This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File:                     VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier:          Gq/du9F4PhQaL2BJSf21le9p49wxHnSVYwoZbn6llHo=
Subject key identifier:   F4:12:19:AF:9D:10:56:3F:63:BB:7C:08:A1:A6:A9:25:A3:B1:DF:0B
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer:       /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial:       019BF2E1A69ABA22D4F57C25D50B21E2FA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 02:00:33 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:33 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:33 +0000
Files and hashes:         1: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: LCAlSv764b2NCBj65XTfCPC3WC2EDlysun9QCj3kvt0=)
                          2: f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa (hash: NQ/xxQW3U9GvugxkG2jNW4TodVkdfN7Ntdsb5/uc4tM=)
                          3: yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa (hash: WORw69SpG7o5LnNs7NnksxUfsDlM6lj3W399eRGTTp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:a6:9a:ba:22:d4:f5:7c:25:d5:0b:21:e2:fa:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
        Validity
            Not Before: Jan 25 02:00:33 2026 GMT
            Not After : Jan 26 02:00:33 2026 GMT
        Subject: CN=f41219af9d10563f63bb7c08a1a6a925a3b1df0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:20:c3:c7:e7:00:5e:62:55:06:dc:04:5e:
                    75:b5:03:de:f7:11:2a:b3:48:63:4d:12:f6:b2:94:
                    4d:c3:0a:10:9a:29:0f:e9:cd:a8:b9:cb:ff:b7:ad:
                    88:4a:05:26:3a:f7:49:f0:c6:9e:5a:9b:a5:87:70:
                    43:00:ce:71:00:d3:71:54:b3:cd:63:1d:1d:de:64:
                    6f:fe:ab:34:81:db:05:65:72:0c:ac:4f:74:50:09:
                    70:5d:00:0a:73:68:5c:dc:4b:6e:fa:eb:73:ce:a5:
                    c2:5c:47:68:22:ac:15:c5:13:f1:56:93:3d:90:0e:
                    6a:ff:b0:9d:f8:54:a2:7e:93:f8:16:71:08:50:36:
                    57:27:ec:38:4e:7d:63:54:75:42:57:65:ce:ec:f0:
                    32:09:dd:76:f1:fc:05:63:79:32:3d:97:80:b7:95:
                    4c:a2:a2:42:a6:43:a4:35:31:05:67:53:72:56:38:
                    92:b6:3a:d8:ab:ca:bc:4e:47:50:5d:d3:a5:ce:f8:
                    ed:a4:1d:f6:3a:f3:26:80:97:73:3a:7a:5a:e6:58:
                    38:36:96:59:65:77:f7:f3:cc:d9:53:c5:51:dd:67:
                    15:a1:7c:c4:33:8f:ad:5a:fa:ca:b3:a7:1e:f2:4e:
                    15:7f:f4:37:72:d3:8b:2f:fa:e6:41:58:ad:1a:82:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:12:19:AF:9D:10:56:3F:63:BB:7C:08:A1:A6:A9:25:A3:B1:DF:0B
            X509v3 Authority Key Identifier:
                keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:63:1c:fc:ca:be:44:a0:05:71:15:15:c4:ca:a8:5c:42:64:
         cd:53:ad:1e:b5:01:cb:7f:7a:19:7d:cf:78:df:8c:73:d5:af:
         fd:d9:a1:4c:69:c7:19:3d:11:93:57:9f:40:b2:e1:97:7f:94:
         6f:05:6c:08:13:bc:0f:a2:18:0b:2d:81:81:f9:29:b6:25:c8:
         18:89:ff:85:d8:f3:2b:03:6b:33:e2:d8:5a:42:7f:7b:80:3b:
         20:ad:70:3c:c0:af:42:aa:e9:be:bb:30:64:c6:9e:71:9c:5b:
         ea:41:85:e4:f4:5f:f8:6e:ed:d5:08:3c:e1:b2:34:bd:62:1b:
         79:e5:ef:d3:fb:de:22:d7:c0:f4:73:72:26:07:f2:1b:52:be:
         20:52:a0:66:5a:d8:1f:cc:2e:42:60:07:7c:8b:54:32:a1:df:
         95:3c:d0:2c:65:9a:be:b1:c8:5e:79:b4:47:c7:eb:81:1c:3b:
         eb:73:0b:f9:35:a4:d2:29:e8:40:54:70:a9:e1:76:a6:3b:7e:
         fc:96:fa:62:2d:23:52:65:29:fd:70:37:20:4d:e0:96:b2:d9:
         31:ac:51:b0:ce:dc:c6:35:96:f6:3a:f1:f5:1e:68:63:d7:2b:
         71:ee:0f:97:03:ac:19:e5:94:62:f6:7e:08:bd:d4:86:18:bd:
         ca:ba:a8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4aaauiLU9Xwl1Qsh4vp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjQyM2VkOTA1MDAwZjY5YWQ5M2VlZmM2NjZiYjliMWFk
ZGNiMzcwHhcNMjYwMTI1MDIwMDMzWhcNMjYwMTI2MDIwMDMzWjAzMTEwLwYDVQQD
EyhmNDEyMTlhZjlkMTA1NjNmNjNiYjdjMDhhMWE2YTkyNWEzYjFkZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroMgw8fnAF5iVQbcBF51tQPe9xEq
s0hjTRL2spRNwwoQmikP6c2oucv/t62ISgUmOvdJ8MaeWpulh3BDAM5xANNxVLPN
Yx0d3mRv/qs0gdsFZXIMrE90UAlwXQAKc2hc3Etu+utzzqXCXEdoIqwVxRPxVpM9
kA5q/7Cd+FSifpP4FnEIUDZXJ+w4Tn1jVHVCV2XO7PAyCd128fwFY3kyPZeAt5VM
oqJCpkOkNTEFZ1NyVjiStjrYq8q8TkdQXdOlzvjtpB32OvMmgJdzOnpa5lg4NpZZ
ZXf388zZU8VR3WcVoXzEM4+tWvrKs6ce8k4Vf/Q3ctOLL/rmQVitGoJxywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQSGa+dEFY/Y7t8CKGmqSWjsd8LMB8GA1UdIwQY
MBaAFFUkI+2QUAD2mtk+78Zmu5sa3cs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUt
ZTk1MWE3NDM0NmY5LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83Y2FhZTUtMDNhZi00N2Y4LWIyOWUtZTk1MWE3NDM0NmY5
LzEvVlNRajdaQlFBUGFhMlQ3dnhtYTdteHJkeXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWMc/Mq+
RKAFcRUVxMqoXEJkzVOtHrUBy396GX3PeN+Mc9Wv/dmhTGnHGT0Rk1efQLLhl3+U
bwVsCBO8D6IYCy2BgfkptiXIGIn/hdjzKwNrM+LYWkJ/e4A7IK1wPMCvQqrpvrsw
ZMaecZxb6kGF5PRf+G7t1Qg84bI0vWIbeeXv0/veItfA9HNyJgfyG1K+IFKgZlrY
H8wuQmAHfItUMqHflTzQLGWavrHIXnm0R8frgRw763ML+TWk0inoQFRwqeF2pjt+
/Jb6Yi0jUmUp/XA3IE3glrLZMaxRsM7cxjWW9jrx9R5oY9crce4PlwOsGeWUYvZ+
CL3Uhhi9yrqoqw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:45 2026 by rpki-client