This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          tyj+jYrvVJuE0/8p4C85FdhD4HZykLqJVO/K1y2EUII=
Subject key identifier:   CF:59:B2:47:AB:5F:72:05:4B:C8:89:C4:DB:37:01:4C:AD:1C:E5:27
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       019C1CF098DA3B41706C29D65BBE950372F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          092A
Signing time:             Mon 02 Feb 2026 06:00:55 +0000
Manifest this update:     Mon 02 Feb 2026 06:00:55 +0000
Manifest next update:     Tue 03 Feb 2026 06:00:55 +0000
Files and hashes:         1: 2hQqsbj_AW_rF6TjCtdE7-hg7CM.roa (hash: F1knTMFUmGxyY6uuD0aAVI5XraJxjK8ZXgbD5x6GIl4=)
                          2: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=)
                          3: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=)
                          4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=)
                          5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=)
                          6: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=)
                          7: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=)
                          8: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=)
                          9: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: wY9d8+fRxDgIxQdD44b2HzN1N4YE0veRPcMuH9v8Oq0=)
                          10: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=)
                          11: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=)
                          12: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=)
                          13: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=)
                          14: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=)
                          15: xtYa8bwk3nyDT9DDoPQRXQH07ZA.roa (hash: lmcFVrPV65LmiCT3FMjsX+zWuUETsINp4pkawWHBcO8=)
                          16: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f0:98:da:3b:41:70:6c:29:d6:5b:be:95:03:72:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Feb  2 06:00:55 2026 GMT
            Not After : Feb  3 06:00:55 2026 GMT
        Subject: CN=cf59b247ab5f72054bc889c4db37014cad1ce527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:62:93:05:a9:eb:b5:98:6e:65:aa:20:a7:
                    df:64:a1:f1:b6:7d:4d:6e:77:8a:95:ae:50:b0:66:
                    ba:88:b4:33:04:c5:ce:f1:a2:54:a1:38:b5:fc:e9:
                    2d:13:58:92:5e:c7:6c:0d:89:8d:ca:e3:1f:2d:4c:
                    e2:39:3f:1d:2f:47:03:f8:f8:c8:d3:65:fa:85:7e:
                    fb:54:8c:48:2f:82:8f:09:a0:af:2e:43:2b:c1:88:
                    2f:60:35:48:dc:c5:c2:60:57:44:fb:03:6a:6b:f6:
                    db:cc:16:2a:40:d0:c3:c2:21:2d:ad:7f:d0:73:93:
                    65:dc:47:92:14:c9:0b:da:28:12:df:dc:63:80:f2:
                    af:47:85:b5:71:0e:8e:b3:25:11:0e:f8:22:74:b9:
                    a6:69:36:7f:41:5d:a9:31:1c:b8:7e:df:c2:63:a9:
                    61:5c:cc:56:08:17:4c:00:2a:73:15:d6:b2:2e:0c:
                    e6:ac:70:17:54:db:b5:de:74:e8:de:00:84:b7:45:
                    0e:9b:42:2c:36:dd:c9:a2:e7:46:63:a7:ef:ac:67:
                    b1:f2:a3:36:ae:4b:e1:c8:8d:0a:53:92:2f:1f:ea:
                    ec:59:57:8b:7f:5e:cd:9a:03:43:80:01:10:2e:0e:
                    c7:55:a5:8a:70:25:ce:51:d7:ec:a8:24:6f:d7:5c:
                    23:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:59:B2:47:AB:5F:72:05:4B:C8:89:C4:DB:37:01:4C:AD:1C:E5:27
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:93:9a:13:d1:d2:e0:1a:3c:f2:81:b1:61:13:2a:ab:8a:35:
         29:93:69:df:cc:2b:c6:8e:e5:3b:90:36:fe:f8:3c:56:c9:24:
         25:e0:81:ba:ca:9d:7f:81:3a:78:48:69:40:5e:b0:ab:fc:ba:
         c4:6b:a4:ed:b3:b9:40:1c:a7:de:d2:8c:fb:0e:37:bd:82:23:
         84:5c:d2:57:27:ab:8a:ca:c6:41:e3:76:d0:3e:84:8e:a2:92:
         99:9e:81:e0:48:3b:cb:92:9e:4d:1c:b9:cc:72:6f:df:86:43:
         54:63:5f:b8:ae:7d:b3:3e:7a:1b:94:e6:73:f0:af:05:3d:d7:
         8a:b2:d6:1e:8f:2a:2c:45:de:b0:7e:8a:7d:57:7b:0a:03:da:
         88:00:af:c7:b2:ec:41:e0:12:fd:5a:52:1f:bc:0e:8b:07:17:
         4b:ab:72:be:7f:69:44:a8:49:fc:19:8e:9a:03:d6:58:3f:ef:
         28:2e:d9:51:9e:f3:af:a3:ff:68:2c:d5:87:bb:9b:6f:6a:2d:
         87:12:9b:8e:14:42:00:2a:e0:51:15:67:3b:42:70:63:f2:7e:
         c6:6b:f0:87:6e:53:9b:b4:06:eb:db:4f:e4:10:f5:37:a4:3d:
         c3:69:3c:81:59:7d:56:d5:26:c2:cd:af:f5:85:da:fc:d7:84:
         a7:c1:51:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:52:09 2026 by rpki-client