This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File:                     VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier:          kIpPCZI9iFoyKoGGa27b1+YyEEZ1v4egoOJCbetjUsE=
Subject key identifier:   7B:6B:75:34:39:27:70:00:06:98:F7:BD:9C:2E:34:87:1E:71:41:9F
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer:       /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial:       019BF4D07B6086D2D9992703F1C454C8C1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 11:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:02 +0000
Files and hashes:         1: E9XmR3-Bi9_XHIyVFPe__9RBWrE.asa (hash: ObdWbxrxyYN88ZVvVzbAmIbulsDo3X2Gi1Jf4mXfLOY=)
                          2: TgRImO7QCLoIe--xkdVlgWa3wjM.roa (hash: ZBNDhLKYbt3L/BOlUHPdJXGaOnbVt4RZzzrFkmwYfqo=)
                          3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: UG4k/FKJO2VCkY1JaO+8zmJh/tVc+NVx77RSfqIw4fE=)
                          4: qwMC2NCtYrZV2QDu2Av1DyMlIXE.roa (hash: pG2SeA0IgC+0M3Ig05IRMC7RLGL2RBI+OUUaT62RBBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:7b:60:86:d2:d9:99:27:03:f1:c4:54:c8:c1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
        Validity
            Not Before: Jan 25 11:01:02 2026 GMT
            Not After : Jan 26 11:01:02 2026 GMT
        Subject: CN=7b6b7534392770000698f7bd9c2e34871e71419f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:d9:46:30:e9:eb:b2:bc:9d:d7:17:63:b0:
                    78:a0:68:79:6d:69:f0:ab:af:a0:03:3d:58:50:71:
                    16:de:8d:10:8f:9a:c3:b9:0e:ee:aa:e6:2e:39:1e:
                    aa:6a:75:02:a2:00:29:41:69:df:38:dc:e0:9e:9e:
                    69:24:c4:a8:8b:8c:cd:87:ba:60:9b:da:fc:6a:60:
                    6f:e5:e4:f0:ad:7d:20:73:f2:ad:7d:33:1a:65:8e:
                    f8:e1:b9:05:24:fa:ac:4d:37:a3:c2:9e:1d:db:04:
                    51:f2:e0:56:66:d7:c6:78:45:2f:7a:b5:e9:92:96:
                    eb:95:db:30:5d:66:d8:06:50:bd:17:14:49:2c:06:
                    73:81:44:3a:39:d1:45:79:a7:89:89:04:c8:4c:90:
                    9b:46:45:1d:0e:61:51:43:3c:59:0d:5b:c0:14:e4:
                    8d:54:01:7e:6a:35:a1:67:5c:98:65:14:5f:73:c6:
                    aa:74:f2:67:97:e3:70:23:d5:73:b7:76:9d:31:06:
                    08:09:f5:7d:78:45:6a:10:24:70:49:6a:58:0c:2f:
                    e7:14:77:9d:a4:06:4f:eb:b1:a1:f3:0d:d7:9c:4c:
                    0f:03:ea:e6:bc:6d:20:a8:2a:69:f6:63:c2:41:4f:
                    ff:1f:7e:3f:46:09:1c:17:eb:35:87:1a:cb:a9:08:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6B:75:34:39:27:70:00:06:98:F7:BD:9C:2E:34:87:1E:71:41:9F
            X509v3 Authority Key Identifier:
                keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ee:a4:20:45:9c:3c:28:81:53:b6:4f:25:44:b9:f0:93:97:
         07:27:d6:5c:3a:59:92:be:73:40:c2:38:23:35:ad:38:67:56:
         7b:91:98:7a:fa:93:42:90:d4:81:39:de:6c:3a:83:8c:66:df:
         6d:93:fc:34:09:45:d5:4d:3e:6f:fb:4f:a8:84:ad:f2:7c:61:
         37:93:16:46:5e:a6:db:d6:15:b7:e9:d3:ca:9c:27:87:61:b2:
         ee:09:f6:17:dc:72:77:68:08:9b:30:3e:16:31:14:fd:4c:c8:
         36:65:70:a0:be:da:7c:ae:de:96:87:86:ac:be:ef:3f:b7:64:
         21:06:c7:36:f3:16:c8:21:81:f7:aa:19:1b:50:c3:6e:30:50:
         5d:2b:6c:e8:cb:33:a3:59:56:51:3e:2a:50:ad:16:f0:29:23:
         d0:7f:04:71:d0:93:37:72:ed:12:59:67:5e:59:c6:9f:49:d1:
         07:e2:0d:df:c1:b9:86:83:24:f3:ca:8a:75:53:ce:67:01:2c:
         3c:dd:84:ee:98:2f:ec:78:91:11:8e:84:61:88:66:dd:44:4c:
         3e:56:4a:2d:92:7c:4c:33:9c:a3:c8:6f:f4:64:14:4a:c3:7c:
         69:60:98:29:ac:fe:83:68:cd:93:e1:7f:10:8e:dd:db:83:66:
         56:04:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:22 2026 by rpki-client