This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File:                     SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier:          gs0zV8ksdyH7ACA+l24PU25+PtsUvr2FUpSdPeSuDN0=
Subject key identifier:   3D:0F:9F:E3:82:F3:89:3E:C6:8B:20:CE:0C:BD:74:1D:C9:C8:37:F7
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer:       /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial:       019C1C14C0CA3551890CA171E89413442F35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number:          161B
Signing time:             Mon 02 Feb 2026 02:00:47 +0000
Manifest this update:     Mon 02 Feb 2026 02:00:47 +0000
Manifest next update:     Tue 03 Feb 2026 02:00:47 +0000
Files and hashes:         1: Fym1WDAWGgMSosv4mRAOR2Zd1uc.roa (hash: vZJwqpl7spZp55ORY+9XKXnqFR+l7MtH4O4BrsC2PHQ=)
                          2: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (hash: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k=)
                          3: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: 9btdwyWCYYxeQ5sh82KtCz2TWKoGD1NP9b0UTpdC2vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:14:c0:ca:35:51:89:0c:a1:71:e8:94:13:44:2f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
        Validity
            Not Before: Feb  2 02:00:47 2026 GMT
            Not After : Feb  3 02:00:47 2026 GMT
        Subject: CN=3d0f9fe382f3893ec68b20ce0cbd741dc9c837f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:b7:32:9e:6c:46:05:1d:24:b7:d4:89:cb:
                    01:03:68:08:da:a2:00:73:88:f3:e3:88:0c:05:b9:
                    bd:45:51:b5:89:74:3f:79:86:e0:5e:f5:1b:05:5a:
                    e0:93:5a:e1:dd:67:f3:9b:11:12:80:14:c6:69:51:
                    10:a7:72:d2:13:ba:7f:ee:42:64:0d:50:e5:fb:b5:
                    ae:f7:cd:2d:aa:dd:85:0f:f6:06:88:b0:ea:ba:57:
                    35:4d:9d:ae:f4:d2:e4:4f:d7:dc:61:c3:e9:2e:8b:
                    31:d6:fa:32:ce:ec:8c:a8:30:74:05:0b:3d:83:26:
                    9b:c0:82:11:51:37:03:00:2a:f2:5f:76:81:96:b8:
                    14:55:d4:c5:48:d9:97:c8:c9:69:8b:d3:0d:45:b2:
                    c3:ac:06:c5:e2:05:90:31:79:54:22:4f:2f:aa:17:
                    0d:4a:44:8f:96:2f:6c:23:df:ab:4f:f5:43:bc:15:
                    9d:d5:c8:13:da:e2:b9:af:93:8d:62:bc:36:5c:ec:
                    da:64:d3:2b:4b:c3:7e:cf:4a:fa:31:63:5c:ce:6c:
                    c8:c7:a8:80:3a:31:06:4a:3c:21:76:9d:ac:de:f7:
                    27:7d:56:2a:9e:7c:0f:7f:05:91:b7:4f:64:5c:a8:
                    e6:0b:a6:7b:1d:18:3f:2a:36:31:69:d6:9c:5c:b0:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0F:9F:E3:82:F3:89:3E:C6:8B:20:CE:0C:BD:74:1D:C9:C8:37:F7
            X509v3 Authority Key Identifier:
                keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:73:49:b6:b6:86:d1:5d:9f:1b:66:f9:72:17:a6:a2:d1:
         4e:63:16:28:f6:aa:a7:44:82:30:9e:1b:7d:a9:64:c2:0f:4e:
         c2:65:5f:5d:b9:c2:f3:d2:c6:4f:0c:f0:11:ae:af:01:0b:15:
         d7:df:00:a0:5f:d3:92:49:0e:c2:34:80:fd:83:ef:bd:bd:75:
         68:97:1b:8a:c4:23:62:a9:45:0d:0c:78:46:8a:c1:d2:c6:90:
         13:e5:65:2a:ae:5d:21:22:3d:8d:5b:51:0b:7c:21:b3:60:24:
         46:3f:6f:75:07:45:0c:b5:b7:a0:92:fa:7c:ac:df:97:55:d2:
         2a:b4:2b:a6:fc:e9:ca:7e:a1:d4:22:e9:a4:fa:2d:5c:60:a5:
         5c:1a:f4:b6:0f:ee:81:cc:16:ee:85:bc:b6:23:85:12:df:ef:
         1a:65:57:8b:78:d1:2e:a9:b5:39:e4:43:d5:d7:86:34:10:db:
         6b:7d:c3:71:fd:96:76:aa:0d:b6:9a:38:7e:a1:eb:97:11:0f:
         77:cb:dd:b7:65:50:b2:5d:06:64:33:0a:81:92:81:59:d9:5d:
         62:54:b2:97:3c:40:f1:42:71:32:c3:d6:2e:b7:42:47:e4:53:
         b0:91:b2:37:8c:4b:e1:9c:d5:0e:00:0f:57:bc:c1:cc:34:fa:
         9e:23:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:08 2026 by rpki-client