This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File:                     SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier:          +G54FRnySdBajOKpdSWexB0oBtHeKUU2XAJUpTjg1Es=
Subject key identifier:   81:E9:55:D6:D4:EF:9E:A7:F7:57:83:D7:96:4D:08:6F:66:E5:FB:38
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer:       /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial:       019C4133BE6814613F417577388739802DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number:          0C6A
Signing time:             Mon 09 Feb 2026 07:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:35 +0000
Files and hashes:         1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: T+/NhBIG9L1WlO1hyJhSNLQuHdLdrGSRytXrLc5wLFw=)
                          2: r0m1872U6WFK52zTuHKr_z62s0E.roa (hash: fs/NQYOW8kLu0+d2MC/W9zC6jnh40QEwXnfZoyCgClc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:be:68:14:61:3f:41:75:77:38:87:39:80:2d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
        Validity
            Not Before: Feb  9 07:00:35 2026 GMT
            Not After : Feb 10 07:00:35 2026 GMT
        Subject: CN=81e955d6d4ef9ea7f75783d7964d086f66e5fb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:9e:00:69:1f:9e:94:63:fa:d8:15:18:41:
                    e6:de:f9:cc:d7:39:1b:f9:ce:55:5d:37:07:02:cb:
                    6d:ba:49:4e:a0:27:b7:d5:6f:a0:c5:5a:86:e4:f1:
                    2e:f5:46:64:fd:54:bf:d2:13:2f:12:3d:5e:62:67:
                    e3:19:bf:5e:55:be:5c:96:8a:f4:19:7e:78:fa:cc:
                    c5:29:7c:c0:5f:a7:ee:fd:d5:1c:d1:ab:4d:74:11:
                    e6:f9:53:f4:59:65:99:1c:6d:31:20:0a:d3:86:0a:
                    21:ca:98:e8:b4:22:e6:07:71:a3:72:b1:cb:b1:23:
                    04:55:79:08:77:20:55:cd:4f:eb:76:cc:0c:46:dc:
                    c1:94:e8:6f:a9:4a:10:7a:d0:53:0f:b2:d5:a5:ef:
                    a3:11:c8:0d:dc:02:fe:15:d0:7e:d8:7a:bb:16:a7:
                    25:d9:4b:02:cf:61:7d:45:32:3b:84:cf:17:61:a6:
                    04:22:15:b2:4d:0d:d4:47:90:0b:b4:7f:08:58:4f:
                    1d:f3:a0:b0:72:4a:1d:ce:02:72:93:3b:1f:4f:e5:
                    f2:b5:94:e4:ac:7c:5e:f2:92:42:9f:59:15:97:ac:
                    5e:f6:42:56:d8:e8:6a:24:08:9e:b8:0a:14:f9:71:
                    e0:80:7d:4d:7c:a7:69:d5:91:65:77:65:58:ee:4a:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E9:55:D6:D4:EF:9E:A7:F7:57:83:D7:96:4D:08:6F:66:E5:FB:38
            X509v3 Authority Key Identifier:
                keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:5e:8f:3c:a9:e8:b7:08:9c:8b:e7:21:23:0f:74:c8:93:
         ad:ba:90:01:00:12:ef:40:01:4c:01:85:e6:86:69:8a:1f:90:
         a2:f9:da:14:04:94:d2:88:52:06:64:07:80:0e:4f:f4:27:f3:
         71:e1:78:bc:22:6c:4c:8d:d3:d6:1d:0c:1e:cb:65:fa:93:70:
         77:88:eb:06:56:63:db:90:63:f3:a5:93:72:10:6f:c4:13:27:
         7a:3e:c5:0b:55:d1:8d:16:c7:2a:e1:35:0b:e2:11:48:ae:0a:
         ad:d7:33:a9:a6:c9:c5:1c:c2:12:d0:8f:eb:24:70:0c:a5:4d:
         f8:eb:3d:65:a2:a9:7a:89:20:64:94:03:9c:21:50:db:42:5e:
         e5:b2:02:dd:1c:8f:bd:ca:3d:77:dc:ef:c3:65:30:c5:7c:91:
         79:01:25:90:e4:78:e5:66:29:bc:10:2c:b0:13:6d:af:61:34:
         4c:7b:7f:18:89:d6:bb:2d:b3:cc:69:e6:bc:b7:02:29:d2:e6:
         7e:e1:fc:0d:35:a3:6d:2f:23:68:31:55:16:04:8e:d2:42:60:
         1b:e9:9d:62:82:1d:02:d7:84:d4:cc:79:d7:b9:3c:9b:a9:7b:
         9b:c8:96:7c:72:72:c3:44:88:18:8d:7c:f1:e9:46:d7:5f:3d:
         2f:7a:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:46 2026 by rpki-client