This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File:                     2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier:          0rGX0wbDxd+Po8/xoIlhLGDdUZnEtaaRhofbiAWZ9II=
Subject key identifier:   94:72:61:AA:06:B2:13:6E:B6:CD:97:21:53:0E:BD:3F:76:E8:B5:36
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer:       /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial:       019BF3867ECB783E0EA6E2B0F990A6816281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 05:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:36 +0000
Files and hashes:         1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: gmArXwu1yvtiCYPUjBG1MYWrc0n+/WQdpWPX3Uf+dEA=)
                          2: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (hash: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM=)
                          3: inZ0fZj5v4khhsdRrEDmAl61m18.roa (hash: TSaJLO6U/WjD/PJ9OHG/92HNGT3vTBc16T5ZmK6rT6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:7e:cb:78:3e:0e:a6:e2:b0:f9:90:a6:81:62:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
        Validity
            Not Before: Jan 25 05:00:36 2026 GMT
            Not After : Jan 26 05:00:36 2026 GMT
        Subject: CN=947261aa06b2136eb6cd9721530ebd3f76e8b536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:04:63:d7:56:ef:ab:48:1f:bd:91:cf:bc:8c:
                    4b:46:ea:58:fe:69:46:b8:97:da:38:cd:10:07:27:
                    21:07:58:dc:da:bb:bc:0a:3f:e5:40:7c:82:aa:a1:
                    8f:02:38:c2:fe:5e:f0:e0:6c:cf:5f:80:5a:db:9d:
                    9a:1f:ac:f6:ab:e3:78:1e:3f:32:21:43:00:74:63:
                    27:eb:c2:ff:5b:46:cf:0b:65:3e:5b:d6:1b:c1:81:
                    41:e6:25:f5:c5:7e:93:70:0d:a9:f5:19:ff:8c:d3:
                    bf:c8:9e:7e:05:5d:91:38:ee:03:ba:35:e0:cd:ac:
                    cb:4a:63:81:bd:28:d1:b1:6c:15:c7:3d:91:0d:bc:
                    83:df:fc:fc:6f:1e:de:73:f7:47:8c:25:2b:44:57:
                    8e:82:64:c3:77:16:ce:ee:c2:b5:e6:e9:5b:8b:92:
                    b2:d3:66:6c:d0:44:22:58:f2:c7:a6:6e:5f:2e:0f:
                    0c:37:dd:67:b2:9d:f1:f9:2e:5f:d4:59:25:af:27:
                    e5:a3:a0:23:f2:b3:8c:b8:47:d8:b3:55:27:43:22:
                    37:78:6c:b7:af:1b:33:46:24:05:59:2a:25:ba:fc:
                    cb:69:88:ce:c1:78:af:75:ba:40:96:09:15:37:0c:
                    9b:c1:eb:a2:a2:6a:7d:56:fb:21:36:81:6e:4c:9e:
                    54:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:72:61:AA:06:B2:13:6E:B6:CD:97:21:53:0E:BD:3F:76:E8:B5:36
            X509v3 Authority Key Identifier:
                keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:d5:f8:b0:0b:86:9d:89:09:4f:97:76:1c:9c:26:d0:5e:
         95:97:84:ce:eb:70:55:3b:86:c6:89:af:c9:50:c1:e9:7d:74:
         71:29:05:7c:04:48:71:83:50:07:95:61:4d:f4:e3:99:d6:ca:
         6e:96:37:c0:29:1d:22:31:5d:27:7d:1e:41:56:13:1e:de:dd:
         ce:ac:88:fe:8a:9c:11:f7:8f:4e:ac:b8:cd:67:e8:e7:37:ba:
         7e:93:93:1a:ec:35:2a:6d:a7:03:e4:64:a2:27:aa:b8:71:d6:
         72:7a:7f:04:c6:fe:c0:e9:13:a5:0d:0b:ee:c8:12:bd:11:89:
         4b:61:ef:13:8b:d5:1b:58:1c:1d:10:0f:cf:16:89:39:c1:28:
         33:df:6c:a1:8a:e6:66:7c:b5:d2:d2:38:4d:aa:40:e8:f1:fa:
         91:3f:d5:fa:51:75:8f:3e:95:4f:d7:25:d0:5a:29:70:1b:3a:
         02:fd:88:b8:ae:8d:b9:6b:58:82:26:ef:96:51:34:e8:16:6d:
         9f:d9:23:12:a4:10:4b:79:f0:f7:2f:b9:97:5a:16:df:e9:25:
         7f:be:57:00:e2:02:14:05:73:da:5d:bd:58:55:7f:71:df:6d:
         12:54:4d:94:ea:84:7c:29:8e:ca:6a:2d:8e:09:e3:29:3d:80:
         53:f2:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:35 2026 by rpki-client