This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
File:                     V-K4ajPJ-XIUU22MopGdfzw4AM4.mft (raw, json)
Hash identifier:          psgea1DFRLA+nXW/t6tAvLPwNMB98J3eNDZxV4iaDVw=
Subject key identifier:   0E:75:89:17:F2:01:A1:3A:6F:66:AC:45:71:42:D0:3A:D5:EE:F1:AE
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Certificate issuer:       /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial:       019BF5ABBF3B25363541A74B2BD438C790A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
Manifest number:          0950
Signing time:             Sun 25 Jan 2026 15:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:31 +0000
Files and hashes:         1: BxDQYAMULDIcgzCGoRbOdQoc-sM.roa (hash: 3NcdmgeMlXSMuQ/j+h+4gy0qcuBqA1IJLcvSxfX1/aU=)
                          2: V-K4ajPJ-XIUU22MopGdfzw4AM4.crl (hash: tbLuFbWW3GplLrjDNIH2ydKeOGz7KFx5+sgCwG0lrJ4=)
                          3: zvWrg-epv6Kuwwbr_YnppFR5eP4.roa (hash: CXU1oUM5pH2/lckg4eVPlPBRQqsoIp6BUfj73FNZ/wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:bf:3b:25:36:35:41:a7:4b:2b:d4:38:c7:90:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
        Validity
            Not Before: Jan 25 15:00:31 2026 GMT
            Not After : Jan 26 15:00:31 2026 GMT
        Subject: CN=0e758917f201a13a6f66ac457142d03ad5eef1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:e8:fe:2d:ba:63:a6:c7:d5:88:3b:e7:ed:
                    f8:99:ee:95:fb:aa:71:7f:a9:0b:89:00:9b:4e:cd:
                    67:a6:84:e4:df:c3:72:bf:77:f5:ee:82:3d:84:58:
                    3b:ba:b3:3f:79:0a:99:7a:e1:84:b4:c0:e1:12:20:
                    b4:df:12:1e:3e:bd:3f:2a:61:b5:93:34:80:cc:24:
                    5d:b4:7b:97:60:f2:b3:0a:3d:38:48:1d:14:59:ab:
                    ff:83:25:8c:af:21:a0:0b:eb:88:94:f9:12:e0:ce:
                    a9:77:83:47:95:24:c7:23:47:18:b2:b6:30:f3:72:
                    a9:d5:07:fb:c8:bb:47:7f:76:e9:ba:14:26:ef:cc:
                    b7:32:da:0f:6f:53:49:4b:e2:1c:06:23:0e:a2:16:
                    b2:65:04:e7:e2:77:64:ff:4e:f9:b9:fe:4e:0b:93:
                    b1:56:79:87:ed:8a:a2:37:61:22:92:54:18:88:52:
                    43:46:99:b9:36:fb:1d:ff:0e:2f:da:1e:5a:f4:9a:
                    21:06:a8:c0:bf:24:3f:70:49:4f:90:20:b4:e9:02:
                    99:04:a4:94:58:1b:82:b6:ec:ce:aa:1e:cd:9c:7f:
                    25:e0:af:5e:6f:e9:ef:5c:eb:2a:c4:03:4d:9c:0e:
                    90:55:74:b3:16:9c:fe:15:82:ea:1f:39:ba:c9:c8:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:75:89:17:F2:01:A1:3A:6F:66:AC:45:71:42:D0:3A:D5:EE:F1:AE
            X509v3 Authority Key Identifier:
                keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:48:e3:bd:f1:3b:3a:d5:25:52:ad:5e:2d:61:23:a1:ea:4f:
         db:d0:0d:0e:7b:43:ef:cf:27:6c:71:c7:10:91:13:c4:14:cf:
         aa:0a:ea:ef:03:24:8e:79:d6:31:ec:ca:6c:52:cd:0a:7b:94:
         e8:e3:8a:72:dd:06:ae:7c:7f:6f:76:cd:0a:5c:08:a1:be:2a:
         5d:18:7b:3e:31:ca:33:b1:32:43:1c:aa:3a:a3:66:06:fd:7e:
         50:84:61:61:86:05:d0:9e:c4:8f:0b:0c:32:1d:4d:3f:42:da:
         d4:df:bc:16:7b:9a:3c:40:72:4a:95:21:7f:57:45:17:3e:88:
         c4:ca:5a:d3:2f:75:2a:86:3e:11:ea:63:57:0f:44:ff:e2:32:
         c0:57:9d:f7:08:5c:2d:22:52:55:08:48:02:9e:2e:d3:46:c3:
         bb:4d:45:74:bb:9b:14:42:1c:1b:4b:31:18:4a:e4:c9:d9:09:
         fe:73:8b:b8:fc:89:1c:e3:71:7c:83:ed:b4:ab:06:29:c0:24:
         fb:a0:99:28:7e:02:51:00:3c:02:ee:75:a5:c8:62:db:f6:36:
         41:47:b9:cd:a3:d3:f7:0c:2f:ed:91:bf:ab:31:6b:b0:f8:bc:
         18:fe:36:77:23:02:11:84:34:a0:db:53:c9:55:4c:b9:0e:43:
         aa:32:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:26 2026 by rpki-client