This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File:                     vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier:          r/S0YbNTaOyvdyPpLAtNwnzIONJH0BR7zI73R0wJL2M=
Subject key identifier:   ED:82:25:DB:45:55:1B:10:69:08:15:9D:D6:92:B1:B9:45:5B:72:28
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer:       /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial:       019BF20625DBD071A402BF28842584AEB4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number:          1099
Signing time:             Sat 24 Jan 2026 22:00:47 +0000
Manifest this update:     Sat 24 Jan 2026 22:00:47 +0000
Manifest next update:     Sun 25 Jan 2026 22:00:47 +0000
Files and hashes:         1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
                          2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: 6ftmcWa5cwYBQR7bKRIIKX/yU4Dt23TiUpHPXu1CJ5g=)
                          3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:06:25:db:d0:71:a4:02:bf:28:84:25:84:ae:b4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
        Validity
            Not Before: Jan 24 22:00:47 2026 GMT
            Not After : Jan 25 22:00:47 2026 GMT
        Subject: CN=ed8225db45551b106908159dd692b1b9455b7228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:66:ff:42:69:26:11:6c:bf:45:46:16:9f:
                    9c:88:7b:99:8a:78:09:c6:d8:41:69:a4:cb:55:99:
                    f8:4a:5b:fe:46:cd:21:02:cb:ed:13:5e:0b:09:f1:
                    2e:d3:c4:cf:73:cd:c8:65:f1:63:a9:49:52:b2:bd:
                    20:9d:78:85:b2:f0:d2:5f:20:72:07:e5:e9:68:8b:
                    ca:32:00:7f:39:1b:44:3e:c0:eb:ea:a5:3a:f7:c8:
                    65:00:f4:6d:8b:a1:13:6f:ce:49:df:3b:ac:eb:5b:
                    6c:16:83:a0:53:82:ef:82:7c:5d:f3:5d:2e:52:22:
                    8c:ad:67:62:a3:c1:a9:3c:ec:74:da:95:54:27:6c:
                    ea:3a:38:a6:45:c4:58:7a:58:4a:56:80:f6:36:bf:
                    16:3b:58:47:bd:80:a8:da:2c:a5:fb:57:ce:1c:04:
                    f4:38:bd:1e:93:66:04:3d:08:97:8c:8d:ea:14:bb:
                    e4:cd:bb:37:00:4b:34:39:3e:b7:ea:04:3e:1d:10:
                    15:e2:ad:4e:34:f1:8f:40:76:ed:aa:3f:5a:b5:21:
                    e3:2e:21:01:3c:2e:c4:b8:22:da:30:01:cf:86:32:
                    66:00:ab:6f:32:80:70:2e:08:40:9a:53:77:86:ac:
                    58:69:08:26:ca:b0:58:d8:f1:b5:97:5a:c5:e8:9a:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:25:DB:45:55:1B:10:69:08:15:9D:D6:92:B1:B9:45:5B:72:28
            X509v3 Authority Key Identifier:
                keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:97:86:ce:71:58:f2:50:25:a5:b3:73:4b:f6:3b:28:bc:9a:
         04:10:9e:a8:3e:ab:12:13:f1:ea:29:ef:59:8c:dc:30:c0:46:
         0c:4f:1e:7f:ec:53:97:69:32:e3:b1:b0:14:95:72:f4:0b:fd:
         76:e0:96:38:fc:54:27:ec:44:dc:e0:58:d4:51:31:23:0d:e7:
         f8:81:fe:40:1b:b9:4d:6d:47:b3:8c:19:78:8d:2e:81:d6:3e:
         a5:96:78:6a:a1:2e:0f:51:28:fc:9f:0e:5f:d5:57:b3:73:8a:
         37:13:6c:c6:15:f0:41:ea:1d:40:27:b4:0b:c5:45:6c:85:6b:
         a9:6b:d6:43:a6:5d:10:1f:6a:2f:d0:8f:61:a9:50:8f:d8:3a:
         2b:4c:79:d3:d3:4b:87:40:0a:82:50:71:6b:72:db:48:f9:72:
         3d:43:a1:7a:6a:57:14:40:56:86:bf:f6:b1:3e:ef:7f:d0:29:
         58:fd:21:f2:cd:9c:ab:8c:87:78:ee:3a:08:31:24:b1:1a:2f:
         7f:88:61:61:e2:ec:d3:78:d3:75:77:4d:f1:f1:5f:48:93:e2:
         f7:f4:4a:1a:76:92:6c:5d:f1:b7:2d:36:4d:cc:32:89:79:a9:
         c0:7f:7e:82:21:60:61:ef:69:b8:dd:5b:15:8c:4b:9a:3e:c1:
         a5:47:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:49 2026 by rpki-client