This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File:                     VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier:          JRgqzf7ndCu8BsKPtOi9y/ymSVlJndOv97zL0b0a3LI=
Subject key identifier:   99:60:04:E6:87:FA:94:6D:37:8C:A4:62:D9:8B:1E:C9:7D:34:7C:C8
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer:       /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial:       019BF386D2A7E8F5A00221A87D7D2951EA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number:          169B
Signing time:             Sun 25 Jan 2026 05:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:57 +0000
Files and hashes:         1: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (hash: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU=)
                          2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: IsGmhYugM4frQ9+G4xFxglGG9Ywyx+F9vpr4/osLqNs=)
                          3: kLdDobJoxiNwKp38C_JI5bwS1zU.roa (hash: VUMgAlXcluXyqh/hX30Gkvrxy0BLwOOcuTnXgqsUDvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:d2:a7:e8:f5:a0:02:21:a8:7d:7d:29:51:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
        Validity
            Not Before: Jan 25 05:00:57 2026 GMT
            Not After : Jan 26 05:00:57 2026 GMT
        Subject: CN=996004e687fa946d378ca462d98b1ec97d347cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:85:33:89:11:51:18:52:54:f1:78:0a:bb:
                    28:38:8d:f2:b2:0c:68:b1:d3:42:3c:13:28:f2:e4:
                    12:41:14:3c:37:60:9b:48:76:9f:72:87:a0:fb:74:
                    86:e3:2b:52:47:86:23:4e:6e:96:01:63:63:8d:2f:
                    57:fe:48:2f:68:dd:18:88:91:52:5e:a4:eb:84:63:
                    e1:dd:7b:7e:5a:dc:64:45:c4:5a:23:97:44:5c:72:
                    a3:ce:1d:ef:99:df:be:e0:3c:46:2a:85:49:95:2f:
                    44:f4:b2:0a:bc:f3:66:c2:a0:39:71:24:21:b9:43:
                    e9:ef:0b:22:72:39:ba:17:91:0a:dc:0c:44:26:cc:
                    59:28:c8:ec:0a:06:fb:ed:c8:c8:53:fb:29:2f:79:
                    39:a8:e3:7c:20:26:8f:a8:7f:43:a3:c4:c8:48:36:
                    dc:d7:08:e7:94:95:2a:d6:d3:a6:16:86:3e:5e:7d:
                    27:90:0b:90:a6:0d:76:1d:ab:5c:b0:2b:6f:d3:63:
                    3c:0c:98:74:51:a3:db:fa:87:ca:55:85:bc:48:de:
                    b5:6d:ee:f7:fc:b8:72:a9:24:e9:60:0d:0f:03:eb:
                    1f:6b:1b:02:73:34:75:9a:7b:3f:84:0b:a2:c6:e1:
                    e3:ed:2f:2c:85:f7:19:a5:2d:46:09:7e:78:2e:85:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:60:04:E6:87:FA:94:6D:37:8C:A4:62:D9:8B:1E:C9:7D:34:7C:C8
            X509v3 Authority Key Identifier:
                keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:66:31:c4:1f:d6:6b:d4:0d:c0:ba:ae:46:39:79:60:d3:f0:
         72:11:7c:df:e0:dc:6e:8d:87:0a:34:04:30:42:ae:1c:e4:1d:
         57:4a:fe:04:fd:29:04:72:f8:78:fe:c9:23:65:e0:a4:35:d0:
         ff:b1:a8:40:5a:2f:a0:d1:55:25:a7:19:c2:ac:5c:01:2a:01:
         44:23:44:33:98:4d:d6:ef:42:c2:0a:f5:f9:2f:0e:86:1d:5d:
         95:69:19:d5:c7:a3:7c:07:1e:c9:a8:db:c7:cb:02:44:a9:0a:
         49:35:b2:63:07:7f:f4:e1:f7:82:1f:a1:36:50:7d:cd:e1:34:
         f4:1e:80:d1:e0:e0:8a:29:c7:bf:05:5f:36:8f:1b:a3:f0:f7:
         4b:ad:a7:39:55:1f:1b:b7:97:69:7b:be:4f:c1:de:d6:d6:70:
         bd:36:99:59:c0:19:52:fb:b4:15:d8:e6:3f:2f:fb:53:01:89:
         db:bb:5a:80:0f:f2:ea:c7:9f:7e:5b:2c:02:a6:a6:52:71:de:
         7f:a1:1f:c8:0e:68:80:e9:98:f2:9a:fc:e2:f7:d5:5c:75:ab:
         b3:12:7b:bd:9f:e7:91:50:d3:2f:70:02:09:83:a6:04:3a:27:
         6a:bc:0a:87:da:fa:03:3d:a1:75:f4:a3:c4:ba:92:35:1c:c4:
         ca:ff:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:48:06 2026 by rpki-client