This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
File:                     SCJSDeYUN6bOZcbjRidHBwPmXtE.mft (raw, json)
Hash identifier:          5mwIDdF0sD9XIzbnbu2asvYNaqaj6m6iGXOZItpKyWQ=
Subject key identifier:   DE:01:3D:14:4D:FE:51:48:4D:F7:CA:DD:30:7F:9A:F6:BD:70:AA:86
Authority key identifier: 48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1
Certificate issuer:       /CN=4822520de61437a6ce65c6e34627470703e65ed1
Certificate serial:       019C41D8EFC05BD3C1BDC7E39CFBECB058B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
Manifest number:          27
Signing time:             Mon 09 Feb 2026 10:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:01 +0000
Files and hashes:         1: SCJSDeYUN6bOZcbjRidHBwPmXtE.crl (hash: ovFwIyacymH0eAfs/kzxY5CKg5VFgtP8N8CNrcY7QUY=)
                          2: hy7V_eg1KosUr6B48auj7x_GyG0.roa (hash: esE+dAQn3fgKAAwpaNKRZUcrbj7NuDcvWUlHXEbNi8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:ef:c0:5b:d3:c1:bd:c7:e3:9c:fb:ec:b0:58:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4822520de61437a6ce65c6e34627470703e65ed1
        Validity
            Not Before: Feb  9 10:01:01 2026 GMT
            Not After : Feb 10 10:01:01 2026 GMT
        Subject: CN=de013d144dfe51484df7cadd307f9af6bd70aa86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:62:f1:0c:98:90:e9:e8:4a:b6:f0:8e:60:
                    43:65:08:62:cb:f4:4f:e1:d9:1b:f1:85:46:3a:63:
                    82:6c:ff:b6:4a:a5:1c:7c:bb:55:dc:3c:3f:d1:a6:
                    dd:fa:3a:cc:18:65:c6:b5:22:53:ee:6a:7c:71:9b:
                    ef:b8:c1:93:c2:3a:f1:ef:74:e5:09:a0:e3:85:c1:
                    ca:14:aa:0a:c3:20:b2:60:3e:20:4a:b0:7c:fc:22:
                    77:82:9c:c1:b9:1f:44:83:61:01:01:53:32:a9:ec:
                    3e:0a:06:57:98:b8:2e:bb:8e:66:29:1c:af:03:45:
                    7e:e1:16:74:48:2f:ed:be:86:86:e4:a1:b1:9b:61:
                    20:22:27:70:8a:11:3b:9c:94:98:31:16:e2:93:19:
                    47:5e:c6:c1:6f:06:61:f4:b7:7c:a3:55:ad:c7:d4:
                    e0:02:92:73:16:35:00:af:89:5f:ee:e3:05:76:65:
                    1a:97:17:1f:53:8a:14:e9:32:80:b6:88:50:5b:a3:
                    16:f4:4a:25:cf:a7:1a:a4:6e:cd:97:74:fc:e4:11:
                    da:ef:51:98:5b:1b:b3:6c:04:e2:c7:8a:a7:1d:39:
                    98:f7:28:80:79:cd:99:ed:c7:6f:74:2f:d2:2e:3a:
                    71:f2:6a:5d:1a:be:52:7a:d8:4d:55:35:d1:3b:47:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:01:3D:14:4D:FE:51:48:4D:F7:CA:DD:30:7F:9A:F6:BD:70:AA:86
            X509v3 Authority Key Identifier:
                keyid:48:22:52:0D:E6:14:37:A6:CE:65:C6:E3:46:27:47:07:03:E6:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCJSDeYUN6bOZcbjRidHBwPmXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c86cc3-3478-4407-8491-7dc873f5285b/1/SCJSDeYUN6bOZcbjRidHBwPmXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:62:58:9b:94:09:e5:33:67:ff:2b:53:b9:33:8e:7e:e3:1b:
         9c:47:0d:83:8f:87:e2:dc:4f:86:48:b0:a1:44:90:3a:48:98:
         04:56:e0:01:0c:38:a1:2b:3f:f0:98:ba:5b:de:ab:5c:4c:9d:
         da:ab:73:49:67:9d:8e:32:ef:e5:41:46:d3:87:a8:80:c9:83:
         70:f9:ac:f1:76:95:c2:45:70:d8:f7:0a:b5:b2:84:ed:e9:b0:
         c4:a3:90:0c:29:47:49:85:ce:e6:73:2e:74:61:06:36:7b:1a:
         aa:e3:d4:28:cb:0e:b9:b5:81:f3:65:fe:f1:56:31:35:66:de:
         f9:e2:ed:eb:cf:ff:7b:81:b0:50:30:61:8a:23:52:7f:84:b3:
         b4:62:dd:9a:4e:2d:74:5a:b0:8d:5b:13:82:f7:54:63:63:ce:
         72:21:00:ec:6d:e9:de:30:89:28:da:d0:71:8b:81:61:ca:a4:
         f8:4f:ec:ce:86:5d:9e:c9:70:ec:9f:6b:09:ce:1c:78:c8:cd:
         81:31:10:7a:a1:e3:d5:7f:97:f8:9a:47:41:ce:07:3a:d2:53:
         73:45:73:b4:da:2c:5e:ea:e4:6a:d0:9a:0d:52:27:31:87:93:
         7f:41:ec:0f:e4:11:05:24:f7:cc:e0:ab:7c:38:a5:6c:56:d7:
         a4:43:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:23 2026 by rpki-client