This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File:                     vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier:          WKxVQHM9NZ6Fm0Jm7yu1+ya3CAohIxQxCXm/zrX7dEU=
Subject key identifier:   57:D3:03:B6:99:58:08:B5:5B:62:10:96:A0:73:74:13:9C:33:D2:02
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer:       /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial:       019BF53E6C41FBF99074DA93C4D763EBDC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number:          0B1C
Signing time:             Sun 25 Jan 2026 13:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:07 +0000
Files and hashes:         1: dk1G9hz2trfq5CaaUBMe9RcS93I.roa (hash: lH6gfT8/HMNpYY4aojCo2W76iGRxmIa0HJsfcgDAePE=)
                          2: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: dzO8x23MrN57TUHInWNoXGYnvierqkMIwNBfmjcTZPE=)
                          3: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (hash: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:6c:41:fb:f9:90:74:da:93:c4:d7:63:eb:dc:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
        Validity
            Not Before: Jan 25 13:01:07 2026 GMT
            Not After : Jan 26 13:01:07 2026 GMT
        Subject: CN=57d303b6995808b55b621096a07374139c33d202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:44:ea:de:ad:7b:75:a3:63:8e:a6:a3:f8:
                    f4:52:1a:06:cd:4c:a1:4e:d4:d7:3b:41:02:01:b7:
                    6a:f6:36:58:00:2a:d4:44:97:56:3a:7a:52:42:21:
                    2a:9f:28:9c:b9:9f:03:23:29:8e:ff:4c:30:a6:5e:
                    29:ac:0e:86:64:07:17:45:31:5c:a5:98:03:5f:38:
                    a2:a4:8a:1e:3d:5f:e0:4f:e7:0c:70:fc:a3:e8:da:
                    a0:7a:98:ef:52:2c:08:40:2e:cc:5e:45:d9:69:b2:
                    7f:cb:bd:0c:6e:6e:1f:f6:7f:b7:53:04:c1:69:4a:
                    23:ca:c0:f7:15:6b:5a:ba:be:3e:6f:98:0f:2b:e4:
                    72:4c:9c:2d:37:05:14:19:5c:e5:87:f4:b3:a9:09:
                    14:fc:8b:9b:a7:89:79:96:0d:d7:e4:a9:a5:f0:ec:
                    41:2b:2a:c3:74:ad:95:de:05:78:da:dd:d7:9e:ae:
                    e7:df:75:fa:a5:9f:8f:d6:5a:70:b3:29:e3:85:cf:
                    e2:7e:e8:12:e6:59:16:cf:e1:d9:dc:bb:b2:23:bf:
                    1d:6a:43:0f:bd:d7:5c:a7:48:56:af:fe:60:65:d6:
                    3a:38:5d:fd:8d:b7:84:d2:ff:60:a0:8d:83:51:ba:
                    14:d5:aa:4b:de:b0:38:a5:a9:2b:13:5c:00:9b:52:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:03:B6:99:58:08:B5:5B:62:10:96:A0:73:74:13:9C:33:D2:02
            X509v3 Authority Key Identifier:
                keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:24:85:4f:0e:84:af:81:6b:42:ca:3e:ff:25:c7:23:5e:
         fe:31:c0:45:73:1c:e2:8a:cf:4e:37:a8:b2:aa:4a:2e:c4:e1:
         af:2a:c8:b4:c2:83:d1:c6:d2:92:53:af:f3:a4:8e:bd:fe:23:
         3e:21:85:00:39:7c:99:1a:ce:0b:a4:da:7a:e0:e4:bd:0c:92:
         73:51:cf:6a:9e:d5:57:6a:0a:c1:e9:be:83:4e:3e:72:ef:98:
         f3:41:59:03:45:96:1f:a5:5e:87:32:74:3f:4b:de:4d:db:3f:
         2c:27:c5:7e:a4:35:1d:f9:84:6a:97:27:b6:43:ef:11:17:1d:
         cf:96:00:46:23:64:eb:bd:26:04:3b:d4:14:70:e1:7e:df:50:
         1e:21:ee:91:f4:60:c8:51:53:2c:b8:58:ac:76:05:8a:27:f7:
         91:7f:c1:a2:88:cf:77:3d:bb:1c:b3:63:f5:77:bc:f5:6a:ec:
         59:29:77:1b:fa:00:71:44:e5:03:01:ca:e8:83:a7:49:1c:0a:
         67:50:fa:4e:23:ed:f6:70:a9:ea:66:49:85:7d:60:dc:84:5a:
         24:d2:3f:7d:54:12:f1:96:48:11:bc:78:3f:a5:c8:a3:12:5f:
         5c:11:55:90:13:91:79:b6:ab:44:01:8f:05:d0:3b:6a:ca:8d:
         ee:37:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:03:22 2026 by rpki-client