This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          l3hXxk82aB0RlfBy/PlMfix9ekxgpCUM4nWa/V0NH0o=
Subject key identifier:   09:65:FF:33:BB:00:E8:13:EF:B5:08:AB:B5:DA:1A:5C:78:4A:B0:DD
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       019BF4D109A9C7D7E778C9C1D0185FA40A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          10E7
Signing time:             Sun 25 Jan 2026 11:01:38 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:38 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:38 +0000
Files and hashes:         1: 90MC7lpDH8Gbpn1gKbJADCIkuHQ.roa (hash: IdtFKKH7Qq584DOaHWX8VE6Du+XS0AqFvI0No8Ac1k0=)
                          2: Eb_E6fwUoCaY280jS6zIbLf-Ekg.roa (hash: Q2/ZJXr2QIdBa9yss5O/wJYnVVCvAGxuYe91JBXhEFQ=)
                          3: XEgWuGNZKP2xHlnn0Bhq-uFy3zQ.roa (hash: Dg+JUKAIOOV2eZlMRBIqgsVw/ezQsbFdaqZ4m0NhuOU=)
                          4: pl1Py7_5cG6uwaKi4Bc9_AugnY8.roa (hash: KCPLzx7rL96OPRDYgl9749Lw9slDlQQEZQPo2q7M6vc=)
                          5: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: 9FjJEgw8/eJiNgl+tCnFZ3yXFOyIsT78DizuHYkFUIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d1:09:a9:c7:d7:e7:78:c9:c1:d0:18:5f:a4:0a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Jan 25 11:01:38 2026 GMT
            Not After : Jan 26 11:01:38 2026 GMT
        Subject: CN=0965ff33bb00e813efb508abb5da1a5c784ab0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:ba:61:36:d2:5e:4e:2f:e7:75:51:b8:ab:
                    bc:fc:11:65:d8:ff:2b:2d:a0:61:e5:b9:bc:e3:52:
                    39:74:da:6e:97:2c:81:b4:05:d9:92:29:56:96:41:
                    dd:95:8e:c3:3c:79:52:e2:4c:49:77:6e:57:e5:f5:
                    aa:6a:f6:de:7e:9c:65:a5:5a:5f:22:7b:9f:bf:e0:
                    f9:3b:27:80:d6:14:9a:0c:8b:b3:f6:14:95:40:dc:
                    5c:8b:0f:7b:ef:85:a5:45:0f:ab:75:50:0b:f7:83:
                    69:81:73:7c:32:d2:6e:e3:b1:dd:52:e8:b6:7d:fa:
                    43:a2:3f:1d:2e:d1:61:1a:57:11:4c:4a:bb:c4:f4:
                    d6:33:76:e9:f7:17:cf:67:d3:42:ed:a0:50:a6:10:
                    16:68:9c:a7:3d:2e:e7:6a:c0:96:62:30:dc:88:21:
                    fa:de:78:62:51:86:2c:e4:ef:ef:70:8b:53:9e:00:
                    c9:aa:d9:a1:c0:81:56:df:b2:d5:ea:3a:de:b2:c3:
                    80:05:81:91:b4:c6:b8:b3:c6:07:11:8c:7b:46:0f:
                    c7:74:c7:f3:c8:e2:1b:ad:e1:6a:a9:19:49:93:f8:
                    59:3b:46:7f:cc:84:57:46:84:25:55:c3:2f:3a:59:
                    a5:27:aa:af:df:8d:47:53:1c:5b:97:a5:2f:3b:35:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:65:FF:33:BB:00:E8:13:EF:B5:08:AB:B5:DA:1A:5C:78:4A:B0:DD
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bb:bb:03:69:52:b9:a8:3b:36:62:e3:d3:49:23:b7:dd:6f:
         7e:86:0d:ac:7c:48:7f:26:12:f9:72:34:9f:d7:e0:c1:47:b3:
         24:23:cf:c7:94:94:cd:57:3f:2d:a8:bb:8f:f2:9a:8f:19:e6:
         35:e8:53:be:be:04:4c:3d:22:4f:4c:8b:9e:8f:9f:f6:62:9f:
         7b:d0:11:bf:0c:38:ae:b9:d6:96:23:11:f7:b2:3a:15:c7:20:
         bf:03:7a:a3:67:d9:23:ee:3f:3b:56:a6:2a:77:e5:ed:8e:a9:
         0e:2c:44:61:b5:cf:42:e2:a7:68:63:14:71:89:41:f8:fa:02:
         86:9c:52:04:0f:0c:22:78:17:b6:8e:49:2c:33:1d:0e:ce:01:
         69:cb:5b:8a:07:ba:c7:f3:c0:9c:7e:ac:03:2b:5f:13:b2:fa:
         7c:7a:0b:3d:4d:c1:fb:2f:db:75:e2:e0:77:19:6c:77:57:59:
         66:60:0f:df:53:c4:22:dd:bf:a3:87:ca:23:e7:19:98:af:cb:
         93:02:c0:a1:e7:34:45:c6:fe:92:9f:38:53:59:88:9b:dd:5b:
         00:d4:f0:e9:3e:66:5f:87:77:e1:61:2d:04:97:2d:aa:bd:1c:
         67:08:08:b0:1e:02:2f:f2:a9:9a:ac:0e:9f:a0:8b:91:15:90:
         20:26:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:54 2026 by rpki-client