This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File:                     VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier:          sucHsksxSH59143JNw8t1R63JyWRETHi/bYxjd9qRLk=
Subject key identifier:   D7:06:62:32:28:E9:A1:5C:16:3F:EA:1B:2B:BB:35:EB:DF:B9:45:84
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer:       /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial:       019BF3BDF4378BDCEF99B00E8E633916FFE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number:          0163
Signing time:             Sun 25 Jan 2026 06:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:10 +0000
Files and hashes:         1: 043Lbp27EDcUm-b86hgRfQTIMxA.roa (hash: kfaT7xOA8Vvohn0rBNh/7C5Pf0XuWkbtD5lrheMBCvE=)
                          2: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=)
                          3: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=)
                          4: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=)
                          5: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=)
                          6: ONsl0GDt_Tfl3JT5iRQTyJYlb_4.roa (hash: zxeBlO2k2zpHRxnbUpE9cjH71458S251L8/4aRE1B34=)
                          7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: FwvjTESKJKbsYHzmO+raQrjdQ2cAyDTsRNIkpgZPEqQ=)
                          8: hTjSrcovPq648FqPM_7hdgfN-EI.roa (hash: lYgMjkKMuEdbys29eJuErKr4659N+NA6qhwRfkiwEHE=)
                          9: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=)
                          10: ngjkfOBH-dxB0xiqqQKvL_WdtG0.roa (hash: 1zwPy7iZtuLHaNUBo4QmZO75vcSTlaybrWc7phI+i2w=)
                          11: pc7FeUz9KIrSklddvonBjkHIAwA.roa (hash: iago8NlkQes9mOaOwzsAtanDYi7v2oBjhliPUjEYlLE=)
                          12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:f4:37:8b:dc:ef:99:b0:0e:8e:63:39:16:ff:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
        Validity
            Not Before: Jan 25 06:01:10 2026 GMT
            Not After : Jan 26 06:01:10 2026 GMT
        Subject: CN=d706623228e9a15c163fea1b2bbb35ebdfb94584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:21:0e:d7:e4:81:81:55:17:a4:88:b1:67:b6:
                    61:a7:77:61:3c:f0:ca:12:ec:1d:37:89:28:6b:0d:
                    1a:2c:23:af:f8:06:67:2a:07:ee:11:dc:33:6f:90:
                    f4:2a:03:85:9a:02:10:9b:57:bf:c2:d2:2a:88:3b:
                    76:78:17:34:5a:2d:ad:fd:e3:2b:42:54:63:66:d0:
                    99:c9:f1:62:0f:04:9a:12:24:68:da:69:35:9a:82:
                    8e:92:09:09:d8:bf:b3:9b:ef:7a:13:5e:d9:b8:5b:
                    48:cb:b5:16:c5:8d:70:20:a2:0e:61:49:0c:12:b7:
                    5b:2f:05:49:46:7a:5c:a8:c8:c9:17:23:8a:39:51:
                    52:9b:92:ef:33:fe:d1:e9:c5:7f:b1:7e:2b:ee:97:
                    91:07:c5:aa:ad:22:57:9c:45:3a:b3:82:89:a4:5c:
