This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File:                     vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier:          0dlu8VDQfKzDzAjxqnl8sd779BE1bWE2A4+mfLaUp4U=
Subject key identifier:   AC:16:D5:25:3F:D2:1E:37:76:51:B8:83:AD:B7:52:60:3E:3E:35:D2
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       019BF6884CA0BEC8F11DE3143BCB456580EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number:          1005
Signing time:             Sun 25 Jan 2026 19:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:26 +0000
Files and hashes:         1: DK-XBDjvEUwNxsBmzqo8J9rquEU.roa (hash: r9pghvHN2qAAy+qaZ1juJScZuaWtFiuLGSgGufvS8U0=)
                          2: RHbtZEqS9voRzD3Cx6qusZzVcjk.roa (hash: Ee6+Bb2Hz6FnUnTIFNwJzEYwDsvhHHrdj4/evTKgHy8=)
                          3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: EUlH8JeEMCTtWKkhYamGl7mMK19tOuwV3AstsaMRzS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:4c:a0:be:c8:f1:1d:e3:14:3b:cb:45:65:80:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Jan 25 19:01:26 2026 GMT
            Not After : Jan 26 19:01:26 2026 GMT
        Subject: CN=ac16d5253fd21e377651b883adb752603e3e35d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:81:bf:0a:62:ef:ec:45:23:64:8b:3e:d4:
                    59:89:14:d2:4b:de:c6:61:63:16:8a:da:24:15:5c:
                    e7:28:48:fa:89:fd:f7:89:3c:68:35:cc:a7:f7:c0:
                    00:34:56:d3:3b:89:fb:37:4b:d7:8e:c5:c8:c3:b8:
                    75:a3:72:7b:a1:73:42:9e:24:09:26:ca:ab:02:8e:
                    f6:c8:e4:38:36:63:b7:4b:69:2e:70:9c:62:b2:68:
                    3d:21:28:ea:09:ef:03:aa:03:9d:31:78:a0:87:90:
                    d7:d6:21:d7:8f:ef:14:ce:f6:9d:26:12:6d:6c:c9:
                    5d:05:5d:53:9f:73:36:17:d7:e6:e3:cc:75:b6:93:
                    cc:a0:46:6b:2c:25:d1:fd:db:dd:3d:23:bb:7d:76:
                    6f:e4:c5:3f:fe:c6:12:39:37:ec:04:d8:a9:8d:e3:
                    2b:c4:d5:8f:5f:f9:dd:7f:89:9b:dd:08:9e:e2:c7:
                    2b:42:c9:2d:73:12:32:3e:e5:4c:1b:c8:d1:77:c5:
                    f5:54:0a:3c:31:7a:28:55:b5:97:14:29:ab:f4:d2:
                    10:1f:d7:86:b9:ed:87:22:fe:4c:2c:25:94:a4:ff:
                    ba:5e:96:ee:57:05:41:62:21:c3:8c:e5:8e:50:5b:
                    ff:0b:82:64:78:b2:b2:69:f6:0f:63:0f:4d:b6:b7:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:16:D5:25:3F:D2:1E:37:76:51:B8:83:AD:B7:52:60:3E:3E:35:D2
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:6a:48:f2:22:88:1c:4e:a6:fe:8f:16:6c:b1:af:f8:e2:ff:
         7e:a6:eb:6b:39:c8:58:28:82:19:6e:fc:ea:2c:dc:1c:68:c4:
         3a:b5:aa:5b:0d:ad:88:b8:56:42:81:95:e0:bd:56:21:4d:31:
         a7:75:82:c0:d7:ce:ff:3c:36:cc:80:77:fd:01:61:1c:af:e0:
         d0:0f:a5:39:fd:47:c2:a9:ee:9d:ad:88:4f:64:6b:72:9d:17:
         a9:e5:bb:35:f3:4f:03:c9:a7:33:09:7c:69:ba:f4:9a:7e:48:
         e6:14:14:69:7a:03:49:6b:60:67:78:5c:d5:53:5e:7a:b0:d3:
         38:40:3e:cb:f0:72:8e:dd:40:5f:7c:a2:9a:74:30:14:24:5f:
         92:72:22:13:4a:81:ea:a3:b8:f2:a8:93:29:30:de:a8:75:0d:
         09:f5:d2:51:a3:92:7e:03:4d:9c:1f:a1:31:8f:62:3d:c7:ac:
         9b:51:5e:0b:31:0c:82:2c:f5:71:da:7d:93:4f:32:06:84:16:
         05:2c:88:53:56:17:3b:8c:7f:b9:2f:01:92:5a:a4:72:28:65:
         c9:5d:f2:f6:8c:f3:20:e9:e1:12:9d:34:72:28:48:53:a6:06:
         f5:e4:dd:6f:b6:aa:dd:01:14:f0:51:6f:1e:55:3e:bc:27:b0:
         aa:11:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:22 2026 by rpki-client