This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File:                     vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier:          sROMaPXibeMEiByuDQrZZDQafAuiEEziCphU2ZgRs+c=
Subject key identifier:   07:D9:BB:66:E5:BA:A6:94:CB:F6:68:1A:DA:13:1C:F1:D0:76:42:EB
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer:       /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial:       019BF72D2ECA8AB2DCF6CC43B6391989C0CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number:          027E
Signing time:             Sun 25 Jan 2026 22:01:31 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:31 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:31 +0000
Files and hashes:         1: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (hash: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk=)
                          2: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (hash: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo=)
                          3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: LATVebrOmhBjtDsPobiUJavIeM+4ejYC3ZqOPw1BnkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:2e:ca:8a:b2:dc:f6:cc:43:b6:39:19:89:c0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
        Validity
            Not Before: Jan 25 22:01:31 2026 GMT
            Not After : Jan 26 22:01:31 2026 GMT
        Subject: CN=07d9bb66e5baa694cbf6681ada131cf1d07642eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:51:a7:a8:07:5b:65:85:50:75:67:8b:b8:
                    6f:d6:31:a4:e7:16:a9:25:8e:07:8e:81:de:70:ab:
                    f6:ca:f1:e0:b7:30:88:cd:62:e2:80:c5:8e:d8:0e:
                    63:4d:fa:f7:90:e3:ff:f0:76:92:d5:9c:52:31:1d:
                    0f:3d:91:76:71:89:ef:cd:76:f7:17:ac:a5:95:8f:
                    18:ec:b5:39:26:b2:e2:98:14:54:23:9a:bb:6d:d3:
                    a9:41:30:08:96:e1:e8:97:76:9c:18:de:e5:e5:25:
                    0d:fb:7e:09:e7:b1:78:b6:a1:a0:7e:6c:46:3b:df:
                    7a:dd:ca:a4:4c:9e:29:ce:96:d6:a5:96:5b:c7:36:
                    df:bf:1f:a7:6e:c5:c4:05:29:68:a5:62:55:eb:6b:
                    ec:75:82:0c:d8:a7:ea:8d:70:d2:f4:46:8b:6b:ff:
                    0e:04:e6:8b:0b:10:d7:42:4a:39:b8:08:70:49:22:
                    c0:9a:af:05:02:7c:ee:f5:8e:ca:2e:62:54:cc:72:
                    35:5c:5a:07:38:65:57:20:aa:8c:c9:59:74:91:b2:
                    fb:1c:b4:79:12:e9:9a:6d:21:40:ec:ee:2c:0e:8c:
                    da:19:8f:4c:06:ff:d3:40:bf:24:b1:6d:0f:aa:8a:
                    ad:71:66:4e:4c:a5:54:b3:eb:6c:3f:c6:af:47:f0:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D9:BB:66:E5:BA:A6:94:CB:F6:68:1A:DA:13:1C:F1:D0:76:42:EB
            X509v3 Authority Key Identifier:
                keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d3:a6:35:6c:0a:c0:0b:ba:da:a8:e9:58:02:ff:fd:e4:10:
         44:55:01:c1:28:83:33:28:0a:13:b4:32:c1:89:46:bd:66:cc:
         4c:a9:b7:5a:43:d9:e3:8e:63:49:2c:75:13:72:fe:04:48:fc:
         40:10:76:4d:7f:f5:ab:f3:12:15:43:3c:74:94:ea:76:0e:0e:
         22:30:0a:e8:36:c0:79:19:91:2e:35:df:e5:9e:ee:03:9c:af:
         5c:5e:e0:87:71:0e:01:66:a9:aa:c0:87:13:b9:32:5c:b0:93:
         4e:45:b2:7a:83:5d:8e:4d:c1:6e:84:fa:0c:a7:d1:1f:c1:d3:
         01:2d:f5:57:0e:d0:11:7c:b5:2b:49:7b:57:25:1d:17:60:bd:
         70:f9:79:47:f1:f4:c8:76:05:ac:60:d3:82:6b:f2:d3:38:e2:
         7d:f1:f1:c0:b8:c9:20:37:9f:a7:f6:75:8b:9e:d3:7a:6c:50:
         54:5f:8b:42:ee:f6:a5:68:da:47:0e:9e:58:ae:fc:08:3c:23:
         23:57:f1:2b:9b:b6:d4:64:8f:c7:c2:ee:da:5a:ea:2f:c7:ec:
         71:4d:cc:90:0b:ba:98:ae:77:46:6f:2a:43:9a:84:45:3b:03:
         52:2f:c9:03:ab:9f:53:a6:2b:0b:39:7a:39:38:05:ae:ca:29:
         12:66:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:14 2026 by rpki-client