                    9c:f7:8b:d1:d1:98:a8:c2:5b:4a:57:9d:71:40:03:
                    ec:f6:09:7a:1e:36:4e:1f:a6:63:f4:a1:d3:31:a3:
                    bd:78:b3:21:9b:0f:26:87:a7:ad:ce:25:5e:ba:78:
                    ad:73:14:43:bb:af:4d:1c:48:5c:ff:33:4a:b7:e0:
                    c7:f9:04:04:32:ab:e8:1c:22:2b:a8:fe:d5:f3:89:
                    01:a2:91:48:d6:0a:9c:e0:12:4c:0a:1b:d0:54:06:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:62:32:28:E9:A1:5C:16:3F:EA:1B:2B:BB:35:EB:DF:B9:45:84
            X509v3 Authority Key Identifier:
                keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5e:72:21:52:90:00:f2:f1:be:23:9f:cb:e1:a0:55:ac:71:
         65:c6:f5:08:cf:5d:4e:a2:f1:ef:48:ea:52:88:a1:bd:ee:5a:
         30:a6:88:94:f1:55:09:3f:8f:0d:a1:90:6c:65:1d:dd:36:13:
         11:cf:99:66:6d:95:cd:80:68:0b:29:e7:de:09:bf:49:5e:9a:
         79:d1:66:80:ff:10:8e:8f:06:74:79:48:52:e6:58:9d:f0:ca:
         f0:27:38:89:05:6e:e2:f7:37:e4:23:fc:95:49:d7:6c:aa:ac:
         f9:c8:f7:53:e2:a4:6a:3f:bc:90:87:26:2c:ad:21:05:c0:ad:
         c4:75:3e:9d:c6:a2:97:b3:01:8d:b4:f5:b1:e0:dd:ce:2a:5a:
         d2:53:31:a1:57:27:b1:cb:cd:d8:50:82:99:fb:20:39:41:17:
         99:3a:46:1a:8b:19:8d:dc:0b:40:65:19:f6:4d:2a:14:d8:d2:
         e6:78:b0:2e:51:1f:85:97:41:64:aa:76:60:4d:58:5a:a9:03:
         9d:d4:d2:cb:9c:3b:71:d8:31:6d:4b:57:eb:d9:9f:ea:9b:ee:
         1f:02:a2:a1:af:3b:ab:a2:fc:27:00:06:9c:17:00:39:1d:55:
         47:0f:13:ea:85:99:cd:0b:f6:93:69:f2:23:e2:18:4f:85:83:
         57:ab:95:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzvfQ3i9zvmbAOjmM5Fv/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1
NjgwY2QwHhcNMjYwMTI1MDYwMTEwWhcNMjYwMTI2MDYwMTEwWjAzMTEwLwYDVQQD
EyhkNzA2NjIzMjI4ZTlhMTVjMTYzZmVhMWIyYmJiMzVlYmRmYjk0NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSEO1+SBgVUXpIixZ7Zhp3dhPPDK
EuwdN4koaw0aLCOv+AZnKgfuEdwzb5D0KgOFmgIQm1e/wtIqiDt2eBc0Wi2t/eMr
QlRjZtCZyfFiDwSaEiRo2mk1moKOkgkJ2L+zm+96E17ZuFtIy7UWxY1wIKIOYUkM
ErdbLwVJRnpcqMjJFyOKOVFSm5LvM/7R6cV/sX4r7peRB8WqrSJXnEU6s4KJpFyc
94vR0ZiowltKV51xQAPs9gl6HjZOH6Zj9KHTMaO9eLMhmw8mh6etziVeunitcxRD
u69NHEhc/zNKt+DH+QQEMqvoHCIrqP7V84kBopFI1gqc4BJMChvQVAa83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcGYjIo6aFcFj/qGyu7NevfuUWEMB8GA1UdIwQY
MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt
NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk
LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF15yIVKQ
APLxviOfy+GgVaxxZcb1CM9dTqLx70jqUoihve5aMKaIlPFVCT+PDaGQbGUd3TYT
Ec+ZZm2VzYBoCynn3gm/SV6aedFmgP8Qjo8GdHlIUuZYnfDK8Cc4iQVu4vc35CP8
lUnXbKqs+cj3U+Kkaj+8kIcmLK0hBcCtxHU+ncail7MBjbT1seDdzipa0lMxoVcn
scvN2FCCmfsgOUEXmTpGGosZjdwLQGUZ9k0qFNjS5niwLlEfhZdBZKp2YE1YWqkD
ndTSy5w7cdgxbUtX69mf6pvuHwKioa87q6L8JwAGnBcAOR1VRw8T6oWZzQv2k2ny
I+IYT4WDV6uVxw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:21 2026 by rpki-client