This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          aiPDxbfcrEJU4AydbhLqMI7LHn8Q4vuv03eWcTlJotw=
Subject key identifier:   6C:ED:77:44:F6:BF:6A:2C:75:75:F5:4C:89:53:0B:35:D4:AE:68:6A
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       019BF4D06A7852ADDE89F8B20401DD4334F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          1497
Signing time:             Sun 25 Jan 2026 11:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:57 +0000
Files and hashes:         1: 1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa (hash: FXLWu7cTao5t5N2dNabz3TuA4IoXpfS81L/ChF9Q08w=)
                          2: 3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa (hash: IpPkFkZsNYzLAK3kRG6z1JeeccdjVJAcpoXlT9FO7rs=)
                          3: 6hfKommEGXOxbZsoMmyZp1Jipf0.roa (hash: PBG49W+jrBQkGXpn4QJjssvWvrDP7tqPFzk/gI0/fXg=)
                          4: 6iU5q2O8knwO6rsCxrpEDYfQfwc.roa (hash: wn70AHhkmwh/HEbVbZLkEYQ5m0ssl6kZ6p4p/pcbYdw=)
                          5: 9ClNIRUhBNtx6NUYh8zm6GwII1c.roa (hash: vGZ8wnFhqRVJP+elmOStrLyKU7bRjBC5vLXKAyxYAyo=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: IsMm1BDYjwQPLZFJnngqpvXBwkaHTe6PiSRVGKu+0+Y=)
                          7: CwEJEkChVeT5ByriMeWvHMii5Kc.roa (hash: +buHsgpQk2jvmt0OGhHOlWMDX6OUOHB42I6FSxQelZE=)
                          8: DLvFNukbRAhZM4TuFhov4WWOGb0.roa (hash: Sq2gts+S55hxx/TOW9y2dVTRNKFXvpr4cfM5oauwoaM=)
                          9: EU0dIexXpepLqV4coUUAIRVb-H8.roa (hash: Sb2wLX/RqNGdGCSytUaEJdgIu7Q+7vz9Pa8hlXYY0rU=)
                          10: FSSW1ZODYaGOgTHhq7srADJ7wNo.roa (hash: t1sAD3HTmL1FNe10X/d6I8aLemzTkwpNiXZMluJaeak=)
                          11: Fq-R29bbT_OFMbzC4S4L4IdB-is.roa (hash: JzQ34FqB0/yZtRfeREt9DodHo2xR3cGWACcIkZal6yg=)
                          12: LMCAcXdS2XUrnwUK8y3aA_YgYVI.roa (hash: Zx7X9nBZcYpyZkk9a1fb6zgF5sti3hLdBb/GhQbu+WI=)
                          13: POkwjuuBGCe0F21ORjR2-VQPpzM.roa (hash: 2Yn0ZCvtpiHPj7sihF4ez4hggi+qgq8ycEgz8zN0BIM=)
                          14: WVYa2teNXynmvJvnFVohphSasGE.roa (hash: orfB14/U2twh+Xy8e+efxXCsqq9c3OWe/VkDs9EtPWg=)
                          15: ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa (hash: MBZe37MzhPFgcFvelUunWWfavB0OARuzaKp7z8aRi3s=)
                          16: Zema6N-_yb1spowlt5JHLTMroU4.roa (hash: qF9Cqwb/phFXGyfXmecnj5M4wNF9UM4/U7GSyXzWvos=)
                          17: ala-3w7jXBx1Y6f2e_qq-HBChTo.roa (hash: JIf9VJc6GvAkZ5p/ya8p2yQh9PHmYhCztgviL6iUJrc=)
                          18: dSEucPba5jbG_hBap1JYIaV4Psk.roa (hash: RBIyIZiDbpY1D9V0ivY3QmCifvd4xUi/eYRwLwz+HUI=)
                          19: djDUS_Dp1clYmZIjyKII50PHWfk.roa (hash: vJJCn0Gst4uVO2l5ZPOKkOm7N8sHDzQxxWFRYaz0dr8=)
                          20: eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa (hash: g0rKhAIGDEgpNj647haSdnpBK13OSalrt6qPIIz9V48=)
                          21: hBwQvgPhGJzR_22ttNwtHhdx7UE.roa (hash: BA8aCpTJ5opcE6AfKmkjJWSoOHA/DSBCKSoiBPNDf6k=)
                          22: jp70RKj-l4e-FsAEnfnaN0KnsKo.roa (hash: Wc9n68tUKd4lrFnJAtiaeP7RW1dgjzh0zCTtcCNTJto=)
