This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File:                     V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier:          D8awxVHSuYoT+U4JKY2oqHLgEwtAldd9NtKEH8JBmZ0=
Subject key identifier:   13:0B:5F:A4:FB:6A:69:5C:F6:25:46:E5:A5:74:B5:56:CC:60:EA:AE
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer:       /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial:       019BF4D0CBDC2AAE5C16264BFD115CC144E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number:          072B
Signing time:             Sun 25 Jan 2026 11:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:22 +0000
Files and hashes:         1: 4XP7HiVkwJb7VBFxlRqtJUdrlkY.roa (hash: OOEInEqutnloYStbQZqNgEuL98Agm2HcQLCCh/vFSb4=)
                          2: LcnRPWMP0InV3_yP2jprbNChb0s.roa (hash: e8UDEtmRI7MTyD+knc6LFW/m5Kw2e0PHXCb9DXA2Dt8=)
                          3: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: UDng6E7rt6phqUiWlYIfU7u1sr9mURFIsnbv/VR6A3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:cb:dc:2a:ae:5c:16:26:4b:fd:11:5c:c1:44:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
        Validity
            Not Before: Jan 25 11:01:22 2026 GMT
            Not After : Jan 26 11:01:22 2026 GMT
        Subject: CN=130b5fa4fb6a695cf62546e5a574b556cc60eaae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:7c:3a:20:f7:eb:fe:01:29:c0:77:bd:7c:
                    49:10:1f:95:71:61:13:e3:61:7b:bc:ea:60:1e:24:
                    3a:09:81:31:8f:1d:55:cd:85:23:0e:b3:8f:44:31:
                    4d:93:3e:f8:e7:9c:91:41:57:89:99:cb:8d:28:c9:
                    b8:b9:ed:0b:5b:3f:f8:b1:9a:54:51:2f:c6:8f:e9:
                    a2:17:da:d2:88:fe:ee:d1:09:fe:10:f5:9f:90:8a:
                    92:f1:07:af:f6:66:e6:a7:f9:c8:51:a5:51:7f:71:
                    11:24:d0:4d:b0:d5:0c:36:ce:00:fa:3b:38:69:43:
                    23:d2:33:62:17:af:f9:44:60:42:cf:6d:0b:5c:7a:
                    a5:ee:ca:4c:42:fb:2f:a5:62:0a:56:21:fc:5a:7f:
                    7b:bf:19:3e:ca:b0:c4:3c:42:3b:56:ba:fe:87:56:
                    ab:58:7f:2a:2b:12:62:30:b8:45:10:b0:44:5d:70:
                    87:49:75:51:02:52:3c:38:f7:78:e2:eb:25:ef:14:
                    77:10:87:d1:a8:f7:4b:e2:41:ab:16:f8:87:40:96:
                    37:7c:f0:a0:7c:4d:0b:21:2a:99:31:d8:be:ae:8b:
                    8c:f6:43:20:e1:7d:b5:68:87:84:0b:1f:e6:ee:5c:
                    fe:ff:0a:7f:20:63:67:16:fe:2f:f6:90:f0:9e:e4:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0B:5F:A4:FB:6A:69:5C:F6:25:46:E5:A5:74:B5:56:CC:60:EA:AE
            X509v3 Authority Key Identifier:
                keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:37:98:fc:f0:90:6e:cf:70:b3:d1:bc:16:1a:2d:0c:d5:
         45:8a:74:20:a3:d7:a3:8b:97:4a:dc:81:5b:3e:48:29:39:cb:
         89:dc:da:6c:c8:49:ad:b0:64:84:8b:93:7d:40:0e:c1:40:31:
         fa:1a:ad:58:4a:de:b1:6c:eb:9b:dd:d0:14:0b:d5:4a:7a:b2:
         db:e3:b8:75:1d:4f:ae:0a:ba:12:0c:0e:c2:79:5f:42:12:ae:
         7e:85:ad:ca:23:52:ca:0d:30:fe:92:c4:84:3f:70:70:f7:29:
         7c:6a:28:7b:4b:e2:b9:11:47:62:cd:e0:a9:dc:16:10:fa:b4:
         7b:7b:48:bd:a9:d1:09:9e:4b:5d:6b:2e:83:f6:a3:9d:48:89:
         7c:bd:3e:37:16:b4:fd:2b:26:7d:07:19:40:8e:f2:53:d7:ad:
         99:7f:86:19:e1:72:7a:1d:40:07:ca:a2:63:91:9e:68:67:74:
         7d:e8:48:cd:54:0c:1d:91:83:b0:9c:17:50:5e:a9:48:d0:cb:
         7a:b8:09:14:ca:e1:c9:b4:6d:2e:0e:09:be:3c:f2:f7:87:3e:
         d9:60:47:b4:15:94:0b:7f:64:99:e2:3e:5f:08:7d:e8:79:88:
         22:3c:bd:6c:11:13:2e:ea:b5:bd:41:8c:05:83:22:a0:e6:da:
         bf:2f:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:18 2026 by rpki-client