan 27 16:00:59 2026 GMT
        Subject: CN=b29e19f71cfdfa9a25e1caee64b85b4506553df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:31:3a:48:4e:aa:4b:66:5e:45:6d:ce:6b:
                    90:4f:80:87:17:23:a2:4c:fc:db:16:22:66:8a:c7:
                    8d:89:0a:14:5f:6c:ac:70:6d:b0:52:63:8d:80:9a:
                    f5:e9:f2:7d:7d:0e:7e:9f:c5:58:c9:9c:bb:44:e1:
                    6a:80:0f:61:ee:08:0f:ba:97:70:10:cd:72:24:b1:
                    d7:b8:e1:a6:c5:e1:f4:da:9d:2b:7b:95:cc:92:15:
                    71:24:1b:a1:cd:9c:28:07:39:75:27:d5:72:d2:11:
                    1d:53:dd:ff:e9:00:b6:98:5b:ba:16:88:2b:3d:da:
                    d1:ac:5c:ed:3a:2d:8e:f8:7c:a3:f6:eb:51:6d:fc:
                    05:83:1f:22:25:9a:20:1c:d1:46:8d:09:bf:bd:fa:
                    d5:72:be:64:88:ae:46:4a:07:6d:c5:de:74:fc:42:
                    ca:55:39:bc:28:e6:b1:b7:ae:60:1d:f4:7e:d8:a5:
                    02:0f:67:65:e5:95:d3:b9:bd:3c:9f:73:b4:92:c4:
                    a5:ed:27:b9:c0:61:6d:a2:81:eb:2e:1e:66:fa:ca:
                    35:44:6f:49:89:fb:62:c7:5b:a5:b7:79:43:07:43:
                    40:d4:43:c5:e6:d3:9a:20:ca:ef:22:43:9f:e0:63:
                    5e:85:ce:b2:70:25:db:f4:77:cc:ba:eb:2f:f8:64:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:19:F7:1C:FD:FA:9A:25:E1:CA:EE:64:B8:5B:45:06:55:3D:F7
            X509v3 Authority Key Identifier:
                keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:10:b2:67:c0:8a:1b:01:41:a0:d4:dc:ea:43:68:b3:a9:66:
         ef:b4:7e:f5:05:0e:5b:98:a6:71:b6:f1:96:f2:d1:c2:2a:3c:
         b2:4c:ab:c5:23:ce:0a:f7:6e:90:d9:64:cd:c1:ec:8c:9f:fd:
         72:46:ba:77:5f:0d:c1:a0:52:21:ac:37:8f:34:2b:8d:63:53:
         ed:8a:11:04:0b:bd:39:b4:55:06:20:d3:24:7e:b8:88:0c:cb:
         f7:22:07:f1:8a:f8:ea:11:f2:55:2a:81:67:3f:b9:f7:26:7d:
         f8:b4:38:33:3d:0b:00:10:ad:6e:2b:40:b6:07:cc:31:a5:3a:
         c4:a0:55:ea:25:17:42:5e:45:f4:8f:97:41:7a:a9:64:a4:d1:
         16:93:34:45:3a:05:d9:9d:c3:c4:65:f0:fd:cf:e2:1f:2a:e9:
         1c:13:ca:fa:1c:49:69:45:4a:f6:0f:a0:64:21:af:bf:d7:e2:
         88:41:df:8c:6a:2c:21:f7:d1:bf:ff:78:41:1c:df:15:5b:e2:
         66:03:4d:8c:e1:5e:ca:17:79:b4:72:5b:92:c5:05:f4:f4:d6:
         f1:ea:83:8e:be:5b:3b:90:da:8d:d4:d8:84:0e:59:ff:fa:93:
         ad:38:d9:5a:95:88:37:ff:73:85:ad:10:36:b2:da:d1:82:24:
         d8:6f:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:04 2026 by rpki-client