This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File:                     VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier:          Vtg0J2itP9/dgX6wRck9f6qHemwRpP2h9wQxU4BCmzk=
Subject key identifier:   D5:0D:94:9F:6E:9B:EC:C9:8B:87:20:43:76:F1:70:80:42:CD:65:5C
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer:       /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial:       019BF83F945D08B046098B14382BD39E5915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number:          052A
Signing time:             Mon 26 Jan 2026 03:01:14 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:14 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:14 +0000
Files and hashes:         1: 6Q58Vst1sW7Sg0fhyD0gAveTsJg.roa (hash: aoLdXnEmVwlhhx6P0ecfdCHXNZ84VbOpBzKrwg0ApiA=)
                          2: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: Y5P2K3C3J8q8T7TGGAS+KUVyLc1Yjkbgryw1Kcwf8WQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:94:5d:08:b0:46:09:8b:14:38:2b:d3:9e:59:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
        Validity
            Not Before: Jan 26 03:01:14 2026 GMT
            Not After : Jan 27 03:01:14 2026 GMT
        Subject: CN=d50d949f6e9becc98b87204376f1708042cd655c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:3d:29:a3:77:41:21:2c:e3:69:6c:fc:3c:
                    a2:ec:44:6d:f2:c6:6e:5d:65:bf:07:2b:ff:24:01:
                    8d:f2:31:e6:a2:0f:94:36:ea:ff:6b:60:a3:3d:2d:
                    2c:07:37:a4:93:2f:f7:a8:bb:bd:4e:87:ad:fc:9e:
                    18:8e:5a:81:fe:bd:5c:c8:ed:3b:34:48:ed:b6:a5:
                    ca:56:5b:e2:ff:3c:62:bc:51:70:53:75:f6:1e:d9:
                    e4:85:a0:d4:8d:b2:6d:a3:3e:86:ef:6b:a9:01:4c:
                    7e:dc:25:02:98:e2:ab:63:a9:1f:fb:23:a6:06:80:
                    fe:f0:a9:de:18:cb:2d:7c:24:b6:62:2a:4c:d5:0f:
                    03:fe:c5:30:ec:76:b4:44:b1:fe:2a:6a:63:f0:40:
                    e3:9b:35:97:83:56:c1:de:7a:34:ba:c0:57:24:ff:
                    7f:17:d6:99:bb:ca:08:10:73:ad:3b:b4:1e:07:a4:
                    d1:3c:7f:be:01:aa:d3:4b:17:30:c7:17:a2:26:cd:
                    b6:23:4d:11:cc:91:df:bb:87:82:51:54:b3:93:90:
                    7c:30:fe:0e:b3:56:26:d9:3f:a6:f3:94:10:28:d9:
                    f0:f7:ce:cb:ab:85:16:49:2a:56:08:46:9b:68:a9:
                    15:cd:c5:61:3f:72:e0:d4:33:e8:f1:73:a0:78:25:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0D:94:9F:6E:9B:EC:C9:8B:87:20:43:76:F1:70:80:42:CD:65:5C
            X509v3 Authority Key Identifier:
                keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9d:4d:dc:7c:d5:f8:00:27:aa:ec:21:ef:58:6c:37:57:06:
         07:25:d0:0f:80:ff:0e:82:f3:6b:f2:04:78:8e:a2:59:2d:ef:
         16:a0:21:fb:a4:e4:64:c7:a4:1e:d4:8d:dc:24:08:8a:c5:fc:
         b2:5c:cb:5b:79:1a:e2:2c:a3:86:13:63:82:8b:ba:0e:a3:84:
         14:97:cd:9e:46:e9:f0:44:b3:13:78:85:98:cd:fa:0a:4a:0a:
         06:4f:a0:ea:90:98:c4:5f:38:11:d8:2e:17:84:8b:3c:36:d3:
         43:6b:ae:c8:ed:45:07:f6:fd:ee:0f:a7:49:7f:5a:cd:30:76:
         b4:b8:05:e9:5b:d2:a9:f7:87:c5:5f:d0:ce:1b:92:c0:9d:7a:
         6d:0b:bd:59:e9:62:fb:4c:61:ea:6d:0b:f2:ab:17:2b:c0:2c:
         b1:fd:2b:3c:a4:a8:c0:e5:c6:f8:08:de:a5:7b:e6:ee:5e:44:
         e4:8a:f0:a3:64:18:43:06:b7:bc:4f:d3:6b:8b:bd:a3:e3:f7:
         1d:48:85:d5:2f:04:c3:fb:d3:82:71:ab:40:67:58:1b:38:04:
         83:9e:76:35:9c:5e:83:79:54:10:96:52:67:44:41:a0:ea:e2:
         a0:aa:3a:df:a0:89:a2:32:ac:73:15:7a:c8:6f:4a:2e:2e:f3:
         b8:cc:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:39 2026 by rpki-client