This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File:                     VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier:          ynJR3+v1q3EQP7xMuXsC75y1lW1UENY3v82R/gojmOU=
Subject key identifier:   02:73:54:BC:B8:58:72:33:8C:82:FB:FB:68:C8:7C:AD:5A:7A:35:3E
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer:       /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial:       019BF8087DEBC98028DA5F90E7475CAB5B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 02:01:04 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:04 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:04 +0000
Files and hashes:         1: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: RV8MqZEZ8/iRRCxT5GBnOmbYWMU2keLzxZTSDmzTxy0=)
                          2: Yk7EtxaPSgexIl9t_80_swVzD3M.roa (hash: yR1cez1xIT9IyHabmgmwE9BLuhvd89zm0L14ABJdEh0=)
                          3: bxUJOGzDbjV-xgkeVZsGg7PhFAM.roa (hash: q45eE9k3WP1QL6ev2bsePVxIkJymW9aUUerqRFFx9WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:7d:eb:c9:80:28:da:5f:90:e7:47:5c:ab:5b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
        Validity
            Not Before: Jan 26 02:01:04 2026 GMT
            Not After : Jan 27 02:01:04 2026 GMT
        Subject: CN=027354bcb85872338c82fbfb68c87cad5a7a353e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:e5:5e:fa:92:9d:f5:38:06:bd:66:82:46:
                    ef:e5:7c:a2:95:01:78:42:e4:7c:1a:fd:cc:fe:2f:
                    c4:d4:28:44:0a:ad:6c:33:e2:b8:89:9d:00:23:da:
                    dd:e5:f8:fa:59:50:97:6c:84:ba:d1:19:7c:dd:cc:
                    21:94:7b:9f:a7:85:16:bf:72:18:51:bc:1b:dc:7a:
                    e2:71:d8:fe:32:ed:ec:3d:e0:f2:bf:29:53:19:50:
                    cb:57:41:30:cf:09:02:cc:19:d9:de:3e:71:98:da:
                    92:5b:28:62:7b:8a:17:6c:b8:df:bd:83:12:7e:93:
                    25:0a:59:7e:18:83:7a:ed:a6:3f:d6:c5:fd:13:34:
                    88:bf:49:1c:8b:98:8e:d9:27:38:ca:e5:b3:df:5c:
                    61:50:0d:6d:59:c7:9c:97:a9:de:2c:c5:fe:b6:66:
                    d7:8f:03:a8:0a:94:19:c7:dc:a7:0e:15:39:ff:18:
                    71:49:6d:de:41:e3:b1:df:8d:64:c6:0f:8a:9a:26:
                    77:43:ca:65:fa:91:c4:b8:2c:9a:42:e7:d8:68:5d:
                    b0:eb:bd:7b:54:48:aa:4c:bb:8c:e5:d6:11:fd:5a:
                    c1:fd:04:27:7d:af:3b:3c:b2:c9:18:e5:c6:6a:86:
                    e7:dd:02:64:06:c3:57:9c:a0:e6:cb:94:bd:0b:0e:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:73:54:BC:B8:58:72:33:8C:82:FB:FB:68:C8:7C:AD:5A:7A:35:3E
            X509v3 Authority Key Identifier:
                keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:f7:71:1a:1d:4c:97:5a:31:e9:ef:b3:49:fa:f5:ab:3a:
         78:10:32:d9:ed:89:2c:3b:82:96:84:33:63:42:98:e4:50:61:
         55:a9:64:bb:7a:94:54:b8:99:17:05:31:b8:94:d6:58:73:1f:
         6a:dd:12:56:ac:49:66:cf:04:da:89:08:a2:26:77:84:89:7b:
         66:4d:72:ea:0c:e3:d8:5b:11:3e:5d:c0:a8:46:08:0b:5d:bc:
         ba:90:1d:4a:a9:6c:17:c9:8a:05:81:bc:f2:3e:95:e1:ee:c1:
         32:5b:f7:35:77:76:9d:18:11:2d:23:03:7b:52:1c:f4:ee:9b:
         d2:cd:7d:95:15:06:41:47:f7:2a:e8:b8:97:72:c9:c9:12:55:
         02:69:f7:a7:b7:61:e2:d6:cc:14:7f:1b:c7:68:92:f7:5e:df:
         0a:e6:2d:a2:57:4c:37:7f:b5:57:ce:ef:41:a8:0f:fd:b0:15:
         c3:c1:b7:9f:42:8f:c7:c0:6d:a7:03:cf:b2:bd:91:57:6a:bf:
         e8:01:41:d2:75:2e:db:40:33:2c:2e:b9:9c:e2:d0:93:ab:3e:
         fd:06:c4:0c:bd:bc:e2:28:35:30:ad:04:f0:9e:57:4b:74:51:
         8b:c7:e0:9b:7e:78:73:9a:ba:48:e1:e5:17:37:bd:b7:44:59:
         93:af:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:14:41 2026 by rpki-client