This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          IIyyofEzgnkYeOorZojBREf/8YKsIbiVL6R94d8wG+E=
Subject key identifier:   78:61:6B:34:C0:AB:E6:9C:B1:C6:3A:58:16:4D:E7:3B:F7:6F:16:7D
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       019BF35004CDC42E598926D597D35B99BAC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          17F8
Signing time:             Sun 25 Jan 2026 04:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:06 +0000
Files and hashes:         1: Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa (hash: j/YK/yQpe4IKOS3k5YPKzOKh1qWi6WCqC8bqntTBlxY=)
                          2: VFU37iQljI79t35JlR-w1IteaQw.roa (hash: J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=)
                          3: gPtYr61h83pA7-mt902KElGDuI0.roa (hash: Kfj49mH4lsVszd4rTCsS6tC3nnBrcy/t3kH2S5AxGGo=)
                          4: nUBRGA1FEWK-usieosyBaTq-H8Q.roa (hash: vDMG9fme7VB9AauE97OnMRGk4k7A0gMGf6ktOmefSMw=)
                          5: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: VXMZDPXqMNex3GhUU9McRC0hgIPe8TxUJKxS773nM/4=)
                          6: sixxThEQTX1zUHOzyF4MB92-RaY.roa (hash: secsUzL3O2X6Ac6rYvaZ+cU3vmetNixtbbwwWKOjrmw=)
                          7: uWkEc-fbIJqw99dNiiEwAeVlWfM.roa (hash: 1DSbIjvJqT3rylhutdS0OLOYTOnrBsAi7+g/hYhs1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:04:cd:c4:2e:59:89:26:d5:97:d3:5b:99:ba:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Jan 25 04:01:06 2026 GMT
            Not After : Jan 26 04:01:06 2026 GMT
        Subject: CN=78616b34c0abe69cb1c63a58164de73bf76f167d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:92:e0:10:73:a1:23:c6:0a:ce:7b:a2:e5:
                    08:3c:ee:44:07:de:96:cb:f2:99:0a:f4:60:11:b5:
                    a7:11:69:78:74:86:10:41:e7:7c:70:c8:79:b6:60:
                    f0:e8:be:f6:f9:9e:88:16:ae:46:64:85:00:aa:83:
                    a7:63:9e:70:41:88:57:21:20:2a:d7:fa:f3:e4:1c:
                    7d:35:fb:67:fa:e7:d3:ea:a1:a1:03:62:94:81:de:
                    3d:5d:a1:d9:57:84:b5:97:7f:12:80:25:74:0e:02:
                    cb:f2:72:5b:d4:bd:dd:94:ce:e7:c4:04:7b:88:a4:
                    61:69:8a:b1:45:00:82:13:65:9e:eb:c0:79:1d:ee:
                    ea:b5:b5:da:75:40:84:06:f4:c5:c3:4a:27:d0:0e:
                    3f:6f:b0:c4:72:9f:0b:9b:9e:7c:9e:53:08:ef:41:
                    06:c2:74:e2:40:84:ea:ae:46:5a:82:f9:6f:46:60:
                    5d:b3:79:a9:4f:fb:fd:a5:e7:6f:f4:95:b7:ac:19:
                    63:6d:b8:ce:4d:71:e5:5c:52:09:43:01:8c:a4:df:
                    15:18:2f:d6:ad:de:8b:40:6a:20:78:c4:b7:2f:dd:
                    8e:ad:32:f1:fb:1d:8c:6e:66:cc:63:33:d7:d0:a3:
                    94:87:16:1a:e0:ef:a6:0b:e5:04:a3:2f:2c:05:6b:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:61:6B:34:C0:AB:E6:9C:B1:C6:3A:58:16:4D:E7:3B:F7:6F:16:7D
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:f3:d4:d1:5d:92:82:1e:9d:b2:a7:3b:ad:30:6c:f5:6a:
         8d:ee:86:ab:a3:fe:f3:aa:c7:fe:fd:24:62:db:46:83:a6:36:
         14:68:ed:fa:fe:83:75:a2:47:06:0f:81:9f:83:56:60:ac:e9:
         7f:db:6a:f1:a8:ab:bb:2f:a4:78:3b:04:10:73:42:83:74:cc:
         d5:c4:99:3d:2c:d0:73:7e:a3:6f:49:a5:1d:40:4d:9a:33:33:
         c6:96:f9:bc:93:8e:f3:77:ab:1d:2e:86:c1:18:37:0c:ea:43:
         f8:04:b3:fe:1f:b8:d6:b9:9b:a9:34:2a:04:62:ea:c9:32:7a:
         84:a1:97:e2:a0:f7:12:1e:63:48:01:a7:7e:e4:af:ab:60:b6:
         8d:78:53:8d:0b:ff:30:43:a9:9f:44:20:f9:41:5c:e8:e7:49:
         b2:1d:90:7f:33:b9:9e:58:f3:03:12:30:98:ce:71:a4:aa:d0:
         dd:7f:ac:bd:93:d6:18:cc:bb:76:7a:b8:ba:54:24:9f:16:db:
         49:aa:70:e5:84:53:43:c7:2a:17:62:c5:6c:17:15:56:fa:1b:
         88:a1:b9:76:b0:e6:fe:5d:87:5e:4e:2c:7e:0b:0d:91:32:b8:
         ca:79:cf:e5:0d:98:91:12:31:f3:82:c4:99:82:84:8a:6e:d3:
         32:7e:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:49:01 2026 by rpki-client