This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          nPYasAw8QXebACb1ycr+CVtg0ymyMc2r40Yhz2LtB5o=
Subject key identifier:   FD:D7:8D:FC:55:39:11:F8:6C:6E:1D:08:9C:6A:75:4B:5C:CD:BC:8F
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019BF68841D627757578C7A1CDF4CE79E466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          17F1
Signing time:             Sun 25 Jan 2026 19:01:23 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:23 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:23 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: IHsEVjdaY7i95EUDKCFnWc3xEg0f9gq/V35q2NX5SjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:41:d6:27:75:75:78:c7:a1:cd:f4:ce:79:e4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Jan 25 19:01:23 2026 GMT
            Not After : Jan 26 19:01:23 2026 GMT
        Subject: CN=fdd78dfc553911f86c6e1d089c6a754b5ccdbc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:d8:2b:a7:44:cd:71:09:8e:8b:5b:6e:ea:
                    d0:20:c7:92:dd:96:91:38:40:19:68:28:62:e7:8b:
                    57:49:82:75:38:63:85:14:47:68:fc:60:13:8d:38:
                    3d:eb:4a:e0:e6:41:39:b8:51:3e:c7:33:3b:c5:60:
                    0d:9e:aa:45:eb:45:73:04:2a:b8:d8:e7:6b:04:11:
                    61:1f:55:5b:35:09:1d:03:9a:a8:76:50:7b:5b:ed:
                    dc:b4:6b:a0:c1:50:ea:a4:a1:b4:9f:8d:26:c5:78:
                    ce:1c:4a:4b:dd:16:a3:4d:39:90:86:10:8c:fd:2d:
                    33:d2:fb:af:53:7c:9f:28:6a:f2:5b:da:7f:97:2d:
                    9c:99:a7:1c:e9:c2:b0:85:4b:14:ea:b5:21:c0:94:
                    2b:32:3c:59:79:b9:94:7a:e2:a8:5a:ad:a2:fe:ad:
                    5f:01:39:9d:2e:f2:ad:75:eb:e4:9d:49:3a:1e:e9:
                    55:b9:50:d0:a9:d2:de:4e:33:6e:f9:c0:7d:65:0a:
                    df:b3:d7:7e:e9:40:ba:63:62:51:ed:41:74:c2:36:
                    cf:c5:39:8d:5e:bf:ff:ab:6b:c6:9a:79:d9:d2:49:
                    56:03:d6:5f:ed:43:98:0c:28:89:3a:67:bd:71:53:
                    bd:da:72:d0:1b:11:98:23:51:27:34:ec:f3:aa:5d:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D7:8D:FC:55:39:11:F8:6C:6E:1D:08:9C:6A:75:4B:5C:CD:BC:8F
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:e1:1a:e8:51:f7:fb:f5:2b:27:7b:ce:cd:1c:c9:17:fb:
         f5:e3:9b:be:9f:21:3d:a0:b4:75:56:d8:fd:a0:16:be:df:0e:
         ff:16:6c:db:82:3f:1f:78:7d:2c:ae:8b:35:49:ea:26:e3:87:
         52:97:2f:a4:0b:a3:d9:1f:2a:ef:2d:22:de:b1:9f:34:fe:60:
         03:74:c7:1e:c3:aa:49:65:6f:25:5b:b0:64:3b:1b:b9:2c:04:
         d7:f0:ab:cb:0c:48:2b:c0:c6:10:59:27:33:3e:88:98:13:03:
         21:23:76:ac:dd:47:0a:f5:78:22:aa:8c:24:17:45:02:50:32:
         af:4f:87:a9:5e:0a:f5:36:90:02:e6:3e:b6:d6:5a:b0:f9:83:
         17:06:09:0f:95:7c:53:27:ba:21:7c:a0:89:51:93:45:59:6d:
         7f:39:db:64:ae:db:16:66:f0:ba:fb:13:dc:d7:e6:0f:b3:da:
         ec:ca:46:3a:c6:ad:3e:b3:13:11:50:c1:51:72:cd:b4:37:3f:
         68:49:12:8c:5d:92:cf:4f:a2:8c:86:11:63:29:53:cd:8b:e2:
         7b:40:97:cb:bd:0e:ec:0e:fa:03:2e:30:4f:c8:11:42:aa:7e:
         1b:03:bf:da:b7:e6:e3:62:e5:e8:09:47:d3:40:78:33:0c:7c:
         98:67:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:21 2026 by rpki-client