This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File:                     SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier:          Zb/pjLeNDaD8jP5MGC4SdxlAalT/Kxe0oUuOfaW1cMo=
Subject key identifier:   5A:9E:14:BD:65:4B:BA:F3:71:E7:02:EF:B9:EC:B6:5F:C9:DA:DC:BC
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer:       /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial:       019C42EB64414685F0C6270E10AAC18BCBF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number:          0D18
Signing time:             Mon 09 Feb 2026 15:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:48 +0000
Files and hashes:         1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
                          2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
                          3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: yUUMZGgTeeLkHg8ggL0LhN3MxD98MH/F+BS7/KHnI1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:64:41:46:85:f0:c6:27:0e:10:aa:c1:8b:cb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
        Validity
            Not Before: Feb  9 15:00:48 2026 GMT
            Not After : Feb 10 15:00:48 2026 GMT
        Subject: CN=5a9e14bd654bbaf371e702efb9ecb65fc9dadcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:b7:d6:04:55:97:0f:76:b8:a2:ad:35:3f:
                    92:ae:70:fa:22:ec:a8:85:15:f8:05:60:e3:a8:c2:
                    10:79:58:18:d5:cf:5a:ba:0d:4c:5d:d0:41:b2:19:
                    d1:0a:40:07:2e:d7:ac:09:22:c7:84:2d:2c:de:1c:
                    a6:ff:74:cb:59:31:e0:18:50:8c:03:de:27:f2:b3:
                    d7:cf:36:f4:70:53:b9:9b:0e:7b:13:92:de:a9:ad:
                    72:dc:6e:61:4f:5f:c2:c4:bf:e4:18:4e:80:db:a2:
                    cc:fe:41:81:e0:2f:c0:9e:b5:66:98:1e:25:ee:d6:
                    a5:cd:ef:24:e2:d6:b9:59:c7:52:d8:43:db:45:75:
                    8e:b4:92:14:18:2e:1b:2f:24:25:a8:7c:28:aa:d1:
                    a3:94:64:6b:7b:33:d4:75:89:7f:e3:fc:eb:eb:69:
                    08:99:7b:c7:50:a5:89:35:59:93:03:76:62:50:a4:
                    8a:b2:4f:1f:17:c5:08:92:21:27:50:f8:b9:83:14:
                    93:5c:e8:8f:54:df:98:84:fe:e0:a9:ac:d1:a1:59:
                    27:0f:28:2f:72:a2:ff:e5:db:d0:c8:dc:a2:db:cd:
                    e7:19:3c:4e:4a:37:71:ac:e0:34:fb:36:67:5e:e6:
                    f6:d5:e9:b8:b5:e6:e3:ea:33:01:1f:ac:89:a4:60:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9E:14:BD:65:4B:BA:F3:71:E7:02:EF:B9:EC:B6:5F:C9:DA:DC:BC
            X509v3 Authority Key Identifier:
                keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:69:51:c8:68:1f:4c:44:54:6d:27:8b:08:29:89:bb:7b:
         01:7a:9c:a1:26:cd:22:80:03:4d:e6:be:23:38:d1:2b:22:48:
         b4:c3:11:11:5c:6b:98:8e:0f:5f:7e:58:d1:60:9e:b6:55:9f:
         d1:91:08:67:6f:99:94:11:6c:85:96:2c:5d:63:a8:0b:08:0d:
         6c:d7:33:fa:8c:85:10:3c:71:23:92:c2:9a:c1:a0:eb:af:aa:
         90:c8:81:e8:f2:3a:cb:5b:75:d3:68:a3:1e:a6:a1:cf:bd:bc:
         16:10:bd:af:82:d4:71:70:03:dd:61:d7:cb:9a:9e:93:07:1a:
         49:12:80:57:0b:39:37:68:51:9a:9e:7a:f6:65:1b:12:e5:9b:
         da:fd:72:ea:ee:31:a3:11:a9:3b:11:4d:d5:b5:f5:59:0b:42:
         ba:42:0c:03:49:3b:f0:4a:c1:62:80:d3:c7:6d:77:c7:6c:4c:
         95:63:50:5f:13:8b:60:7a:68:43:db:b4:c8:0c:7c:6b:1d:5f:
         f0:30:9f:92:b0:3c:fe:89:0b:f2:ba:58:9a:72:ea:2a:fe:6c:
         2d:86:a2:5d:98:64:ff:fd:09:cf:92:70:6b:5b:d1:54:19:f5:
         48:26:26:1e:25:a0:8b:ed:3e:6d:9c:34:75:3b:d4:a8:65:d8:
         95:d7:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:05 2026 by rpki-client