This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File:                     vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier:          m9Gkd6OuskiMadQwo670qTxaWXjTv1hHIbGrjXh1ngM=
Subject key identifier:   E8:66:68:5A:52:66:73:C5:37:3A:9D:80:EA:CC:8C:6F:27:9B:C1:12
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer:       /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial:       019BF7D15B7E31399185FD19E2773210390C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number:          17E9
Signing time:             Mon 26 Jan 2026 01:00:51 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:51 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:51 +0000
Files and hashes:         1: K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa (hash: TugPqaQtZD9qSBdI5JE+l1/X09jHGI4DmWPMzdxCeJw=)
                          2: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: W4Out1YY7xSjjuP7ZPx3ZH0WX1zXXLtDQMjblrOr1QY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:5b:7e:31:39:91:85:fd:19:e2:77:32:10:39:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
        Validity
            Not Before: Jan 26 01:00:51 2026 GMT
            Not After : Jan 27 01:00:51 2026 GMT
        Subject: CN=e866685a526673c5373a9d80eacc8c6f279bc112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:bb:3e:2d:7e:4a:f3:e9:50:97:2d:88:f5:
                    f7:45:66:4b:16:99:4b:2d:46:59:50:f3:27:a8:51:
                    26:04:05:ec:36:46:cf:3f:4e:e5:25:d1:27:d4:af:
                    f2:d8:53:59:92:3a:ee:4c:20:12:71:7e:b4:dc:f8:
                    53:d3:21:7c:06:96:3c:98:80:31:ff:71:86:9b:54:
                    15:fd:70:84:b5:7b:cb:7a:0a:f7:f3:a9:a1:8e:97:
                    e3:4a:a9:e7:92:1d:9a:b0:c2:67:8e:34:d0:9b:99:
                    e2:17:a7:45:15:02:18:21:20:f6:c7:e9:7f:ce:a7:
                    4f:2e:f4:77:d8:f0:51:ef:4a:01:fd:4c:42:8c:eb:
                    61:c1:db:1c:cb:fc:c5:53:e7:e0:e1:be:81:10:3e:
                    51:6d:8b:72:a7:49:d2:ab:3d:8d:f0:1a:7e:e3:6a:
                    1a:f2:54:9b:8e:ff:be:c5:43:cb:51:25:ba:50:a7:
                    fc:d1:35:2b:37:39:e5:fb:a5:33:81:c1:f3:b4:c0:
                    b1:68:27:c7:75:47:05:49:cf:0f:b4:4e:a5:eb:1b:
                    6c:9c:8a:63:54:d6:3c:f1:c6:bd:5e:48:70:c6:10:
                    4c:a9:77:a4:b2:09:b8:8f:15:14:c1:78:72:40:7d:
                    34:f8:08:1c:e4:21:49:b3:f4:b8:6b:41:bb:5b:87:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:66:68:5A:52:66:73:C5:37:3A:9D:80:EA:CC:8C:6F:27:9B:C1:12
            X509v3 Authority Key Identifier:
                keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:79:bd:d7:36:05:ed:1d:d2:79:ed:a3:38:8a:49:34:e5:e7:
         50:e9:5c:74:54:87:e7:3a:88:b7:ef:c0:38:e8:42:b1:16:64:
         02:ac:a1:d6:dc:11:3d:f4:87:7b:3f:6e:6e:d3:94:8c:b3:4d:
         83:e5:21:24:eb:31:b7:09:d5:ae:32:05:6b:c8:49:8b:1e:6e:
         85:11:5d:cd:1c:7d:ac:f4:79:53:d4:8c:a7:40:24:8a:23:77:
         66:8f:35:37:b0:60:48:67:df:ec:f5:8d:8a:ba:f4:1c:fd:b7:
         06:7f:0d:55:ff:66:ce:f3:56:8b:7e:30:46:92:2b:dc:27:76:
         d1:72:f4:62:7c:38:18:c2:72:9c:58:e5:00:9d:76:ee:21:c4:
         c5:e4:a2:c3:57:a6:0d:01:29:5b:dd:27:37:13:bd:c2:ca:0b:
         f5:7a:08:f8:43:f2:76:71:48:ba:80:9f:99:79:35:3f:27:19:
         1d:8f:db:7f:1a:45:c8:26:9c:da:de:89:85:bf:2c:7b:e9:b4:
         71:f5:21:bf:17:ca:4b:a6:a6:28:8e:35:91:e8:6c:bf:68:65:
         de:2d:4d:e1:49:35:9b:13:53:e8:fb:20:94:cb:67:72:b0:ec:
         06:da:40:fe:12:7f:82:87:f6:d5:e1:5b:b5:15:d0:e8:37:ea:
         1a:e9:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:23:59 2026 by rpki-client