This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File:                     vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier:          5+nR396Q2X/JqdtHa36pDZb6PHlIcLEti2Qnlq1cKBk=
Subject key identifier:   31:A6:4C:4A:A0:49:E4:21:EF:5A:7F:84:0D:57:92:D4:9C:15:62:57
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       019BF499D7391FD3173345DCDE21BB523F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number:          1004
Signing time:             Sun 25 Jan 2026 10:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:21 +0000
Files and hashes:         1: DK-XBDjvEUwNxsBmzqo8J9rquEU.roa (hash: r9pghvHN2qAAy+qaZ1juJScZuaWtFiuLGSgGufvS8U0=)
                          2: RHbtZEqS9voRzD3Cx6qusZzVcjk.roa (hash: Ee6+Bb2Hz6FnUnTIFNwJzEYwDsvhHHrdj4/evTKgHy8=)
                          3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: yrx39K7H82aTgYpsyyvO0y26TVFcDF9e27bANstIbfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:d7:39:1f:d3:17:33:45:dc:de:21:bb:52:3f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Jan 25 10:01:21 2026 GMT
            Not After : Jan 26 10:01:21 2026 GMT
        Subject: CN=31a64c4aa049e421ef5a7f840d5792d49c156257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:10:5d:3b:67:2e:fc:77:13:2a:9e:cc:80:
                    39:ec:01:65:4c:3f:14:5b:33:3b:db:5d:0e:64:ed:
                    89:97:60:cc:cd:26:12:86:b2:09:1a:5e:fd:a0:e5:
                    93:28:31:4a:37:73:d0:8b:bb:7b:0c:49:75:c0:5a:
                    e0:59:bd:2d:76:c8:db:b4:1a:e2:41:cb:0f:a5:76:
                    7b:f7:37:1f:70:22:1f:4a:38:0e:a2:bd:05:a7:df:
                    aa:8a:b2:6f:3a:ec:5a:c9:4f:4e:87:dd:f6:9d:f7:
                    2d:c8:6a:a1:6c:cf:33:53:d5:ca:84:ac:4b:c5:da:
                    34:d1:a8:26:25:9f:dd:0b:5c:e6:d4:e9:6c:5c:1c:
                    99:53:f2:55:14:cb:e7:43:3f:1e:d3:5c:a4:d4:23:
                    e4:11:48:9f:97:30:f8:0d:77:8f:f1:7b:ac:ce:d7:
                    a8:f1:df:00:ec:91:54:6f:bf:c5:4e:bd:f7:59:37:
                    5a:dc:5f:b5:0f:1d:87:cb:47:c7:5f:d8:32:ee:d5:
                    e5:b5:7b:44:8f:61:63:7f:d4:86:9d:a0:f2:0a:8c:
                    83:12:41:e9:5e:01:63:06:ea:47:78:11:ba:46:5a:
                    83:49:6b:2f:81:3c:2c:e4:d5:c8:d0:bb:68:5e:ba:
                    da:fd:30:b8:e5:f9:00:02:c3:a9:a9:eb:44:26:9b:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A6:4C:4A:A0:49:E4:21:EF:5A:7F:84:0D:57:92:D4:9C:15:62:57
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b9:73:78:3e:3d:f6:4c:73:6d:36:cb:c1:59:cd:2e:bc:bb:
         14:fc:87:7c:d7:a2:04:11:c3:5a:fa:35:5a:80:05:1f:49:08:
         2a:c4:4d:50:86:88:78:6a:c0:57:7d:52:e0:dd:c6:fe:05:0d:
         09:4f:cc:3f:b1:c2:e8:93:8a:c1:c5:1c:ef:8d:74:b4:20:6f:
         65:1c:b0:da:7b:45:0d:cf:e6:76:f1:e4:a0:28:9c:ec:66:60:
         8e:df:31:03:cc:45:9d:8c:f6:26:a2:f0:d4:31:92:d5:f0:1a:
         d4:34:3c:f6:d0:d5:81:af:35:0d:84:1a:5a:a5:9d:19:8c:78:
         b3:9c:38:b5:2f:2c:84:d7:5a:8f:57:2c:0e:6b:e7:58:e4:65:
         f3:3b:70:1b:2e:a1:6e:d5:90:0c:61:91:78:db:fb:0e:48:da:
         ad:43:a6:76:14:b3:36:a3:f4:38:c4:7c:13:34:ca:19:c1:5b:
         b7:b0:7c:a3:05:53:09:36:e5:fa:59:10:98:d0:4a:ae:74:77:
         e9:8f:3b:aa:44:23:27:ed:31:2f:36:0b:12:19:5c:10:d3:e1:
         ba:28:19:ce:db:79:96:01:d2:43:cc:27:e3:d3:a9:53:6c:ce:
         0f:fd:88:36:15:56:c2:1b:7e:3b:2e:53:82:58:45:8a:54:95:
         52:1e:d8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:58 2026 by rpki-client