This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File:                     VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier:          qvbANNeFYdcmMRn0BaNh012sA3WNyHOv9ow9YL1TR8M=
Subject key identifier:   3C:48:99:7E:5C:AF:58:C9:9E:8B:30:FB:BD:8F:62:65:23:2C:AD:F3
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer:       /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial:       019BF2AAC955B6222F2D09551951DC54234D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number:          1443
Signing time:             Sun 25 Jan 2026 01:00:37 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:37 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:37 +0000
Files and hashes:         1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
                          2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 5GVGkprBkNZbcPetmFIyWdg8BHnKRsvODk1MTfwn7nU=)
                          3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:aa:c9:55:b6:22:2f:2d:09:55:19:51:dc:54:23:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
        Validity
            Not Before: Jan 25 01:00:37 2026 GMT
            Not After : Jan 26 01:00:37 2026 GMT
        Subject: CN=3c48997e5caf58c99e8b30fbbd8f6265232cadf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:de:2d:be:ae:8e:c0:45:c2:f2:ae:2d:ad:
                    28:7f:0c:a6:83:f4:d8:cb:50:5a:cd:59:d0:0e:5b:
                    f3:b9:fe:61:0e:25:ef:8e:b7:00:89:bd:f4:d3:a3:
                    c7:9f:9a:51:23:0e:be:46:1c:ad:04:f7:2f:49:55:
                    df:f0:78:43:42:a5:e7:17:25:05:eb:49:9b:b1:0f:
                    18:14:00:2d:37:80:cf:3e:6a:51:64:c8:99:94:64:
                    64:40:fb:cd:f5:cf:e9:e1:c8:7e:80:62:3c:ea:8d:
                    ad:f1:da:61:40:e6:86:2f:0f:83:1e:ef:3d:11:02:
                    50:60:d0:bb:4a:09:91:52:a4:b8:c8:0f:ff:f8:4d:
                    f1:4a:8d:64:03:e4:fa:66:c2:42:0a:01:f9:a1:8c:
                    35:bb:2b:33:37:59:49:02:de:55:c4:09:1e:d9:2e:
                    ee:ed:a4:d2:02:21:14:6d:93:c5:a1:ac:b1:6b:0f:
                    e6:ae:76:b2:04:97:3d:36:f2:6b:df:53:ac:0d:a9:
                    98:6a:91:a6:d7:35:14:4e:d4:33:d7:a4:4e:41:c7:
                    af:6f:08:47:ab:89:e5:ba:52:91:95:07:58:6f:21:
                    9a:9e:a2:ef:f6:f7:3b:e6:fb:50:b6:9b:c9:b9:f8:
                    80:8c:fa:73:91:4e:61:08:c2:3a:3f:af:56:44:29:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:99:7E:5C:AF:58:C9:9E:8B:30:FB:BD:8F:62:65:23:2C:AD:F3
            X509v3 Authority Key Identifier:
                keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f6:36:0a:43:70:c6:4f:84:78:0e:7e:9d:d9:57:3a:1d:e1:
         28:bb:25:4e:e0:b8:c2:58:d5:de:20:24:22:32:a5:15:b1:94:
         5e:09:94:22:a5:d0:4f:88:40:d0:bc:43:f9:50:69:ab:15:2b:
         ed:13:e1:d8:e1:b3:14:9c:b9:82:7b:bf:ce:e5:74:54:d7:71:
         84:89:10:da:dc:2a:59:3d:2f:c3:e1:54:43:52:95:1b:7b:10:
         d4:ee:47:1e:f5:f5:86:17:e4:84:8f:22:9b:01:ba:31:96:c9:
         13:c8:fd:1a:17:21:28:93:60:88:aa:4c:a8:d0:b6:a5:34:29:
         68:75:5c:51:83:9f:1b:35:9b:71:4c:3f:c3:36:79:0d:f2:b9:
         3f:0d:13:79:85:06:72:ef:03:3e:2f:e1:0a:6d:0d:95:01:c4:
         af:89:f0:31:a5:56:02:04:ea:d7:69:77:28:93:d4:7c:f1:ac:
         a6:af:1d:4f:9e:ed:0e:8c:db:7a:40:99:d2:f3:95:40:aa:3b:
         58:20:83:b1:bb:54:10:3d:08:9b:a9:04:b0:6f:3d:4f:52:80:
         f8:50:f6:23:d5:35:a5:76:d0:5c:69:19:07:cb:a1:f9:58:61:
         55:34:f6:ee:8e:9a:30:10:7c:9d:79:f3:2e:a8:61:3d:c7:aa:
         16:93:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:59:40 2026 by rpki-client