                          23: oBQjnG6Zj6o_8VxMtUsGatV5hV4.roa (hash: 7dA7xujM9AdU+gFa8obBWyqzT2p9RQ/v2ZO8GDKs3tU=)
                          24: wfQmPdI-vmy_WQj32p1pdNv8LjM.roa (hash: Wlbgs7E1UKGfQEo0Wy61nxhp0A6dAzQWLbqDaTK1Nbc=)
                          25: wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa (hash: 1E+Xv8wtnswf3OgqernoluNz5hyvaYNmHhkW4xlZGIc=)
                          26: z0A9SiYDfgi894bbsnwqjIIKm_E.roa (hash: 0kWVTAgMN8/IObLAgrvtPloL9CuNOeQsdQJfTEF/3/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:6a:78:52:ad:de:89:f8:b2:04:01:dd:43:34:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Jan 25 11:00:57 2026 GMT
            Not After : Jan 26 11:00:57 2026 GMT
        Subject: CN=6ced7744f6bf6a2c7575f54c89530b35d4ae686a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:d5:04:fe:13:5f:c9:e1:03:09:fe:68:ad:
                    28:c7:95:87:48:42:d6:dd:8c:6b:7d:5a:bf:2f:ac:
                    b8:7a:ae:32:ea:ba:af:eb:95:67:4c:92:bc:0f:76:
                    c1:60:7f:59:25:96:ab:80:ca:2d:f2:49:6a:e8:27:
                    f5:8d:47:f6:1d:c4:d4:ef:88:70:78:ac:08:93:9c:
                    ce:57:89:32:d4:fd:5f:15:d2:2a:dd:ca:bc:cb:83:
                    b2:87:83:5f:47:f0:cf:ec:7d:4d:dd:7c:bd:b6:96:
                    70:25:4d:bf:1b:dc:74:f9:22:32:b0:f3:c2:48:d2:
                    6c:85:38:81:ac:45:cc:c2:13:1c:6e:5d:24:c3:ce:
                    27:cb:e2:0e:1b:33:3b:4a:e7:7e:41:9c:c4:84:42:
                    92:72:41:80:4a:27:5f:36:d9:97:78:a5:89:e7:20:
                    19:3b:6f:35:da:39:52:79:d8:bf:36:b2:fe:9b:1d:
                    88:81:90:4c:4e:1c:6c:9f:57:2d:c6:f0:eb:b8:3f:
                    90:4b:70:bf:f5:4a:51:b2:dc:a8:5d:1e:80:2a:a3:
                    f9:3d:55:5a:6a:3f:d1:4d:9c:47:9c:5f:04:e7:fb:
                    e6:c0:cb:d1:c0:7f:96:8b:1a:f4:d7:72:47:5f:cc:
                    f2:ad:13:8e:9c:7a:84:f0:fc:c6:0c:60:bc:59:f4:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:ED:77:44:F6:BF:6A:2C:75:75:F5:4C:89:53:0B:35:D4:AE:68:6A
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:17:40:88:16:53:be:57:62:06:19:f8:cc:c5:e6:cd:5c:
         3f:9f:de:71:59:99:7c:19:b5:c7:be:dc:e7:c1:a6:e1:13:ba:
         64:16:e5:33:ba:b8:20:b8:57:67:bf:b9:0f:f6:35:7d:25:9d:
         a8:68:72:6c:44:51:f9:13:ee:a0:36:71:b7:73:67:30:65:be:
         6f:ed:a3:31:59:a5:e3:e4:b1:48:fc:c2:04:f6:1c:7c:1b:3b:
         b0:61:b9:13:3a:1e:10:06:0e:cd:47:c7:5e:53:ea:be:75:fb:
         fd:94:3f:39:3f:18:aa:56:be:14:d2:da:fa:02:6f:15:5d:cb:
         44:7e:a5:db:eb:83:cd:42:4d:8e:77:e9:72:4d:66:b6:28:4c:
         42:29:b3:5b:09:67:bb:4a:19:df:26:0d:b3:45:94:fd:91:3d:
         1c:e9:4e:29:1a:f9:52:3b:8f:e8:0c:51:04:a4:6b:42:1f:cf:
         17:7d:83:35:0d:2e:b4:6b:e0:34:09:50:d0:d9:0c:9a:05:71:
         85:9d:6b:c5:9c:72:44:9d:17:ca:9e:43:b6:84:6e:a8:b9:15:
         3c:af:5b:3d:9c:54:6b:2f:d0:21:75:99:20:07:3b:aa:82:51:
         c9:64:1e:cf:a4:04:1f:74:34:64:85:7f:63:6e:53:a9:27:3b:
         33:c7:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:05 2026 by rpki-client