This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File:                     VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier:          QL9vxjUlDF5p2ubWaMCQeYnXsBCT4qIlllPiMnpLDE4=
Subject key identifier:   DB:E3:95:FB:E2:16:0C:9F:0E:C1:82:7B:1B:1A:A7:B2:0E:F4:25:2A
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer:       /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial:       019BF8AD71F80A5D7AC2D02FDB16A4DD3440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number:          09E6
Signing time:             Mon 26 Jan 2026 05:01:15 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:15 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:15 +0000
Files and hashes:         1: UdpDaeZVys7LHpexLg2_ugrpKao.roa (hash: 4C4Vm/weE0RMdrsBZQ2+meAake0bVi8NxlHOyIu9Ojw=)
                          2: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: ncU8ZRczl7JklYAmS3rTnAY7FD4HDDBSx0bIFJmtShA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:71:f8:0a:5d:7a:c2:d0:2f:db:16:a4:dd:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
        Validity
            Not Before: Jan 26 05:01:15 2026 GMT
            Not After : Jan 27 05:01:15 2026 GMT
        Subject: CN=dbe395fbe2160c9f0ec1827b1b1aa7b20ef4252a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:42:79:cb:03:ed:92:65:22:04:38:67:b9:
                    30:35:33:2d:77:21:f9:a3:79:2c:09:50:68:ca:34:
                    78:aa:a6:ce:8d:8b:d8:9d:31:32:77:d2:6e:8e:2d:
                    80:32:a5:48:de:37:1f:3b:c2:2f:50:52:69:7b:7b:
                    c9:b1:25:73:a2:ee:6b:2b:00:ec:9f:3d:dd:81:87:
                    49:06:c7:57:19:13:1e:52:06:78:8a:13:e3:e4:e7:
                    e3:09:b2:28:65:39:ad:c4:39:13:40:70:3d:14:78:
                    9f:01:c3:63:96:6a:32:6d:4d:9a:36:94:ec:ac:b4:
                    aa:b2:07:86:3b:3c:0a:8c:56:60:f6:2b:d7:f2:29:
                    48:3a:1f:02:40:f3:f9:02:12:55:4c:de:42:d6:5c:
                    8d:fb:26:df:6b:ee:ff:d5:f3:f1:e7:ee:af:73:4f:
                    2c:be:ca:cf:b8:10:f5:47:ca:a1:2f:04:e7:ea:b2:
                    d3:a7:d7:04:21:fc:ba:ef:fa:85:4e:11:f3:f7:33:
                    c2:d5:9d:f1:40:ed:62:1c:76:ca:d9:7c:f8:ee:fc:
                    14:2c:15:db:69:66:29:12:11:e4:75:10:f7:0f:7d:
                    9c:38:5a:ac:4e:82:7a:9a:e8:ce:7e:7f:9f:36:83:
                    cc:2a:a6:8b:e4:26:b5:dc:0e:d8:44:f9:0b:51:56:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E3:95:FB:E2:16:0C:9F:0E:C1:82:7B:1B:1A:A7:B2:0E:F4:25:2A
            X509v3 Authority Key Identifier:
                keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:ff:dd:a0:2b:d4:a8:f6:ab:9a:77:8a:d9:4c:22:11:00:
         1b:e6:94:cb:02:82:eb:ee:94:53:22:d7:49:3f:78:44:d1:b3:
         b9:c4:ed:62:7f:8f:54:ea:d9:d9:e8:3c:11:4e:d9:40:18:4c:
         4d:d4:b1:f5:0c:58:cb:97:c3:a4:d0:e9:de:5b:f6:9c:30:c5:
         c2:4e:cc:30:cf:6e:98:6d:71:80:cb:56:ea:ca:44:2a:c0:7a:
         c4:83:4c:df:e5:5c:7c:93:9b:a8:bd:e1:7b:93:ec:6a:53:7e:
         cd:5a:87:50:c6:a5:c2:4e:a0:2d:d1:c7:d3:e2:d5:ca:5a:57:
         1d:7e:e6:07:e6:22:1a:35:d7:8d:60:ec:a8:66:66:e0:da:14:
         c6:bd:0f:f7:86:98:3e:74:96:b7:69:f7:0e:5d:c3:11:63:f4:
         a0:96:92:c5:02:24:ad:f8:7f:d7:b9:59:05:80:fa:47:23:00:
         79:de:00:98:c2:76:7e:dd:2c:fa:36:9d:db:0c:f2:4c:92:c2:
         fa:c8:bc:3b:34:15:77:8a:bc:14:f1:c2:b8:6a:b1:6d:ff:2c:
         75:73:8f:09:84:d8:b3:19:fc:dc:10:87:c7:b6:30:99:b9:97:
         68:57:86:aa:84:d7:f3:af:70:bf:86:ae:dd:b9:c0:25:ad:2e:
         b5:78:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:49:28 2026 by rpki-client