This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File:                     sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier:          7W5ilSUGTTKpzpY2u1fAFrsew8IqaYSvE1dS2QHR2v0=
Subject key identifier:   39:E0:62:84:B4:A1:85:CC:B2:EB:66:60:35:C9:84:2A:F9:AD:49:88
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer:       /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial:       019C41D8D55F599A83ACEB0327EA0CAA0442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number:          1790
Signing time:             Mon 09 Feb 2026 10:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:55 +0000
Files and hashes:         1: QBlYbj346qzHUv19Z-I6ndDq6qo.roa (hash: VEZ9eyiW7HYhsOu44s2MXlQaK3GSzzboX5o0voLYcrI=)
                          2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: mc1zzlqUNeLezppcURwYk42lYNIcQnpTUm6mVBBgkyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d5:5f:59:9a:83:ac:eb:03:27:ea:0c:aa:04:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
        Validity
            Not Before: Feb  9 10:00:55 2026 GMT
            Not After : Feb 10 10:00:55 2026 GMT
        Subject: CN=39e06284b4a185ccb2eb666035c9842af9ad4988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:c4:02:7f:41:36:51:c5:4f:4d:fd:ed:f4:
                    8e:d5:68:ea:d7:b4:c0:92:34:ea:18:9a:ed:a5:5d:
                    d2:70:af:c3:77:04:f9:18:f2:c1:78:57:ee:47:16:
                    71:bb:d8:ff:a1:be:3b:a1:64:e9:61:cf:75:b7:18:
                    cc:70:a2:62:1e:c3:44:d2:52:8d:53:59:59:f0:f0:
                    f0:35:df:9a:6e:00:89:ff:d1:43:8e:b7:03:1f:5d:
                    30:ae:90:48:c2:53:3e:a0:94:11:26:90:61:a0:94:
                    3f:e9:11:15:34:b3:e6:54:73:45:45:10:0b:72:61:
                    3d:64:ee:2b:02:60:06:01:35:26:cc:71:3d:89:8c:
                    b2:05:32:d3:ef:06:0b:b3:b8:cd:61:21:9d:7a:b9:
                    bb:0b:cd:98:df:db:61:40:d7:59:95:d7:ee:5c:9d:
                    3c:a4:c1:ca:2b:15:d0:65:26:4c:7d:15:5d:f0:1d:
                    51:38:82:2b:34:63:8e:e4:1d:03:97:3c:ef:d2:dc:
                    e0:e8:2d:77:6e:ff:0b:e9:23:f6:d2:85:13:a9:97:
                    ed:71:2a:73:0e:71:c6:71:1e:3a:ab:2f:fa:af:53:
                    a7:7d:f9:b6:53:ec:3d:00:7a:bb:c5:1f:46:7a:c2:
                    cc:3a:4e:c7:64:88:18:d6:85:37:00:36:c9:49:59:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E0:62:84:B4:A1:85:CC:B2:EB:66:60:35:C9:84:2A:F9:AD:49:88
            X509v3 Authority Key Identifier:
                keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:fd:7c:32:fd:6d:e8:83:72:cc:cd:85:c7:11:3d:ff:67:81:
         95:b4:41:b1:a8:26:c2:fc:2c:cc:e4:44:81:7d:0e:92:be:0e:
         b2:99:5d:fd:72:1a:e1:22:e0:06:aa:e6:a1:99:d2:eb:32:28:
         17:ac:3b:89:18:dd:c5:3f:30:0e:6f:e0:0f:c3:31:bc:5d:7d:
         69:ed:9d:43:87:e5:3c:54:7e:3b:e5:b8:7b:ef:81:2c:82:0f:
         79:66:5c:ce:0d:8a:e5:0e:a3:b6:97:02:15:50:ac:20:9d:cb:
         bb:17:86:18:35:c6:0b:2d:00:56:3e:5f:eb:fb:9c:50:9d:cb:
         c4:19:68:24:f2:ff:0d:43:e8:5e:7e:fe:93:4c:47:2f:a6:a6:
         d0:9e:0f:7c:f2:ae:91:5a:13:e4:92:ca:67:f5:26:d3:77:85:
         84:41:cc:7d:14:c4:1d:59:93:72:6f:fc:fe:c8:4d:6a:9b:fd:
         86:4a:28:04:43:0f:05:fc:a7:77:3d:3a:68:69:40:9f:23:55:
         14:fe:35:e2:9b:01:00:6f:91:57:7b:65:91:c9:51:be:3e:e6:
         da:ae:5c:ae:39:b7:e9:5c:ae:0b:ad:82:24:6a:13:5a:e1:c6:
         cb:0e:2a:7b:65:1f:14:a5:89:ec:58:ff:d4:5e:4b:c8:7b:59:
         4b:02:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:36 2026 by rpki-client