This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          rPvwDWFwVeDtvgbOv+SwCrgBhTaL7E5KS0ldsI64bP4=
Subject key identifier:   89:59:D0:F7:F2:27:C4:68:B9:37:A0:E3:D0:B4:FE:4A:7A:43:7B:37
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       019BF53E930CD5D7E410864C7186703B7C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          1806
Signing time:             Sun 25 Jan 2026 13:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:17 +0000
Files and hashes:         1: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (hash: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck=)
                          2: 7ZoxkxG_xy-nsB6Jlds9cahi91Y.roa (hash: kKZZTt0K1VWp1lTS49LMaifr54LOAUhPDZWygbEsnV4=)
                          3: D-8LG2tVdd5-uleb8t-_wqh_Jl8.roa (hash: mVxwGRDiuc9C3st3JN7liHp0YNkXDsxa9l1VHNbN9/Q=)
                          4: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (hash: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU=)
                          5: ZKFoN8fD1raVVjOmPZzWRUaaugA.roa (hash: R4OUda4QAMCAnPGIK71d8GhzpRyoNd21V6RUuQUoxZQ=)
                          6: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: Mf1SxelT8f6RhER+hObrLJPOPi6hl9iiN8I2J6Ro4XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:93:0c:d5:d7:e4:10:86:4c:71:86:70:3b:7c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Jan 25 13:01:17 2026 GMT
            Not After : Jan 26 13:01:17 2026 GMT
        Subject: CN=8959d0f7f227c468b937a0e3d0b4fe4a7a437b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:96:f7:ba:01:d7:18:35:74:5c:60:dd:3c:
                    56:9c:ef:89:2d:1d:c6:ab:5e:45:89:e1:4f:0d:7c:
                    01:34:c6:f7:a6:09:cd:67:dd:e5:12:8b:ce:13:2a:
                    ab:cb:c6:d5:93:c1:4d:54:41:62:92:07:59:5f:86:
                    fb:80:ce:1f:b7:61:e7:39:d4:76:57:e7:64:fc:ae:
                    99:ab:c9:40:44:7f:03:3d:be:c7:6e:b8:11:72:5f:
                    1f:a2:8f:fa:37:4a:c1:9e:8a:d6:38:f4:6a:dc:74:
                    d4:0f:fd:ee:fc:0c:6f:83:1a:ed:c8:f5:b6:d1:52:
                    c0:76:c7:75:fd:4c:63:c8:e5:b9:92:b1:fa:c1:dc:
                    49:f4:87:c3:e1:d1:73:fe:46:f1:6d:6f:c7:7c:df:
                    38:51:13:d5:31:d8:bf:f3:8d:60:af:63:f9:9e:fa:
                    1a:5b:1f:1a:b9:b5:b2:2d:b0:46:90:9f:19:c2:c8:
                    7f:d9:4f:fe:28:8d:5b:7d:26:1f:e3:a3:c4:24:3d:
                    a7:d1:d3:b2:9e:00:89:49:4e:08:f3:3a:2a:44:ba:
                    70:c5:20:79:fe:b7:27:7a:61:31:82:20:41:13:cb:
                    ce:b6:04:21:15:4e:2d:26:69:41:1a:22:06:a4:e7:
                    0d:1f:dc:30:eb:58:d3:e8:8c:c1:5b:10:65:0d:80:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:D0:F7:F2:27:C4:68:B9:37:A0:E3:D0:B4:FE:4A:7A:43:7B:37
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:68:bc:3f:27:56:fb:0b:05:15:f4:c9:9b:0a:ef:c9:6d:fd:
         0e:38:e2:25:11:2a:19:ea:6c:3a:3f:86:24:48:05:9e:e9:33:
         5b:8c:c9:1f:b2:1b:da:e9:de:d7:63:31:54:e6:de:47:be:83:
         8a:9d:32:20:b0:40:32:ec:ee:bf:4d:f8:dc:de:40:c1:d5:67:
         32:a7:86:a0:56:38:f3:47:64:a8:75:9d:31:57:e3:21:76:40:
         b3:0b:67:7e:9d:28:0f:c9:5a:03:55:f7:ec:db:43:a3:3b:c9:
         74:11:44:d6:1e:5c:32:9c:e7:29:a9:8b:f7:70:ba:4d:65:cf:
         74:21:8c:ea:03:be:1c:4c:39:cb:13:5e:08:86:f1:2f:6d:8d:
         3e:71:8e:9f:47:52:e4:74:aa:79:2d:e7:3d:83:91:a6:2f:e7:
         22:6f:05:ec:d4:8d:04:94:49:93:3f:13:08:49:cc:29:a7:45:
         98:c6:f6:53:2f:5d:ce:a1:26:39:0a:73:fc:32:8c:fd:07:12:
         96:15:52:f0:b1:db:05:1d:02:b8:9c:6b:ee:12:03:be:0e:be:
         6a:d6:4c:da:ee:cd:f9:7b:18:3a:c2:25:cd:9b:99:7d:a5:14:
         ac:06:37:0e:ff:24:45:72:2a:42:f1:2b:e0:0b:1a:f9:18:c1:
         2b:08:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:22:58 2026 by rpki-client