This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File:                     VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier:          di0Z1SR5t6cXiefe2rRVSBU0nfKPSmjn5FspprKeFBQ=
Subject key identifier:   62:79:FA:6C:4D:7B:1C:47:BC:38:CA:5C:A5:53:1C:1C:FF:76:4B:59
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer:       /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial:       019BF83EF3BA2C32740C833C4135BA85A63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 03:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:33 +0000
Files and hashes:         1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
                          2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: RS24OI767Ldu1FbHz8nKcMM6kg0haaTYGtQMBTb/8P8=)
                          3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3e:f3:ba:2c:32:74:0c:83:3c:41:35:ba:85:a6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
        Validity
            Not Before: Jan 26 03:00:33 2026 GMT
            Not After : Jan 27 03:00:33 2026 GMT
        Subject: CN=6279fa6c4d7b1c47bc38ca5ca5531c1cff764b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:2a:9e:5e:fb:a2:de:39:77:9b:ee:36:bd:
                    e9:cf:a6:9f:a8:ab:ce:e5:ca:4f:11:de:cc:c0:b3:
                    93:44:5d:78:0b:4a:ae:5f:8e:6c:db:45:d1:88:e2:
                    d0:2a:80:1a:1b:e5:02:52:a0:a6:85:4c:b2:5c:9a:
                    b7:7d:59:1b:8f:e9:17:d0:6e:aa:25:eb:42:93:e2:
                    1b:27:7d:70:0f:b0:8e:1f:35:46:05:eb:ae:e7:ca:
                    07:5b:3c:85:99:e3:11:3a:29:f4:60:58:79:1a:76:
                    4a:9d:33:e2:54:0f:72:7e:35:4c:69:76:ea:95:0f:
                    b6:ca:74:30:f6:31:2f:37:4b:0c:ea:27:cc:7b:35:
                    51:d9:fc:36:3d:60:df:fe:f6:76:e9:15:d3:a7:bc:
                    36:84:58:11:71:f0:1d:7c:04:b4:f9:98:4b:42:85:
                    b1:48:bd:ab:26:6c:be:7c:8b:3e:45:8b:cb:b5:6f:
                    ed:d6:6a:2a:f9:ac:50:53:ad:ac:2e:7e:c2:87:59:
                    f4:aa:db:89:da:4b:8d:18:85:9d:69:9d:0d:d0:43:
                    5f:29:6e:35:4c:ae:7c:42:2f:19:12:de:f7:8d:f1:
                    e2:22:f0:e7:21:25:9d:13:09:9c:7a:30:95:a8:66:
                    19:80:2e:24:ff:29:e5:6d:d4:7d:43:61:c6:67:78:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:FA:6C:4D:7B:1C:47:BC:38:CA:5C:A5:53:1C:1C:FF:76:4B:59
            X509v3 Authority Key Identifier:
                keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c2:7e:32:92:07:61:16:f5:0f:0a:00:4b:03:d7:f0:cf:c6:
         ae:4c:3d:f1:c3:3c:d2:97:11:4e:88:a7:de:43:38:2a:a0:a3:
         7d:b7:79:39:a6:1e:4b:c9:9e:ce:c0:bc:e0:e9:30:6f:ae:bf:
         9e:60:9b:78:1a:9e:d0:ac:05:10:0d:c2:63:b2:72:c9:60:07:
         05:af:c4:96:6d:54:e9:71:72:1f:b2:10:50:70:ac:4d:1a:5d:
         70:20:b1:fd:cc:83:f5:9a:b9:7f:19:cf:2b:a5:06:17:0b:93:
         c1:90:2f:41:bf:85:9a:fb:07:61:b3:95:60:29:fd:61:6b:2e:
         17:7c:04:82:54:3b:f1:5a:7c:a8:67:c4:13:be:9b:e6:44:06:
         35:19:24:89:51:4d:8b:ad:93:14:51:cc:25:90:33:66:1f:27:
         c3:0f:e6:9e:0f:c8:0f:1a:5e:5a:fb:88:df:63:a1:ea:2b:3d:
         ef:ba:a1:45:6d:ab:fa:5c:69:eb:eb:3f:bf:11:77:9d:15:0f:
         21:14:d9:3b:dc:4d:1b:d0:c4:fd:d8:85:38:45:55:74:47:f6:
         c4:84:f2:60:66:43:ef:68:4c:a3:b5:5f:e7:0e:82:10:93:5a:
         f5:50:ca:32:e1:dd:ac:61:4d:1b:0b:54:0d:b2:9e:da:01:b3:
         0c:77:f3:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4PvO6LDJ0DIM8QTW6haY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy
YzA5ZjkwHhcNMjYwMTI2MDMwMDMzWhcNMjYwMTI3MDMwMDMzWjAzMTEwLwYDVQQD
Eyg2Mjc5ZmE2YzRkN2IxYzQ3YmMzOGNhNWNhNTUzMWMxY2ZmNzY0YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PMqnl77ot45d5vuNr3pz6afqKvO
5cpPEd7MwLOTRF14C0quX45s20XRiOLQKoAaG+UCUqCmhUyyXJq3fVkbj+kX0G6q
JetCk+IbJ31wD7COHzVGBeuu58oHWzyFmeMROin0YFh5GnZKnTPiVA9yfjVMaXbq
lQ+2ynQw9jEvN0sM6ifMezVR2fw2PWDf/vZ26RXTp7w2hFgRcfAdfAS0+ZhLQoWx
SL2rJmy+fIs+RYvLtW/t1moq+axQU62sLn7Ch1n0qtuJ2kuNGIWdaZ0N0ENfKW41
TK58Qi8ZEt73jfHiIvDnISWdEwmcejCVqGYZgC4k/ynlbdR9Q2HGZ3hDwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ5+mxNexxHvDjKXKVTHBz/dktZMB8GA1UdIwQY
MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt
Y2U4ZGQ2ODk4YjI3LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3
LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsJ+MpIH
YRb1DwoASwPX8M/Grkw98cM80pcRToin3kM4KqCjfbd5OaYeS8mezsC84Okwb66/
nmCbeBqe0KwFEA3CY7JyyWAHBa/Elm1U6XFyH7IQUHCsTRpdcCCx/cyD9Zq5fxnP
K6UGFwuTwZAvQb+FmvsHYbOVYCn9YWsuF3wEglQ78Vp8qGfEE76b5kQGNRkkiVFN
i62TFFHMJZAzZh8nww/mng/IDxpeWvuI32Oh6is977qhRW2r+lxp6+s/vxF3nRUP
IRTZO9xNG9DE/diFOEVVdEf2xITyYGZD72hMo7Vf5w6CEJNa9VDKMuHdrGFNGwtU
DbKe2gGzDHfzDw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:47:20 2026 by rpki-client