This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File:                     v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier:          duzURoqRgyFktCwGNDLF1O1uGocedRnqX3tjLnbJ/Ck=
Subject key identifier:   5F:41:8D:84:24:44:98:72:F4:FB:3C:E4:CA:7C:3D:CD:2B:C6:5F:23
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer:       /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial:       019BF5ABF40B9B63E7B9F1E67D5A17C21D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number:          074D
Signing time:             Sun 25 Jan 2026 15:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:45 +0000
Files and hashes:         1: CdSBrOUKTuPZdHo1rhDRbIWCZVk.roa (hash: vomX7/L5tiX3Xm3yDlRhzTvRbnk/SDC+k2Z0lNB/FvE=)
                          2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: CkywutAA27nRii+mpU4cz1EZF0z0EydDqwFc6u9fHrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:f4:0b:9b:63:e7:b9:f1:e6:7d:5a:17:c2:1d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
        Validity
            Not Before: Jan 25 15:00:45 2026 GMT
            Not After : Jan 26 15:00:45 2026 GMT
        Subject: CN=5f418d8424449872f4fb3ce4ca7c3dcd2bc65f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4b:c6:b9:57:41:9c:8f:dc:24:e2:43:cb:ea:
                    0e:8e:c2:c1:51:9b:de:e8:5f:5b:e9:7c:00:cd:b0:
                    88:8e:76:06:48:c6:3f:1c:34:b7:a8:9d:ef:93:04:
                    a4:1e:df:1d:64:d4:5b:bb:c7:9f:2c:e4:25:12:f8:
                    12:e7:a6:01:80:39:02:53:a1:79:e7:ff:06:3b:64:
                    cf:04:9b:1b:38:4a:21:8e:cd:4d:a8:e3:65:c1:7e:
                    e7:7c:05:65:6e:f7:3a:3d:4d:2a:8e:f9:ec:e7:b4:
                    78:91:b5:13:1e:d2:4c:d8:cb:e9:24:f6:2e:17:26:
                    ff:f7:24:31:1c:4e:77:51:96:b9:b6:89:aa:a9:ec:
                    e1:22:04:f7:93:c3:a3:51:19:1c:f3:31:86:0d:cf:
                    9d:21:98:a1:1c:e1:49:c0:2f:f9:c0:d1:4c:c4:94:
                    d7:a8:17:c0:c6:cf:18:3a:20:b3:e1:1a:0c:8b:50:
                    c7:25:06:2f:5f:95:35:41:cc:0a:6b:08:fd:d5:36:
                    75:7e:38:a4:21:0f:ad:05:32:cb:c6:40:77:19:54:
                    63:fa:fa:a5:50:f0:c7:7e:90:7c:3d:51:b4:0e:16:
                    d7:f8:5a:0e:d9:6b:42:da:98:c6:b4:41:5d:2c:5b:
                    09:bf:8d:86:90:e1:62:6a:7d:3a:65:51:ee:0a:cf:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:41:8D:84:24:44:98:72:F4:FB:3C:E4:CA:7C:3D:CD:2B:C6:5F:23
            X509v3 Authority Key Identifier:
                keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:45:66:4c:34:4f:c6:14:eb:72:71:7a:d8:bb:08:f6:03:b8:
         bc:06:dd:e0:9d:fb:14:90:f0:fa:04:47:20:65:0c:09:fe:de:
         38:d0:31:73:4c:7b:d2:b2:31:37:ae:7c:0d:90:64:42:e2:90:
         aa:c5:3d:f3:12:ff:4d:6f:3e:e0:2e:30:3d:00:db:09:2d:73:
         b8:5f:26:79:34:67:6e:23:66:25:68:ee:68:1f:c4:52:d7:38:
         42:5e:97:e9:7e:6d:7e:3e:cb:4f:4a:5b:91:39:f7:92:c7:46:
         25:b3:b7:01:d7:92:83:e9:c6:5e:0a:1e:0e:c9:00:3c:c9:51:
         5e:a8:3d:46:2e:3b:05:9f:03:89:f6:02:1e:ed:6e:d0:92:9e:
         50:3e:4c:fc:07:17:3a:8b:6b:7b:56:83:f9:c3:9e:44:4c:a2:
         e9:15:ff:31:e0:e0:f5:7b:fa:99:a0:bb:62:2f:87:a6:eb:9c:
         07:e4:40:d9:dd:63:41:bd:e7:cc:dd:2c:a0:3b:f6:98:ec:fb:
         69:77:29:71:77:7f:5e:4c:ed:20:39:de:43:fa:69:42:0b:ce:
         9d:b2:d1:f7:dd:d3:ed:83:bf:75:b4:86:40:c7:27:1e:8a:00:
         c3:94:ef:f1:04:e8:b6:0e:65:6f:e2:3b:28:0b:c4:bd:71:4b:
         6f:95:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:52:53 2026 by rpki-client