This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File:                     Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier:          GfeUjKMLjTCW2lGF0fDpG+JfGX4UeN0UCRXrJ7Ko6XA=
Subject key identifier:   5D:48:E0:79:F7:AC:A2:5B:B3:D0:E9:2D:D6:77:7A:6F:B3:58:D8:55
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer:       /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial:       019BF31948FE590648C830D9A66B0710063C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number:          0CA2
Signing time:             Sun 25 Jan 2026 03:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 03:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 03:01:19 +0000
Files and hashes:         1: 7fwFotLEQHdJWGzsI9E3uv_kDSI.roa (hash: 84Fm9PCPXM8NFDP3Raox3dv53czMLCLj+wQeuu2bYvg=)
                          2: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: Jl2msC6xnEb/NlVSBGuhCCXePVeyKtrULKbLPW3Y0YU=)
                          3: _fFHluteB5aYpSrt5zAnfawBLdE.roa (hash: EeR8KZELGbbgEkegmnhlrAdS7lppXQ4MZh3aU7YBvVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:19:48:fe:59:06:48:c8:30:d9:a6:6b:07:10:06:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
        Validity
            Not Before: Jan 25 03:01:19 2026 GMT
            Not After : Jan 26 03:01:19 2026 GMT
        Subject: CN=5d48e079f7aca25bb3d0e92dd6777a6fb358d855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:f3:2d:c1:d5:32:c2:ae:8a:98:cf:1d:5c:
                    bf:3a:71:b7:17:e7:86:98:bd:d1:21:dd:e8:eb:07:
                    7f:0e:5e:b6:93:68:03:17:ed:e4:86:61:06:e6:3e:
                    fe:d7:9b:ea:e9:93:9e:93:ed:11:d1:d2:bd:18:9b:
                    5a:29:a7:fe:ca:67:7a:51:d2:f1:6d:e0:0a:c5:a5:
                    8b:e1:8c:90:29:f0:83:e6:19:52:83:6d:4b:3c:3e:
                    7c:cc:c0:c7:e9:81:2a:9f:1c:54:ce:c4:b9:00:04:
                    6d:a8:06:bb:bc:12:e1:ac:e8:55:9a:c5:48:10:30:
                    60:0f:8d:92:5d:23:80:7d:65:7d:7d:e0:a4:21:90:
                    e0:58:6d:88:24:77:93:20:8e:33:ed:db:0c:1c:38:
                    06:10:7f:26:03:06:98:10:d6:92:8f:71:28:7e:f1:
                    47:de:2c:4e:f5:dc:ac:13:5e:ed:be:4e:b5:54:7b:
                    5b:27:c1:22:d2:aa:00:f3:fc:cf:05:c1:c5:57:db:
                    aa:62:54:4a:4b:50:00:8a:26:19:a8:f9:3d:eb:9d:
                    c2:f5:28:af:05:9e:53:b2:c1:c8:9c:1a:8b:bd:cb:
                    69:b5:e1:d9:ec:f7:21:6f:9c:d1:ac:39:f5:24:79:
                    b6:1b:d8:99:c1:ff:b7:23:0d:57:3e:c8:20:a2:b6:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:E0:79:F7:AC:A2:5B:B3:D0:E9:2D:D6:77:7A:6F:B3:58:D8:55
            X509v3 Authority Key Identifier:
                keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:69:3d:6f:e4:08:aa:8d:39:2d:92:74:fd:31:36:a4:bb:
         65:9c:de:a3:b7:e8:5a:c2:52:51:e9:58:c2:7a:db:3c:15:fa:
         92:d6:2c:ee:52:1d:aa:3a:63:eb:b0:93:ec:68:54:51:20:ea:
         f3:c9:b0:b8:4c:f1:26:b3:b2:7f:a3:b3:24:21:b2:8a:bd:d5:
         03:8f:65:c2:cf:10:80:d7:59:18:ea:0e:c1:a3:be:70:b6:a4:
         40:48:b3:6d:21:d1:03:76:f7:42:1a:9f:d6:1e:76:d3:45:89:
         66:fa:e1:4f:fd:27:7e:c0:32:71:23:b3:8b:11:35:ed:73:ef:
         d4:96:4c:70:fc:ba:86:6d:ac:ce:72:a7:c1:50:38:5d:42:fa:
         78:f8:08:ca:30:10:5a:f3:79:3c:5d:07:50:01:00:a6:54:f6:
         7a:ba:5e:43:8e:a5:7b:25:61:5c:df:e6:37:11:df:ca:4b:24:
         98:b1:72:44:bc:f2:a2:3d:5a:82:13:62:01:00:4f:68:22:e9:
         24:d6:02:ce:ef:8c:2d:7c:32:e6:e6:75:b3:f8:1e:25:a1:3c:
         b6:be:c7:57:21:de:10:42:1d:61:2e:5a:e0:4e:a7:bd:18:8e:
         cb:e4:28:c2:91:74:b0:ad:cc:22:73:44:9e:a6:c8:de:d3:6e:
         0f:86:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:33 2026 by rpki-client