This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File:                     SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier:          Hunq5xJjfCZeNBvxdAafrIlP+WF/8KX9+LwK9xnqebI=
Subject key identifier:   08:71:A5:4B:69:F8:EE:2A:43:D6:59:A9:BE:23:09:B7:82:4B:66:AF
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer:       /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial:       019BF91BDCB46617A14D2D7DA7536BF4812B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number:          119D
Signing time:             Mon 26 Jan 2026 07:01:51 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:51 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:51 +0000
Files and hashes:         1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
                          2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: yw+NmLUEld8nhXiRi3KGIZ29K4gExWY7U5WSWZkWwZY=)
                          3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:dc:b4:66:17:a1:4d:2d:7d:a7:53:6b:f4:81:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
        Validity
            Not Before: Jan 26 07:01:51 2026 GMT
            Not After : Jan 27 07:01:51 2026 GMT
        Subject: CN=0871a54b69f8ee2a43d659a9be2309b7824b66af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:8c:f4:f7:e4:9f:bd:7a:23:c1:2f:a2:71:
                    4c:12:ac:fa:46:e7:f2:83:58:63:f1:38:31:2e:f6:
                    76:ae:73:ea:39:44:6a:dc:57:c6:36:20:2e:27:a7:
                    22:d1:46:79:eb:d8:33:14:b5:aa:e2:b7:68:24:f8:
                    8d:70:67:70:f9:2f:6d:54:20:f4:0b:17:b3:c5:43:
                    6e:da:8b:e1:33:67:f5:72:03:1f:4b:fb:6c:f6:69:
                    dd:1e:5c:e6:0e:58:a7:df:5d:97:76:53:b5:72:65:
                    bd:f5:c0:2d:4f:c7:c1:e5:4f:cb:b4:61:2e:f4:97:
                    8b:cf:2f:bf:47:6a:e0:be:d0:6c:77:fa:38:d8:34:
                    a0:06:20:49:e1:57:51:53:f4:22:df:cc:93:b8:31:
                    88:76:ee:5b:dd:ec:92:5d:1d:a5:e6:1b:6e:7b:40:
                    69:4a:e7:e4:a8:f7:5e:87:8d:ce:f9:fd:3c:6e:35:
                    43:c4:54:b5:52:0a:75:79:07:d2:3f:ca:3b:d7:e0:
                    ee:76:e5:5e:c9:93:05:5a:dd:d5:97:b1:4f:f6:c5:
                    d0:3f:b7:fa:e0:e2:5b:5c:7c:ae:b9:83:bb:22:68:
                    3c:e4:39:77:d0:1e:e2:46:97:88:72:47:95:00:22:
                    f0:a6:fb:92:15:ae:d9:ab:f4:f6:d7:4d:13:dd:67:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:71:A5:4B:69:F8:EE:2A:43:D6:59:A9:BE:23:09:B7:82:4B:66:AF
            X509v3 Authority Key Identifier:
                keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:16:85:a4:a2:f6:28:b6:b1:46:d0:09:ab:08:f8:70:5c:7c:
         c2:99:1b:0b:0a:a9:ab:09:9e:2b:73:19:70:cd:57:fc:f5:6b:
         69:e8:64:c6:67:c3:59:16:05:f6:97:99:75:5c:95:83:19:91:
         5b:3a:c3:f4:d8:ed:14:63:ed:39:ce:1b:25:f2:c3:d1:52:59:
         df:5f:40:9f:58:ae:37:0d:10:2c:f5:6d:c0:6f:69:69:92:7c:
         9a:4d:83:b9:c1:9f:41:5a:7d:51:3d:61:43:7a:7b:1f:40:3c:
         56:6c:d7:eb:40:66:e0:82:64:96:19:05:0c:e1:ef:d2:b4:72:
         c4:fc:39:83:bd:14:70:5c:e1:d6:52:96:2c:a5:cb:60:b4:19:
         de:5a:fa:ea:4e:47:d5:98:75:d2:d1:e7:0c:10:44:5f:8a:b5:
         9f:b1:c1:a2:64:48:fd:48:03:ce:92:45:c0:2c:ec:e4:d6:61:
         56:85:26:2e:bb:02:a5:28:fb:38:1b:03:56:f1:42:9c:d2:4d:
         75:36:6f:79:0e:40:ec:f8:37:2e:7a:51:e3:9e:75:1d:de:5a:
         6f:b6:b0:b3:e7:92:da:4c:4b:06:0f:d2:cb:10:48:81:8d:6c:
         6b:85:28:3e:1c:fc:2d:67:c5:34:de:30:bd:e5:8e:94:d0:e4:
         1f:0b:0c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:48:07 2026 by rpki-client