This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
File:                     SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json)
Hash identifier:          j25Hr9eNj3BsXkmO9sBcV+V83N5BpRFbRwkDlaaZfu4=
Subject key identifier:   44:E5:2A:4F:A7:21:61:DD:1A:BB:09:15:C8:19:C6:4D:40:49:B8:F3
Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
Certificate issuer:       /CN=482734bff01a3ceab350bcb84b25f73be829df6f
Certificate serial:       019C427D1E230B15B3D23C8701C5493FDF36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
Manifest number:          0258
Signing time:             Mon 09 Feb 2026 13:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:21 +0000
Files and hashes:         1: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: eNkSa80qo0dQvGVJ6zSqzL3kYaqN1PcUM59zpcUjG0M=)
                          2: rL1DSaQ9b1jLm2PglJQrH9t9aF0.roa (hash: KRJaPLV1D/wK1Jz64oCWVytuVNDt1KVUfdmkO2/NHCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:1e:23:0b:15:b3:d2:3c:87:01:c5:49:3f:df:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f
        Validity
            Not Before: Feb  9 13:00:21 2026 GMT
            Not After : Feb 10 13:00:21 2026 GMT
        Subject: CN=44e52a4fa72161dd1abb0915c819c64d4049b8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:b5:4e:34:2b:11:c3:e0:2a:32:07:26:0f:
                    dd:a2:bd:87:41:0c:95:ae:35:73:e1:33:85:99:2d:
                    a5:6a:2e:d3:58:ab:9e:6a:a9:f3:3e:41:a8:b4:34:
                    30:7a:b1:20:d8:66:4b:21:2f:e4:95:17:33:8d:b0:
                    30:3b:02:4d:14:83:af:70:50:79:be:11:75:d5:0a:
                    f9:10:30:bf:03:1b:1f:8e:d8:fa:bd:fe:99:d3:3f:
                    00:93:b7:03:42:16:36:77:ff:d1:b4:56:be:29:16:
                    d9:26:28:5f:f6:69:0c:0a:4e:92:b6:4b:68:62:73:
                    a0:b9:cc:24:36:92:39:12:72:a1:ef:09:6d:a2:62:
                    23:6d:70:3a:87:f4:80:e0:8b:e7:26:d4:54:a7:cf:
                    f3:06:08:d4:49:8b:fc:c9:78:07:5c:64:a0:4d:29:
                    b2:fb:22:b9:e9:0e:1d:a9:b4:ae:bb:ec:9c:e2:78:
                    b9:a6:bf:57:28:df:c2:3c:92:e9:1a:fb:95:37:4b:
                    fe:86:8b:97:97:9a:8a:6d:e0:74:35:27:32:c3:17:
                    97:ff:99:61:02:12:31:f7:e2:47:7c:50:b4:18:2c:
                    d4:91:8a:2a:96:a2:d9:6d:75:37:a5:03:49:98:aa:
                    be:97:d1:ae:8e:79:f0:f5:f3:dc:e2:76:0f:8e:8e:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:2A:4F:A7:21:61:DD:1A:BB:09:15:C8:19:C6:4D:40:49:B8:F3
            X509v3 Authority Key Identifier:
                keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fb:20:22:e0:bc:c9:3c:e1:66:83:bf:22:4f:53:56:ae:2d:
         86:c9:ef:ca:6a:16:3e:59:af:c8:61:ea:22:3b:d6:87:47:a9:
         71:d9:d4:cf:ea:9e:22:23:3b:2e:f9:33:f7:5b:37:95:13:51:
         eb:df:03:6e:22:79:93:16:d8:64:c3:69:4b:b1:16:10:86:10:
         22:9d:bc:41:5f:eb:18:ca:41:8b:e1:ba:af:9c:bd:d6:78:8f:
         55:34:dd:e0:08:d2:5e:ec:62:31:41:cc:6b:e6:4b:48:93:0c:
         79:0f:28:01:78:66:62:90:40:16:ec:ef:75:bf:e0:e5:93:c9:
         65:b4:16:d6:51:5d:a2:ec:b3:dd:fb:01:99:74:c5:73:b6:72:
         8e:9e:a9:c2:7c:3d:98:65:e7:42:a5:d7:32:17:52:1b:1b:62:
         06:d3:53:cf:4d:b0:8d:7c:b7:8c:59:8b:35:08:bf:78:7d:9e:
         e0:0e:56:c4:5e:9d:77:d0:12:f0:55:ee:76:45:85:ae:c9:ed:
         9f:c9:82:37:80:a6:c2:a4:85:6e:f2:b0:6d:68:78:0e:2a:aa:
         22:10:d4:de:02:9e:98:c3:af:cd:4c:4c:d6:a3:44:37:1a:40:
         36:6a:4e:2e:36:d1:8a:14:7b:a1:8d:32:71:94:fb:d3:9e:09:
         e5:f6:0c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:12 2026 by rpki-client