This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File:                     vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier:          WYAqyYs0GgW9CxStacb5fh6a/UMa7joLuny3RdBIzKg=
Subject key identifier:   D1:9B:C1:F5:24:DF:67:FC:59:4E:34:05:EC:15:7D:46:FB:DF:F5:47
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer:       /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial:       019BF5E3E43DE6C335399A390C16B2C1C2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number:          02D2
Signing time:             Sun 25 Jan 2026 16:01:51 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:51 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:51 +0000
Files and hashes:         1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
                          2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
                          3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: OS+UkRm/2Mon06QY2hWYoAVuZfXd2IaOHZ9Ug9Gu7lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:e4:3d:e6:c3:35:39:9a:39:0c:16:b2:c1:c2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
        Validity
            Not Before: Jan 25 16:01:51 2026 GMT
            Not After : Jan 26 16:01:51 2026 GMT
        Subject: CN=d19bc1f524df67fc594e3405ec157d46fbdff547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:66:3b:e1:05:46:c7:2e:7a:4c:3c:b4:62:
                    41:84:ec:c3:c6:63:e8:d2:60:84:c4:d8:f0:02:7a:
                    f2:d6:7f:0f:37:76:5c:ca:9d:0f:da:09:a6:8f:1c:
                    8b:fe:bb:78:b8:51:5d:3a:02:78:87:46:9e:56:9b:
                    8f:1c:04:e2:eb:3c:da:4f:67:35:21:b3:db:ea:2b:
                    c4:1a:3c:2f:a3:ee:e4:6b:f3:70:f2:89:10:6e:12:
                    0e:b8:d9:50:6e:1b:a5:e7:5d:cd:03:0e:7f:e5:da:
                    ff:02:d0:ab:9b:be:0f:4c:29:8b:65:9b:6a:69:6b:
                    55:1b:76:63:ec:e9:02:9c:a2:a2:e4:e4:04:3b:0a:
                    a7:66:94:b1:65:6a:31:32:92:c1:fc:5b:d5:60:71:
                    08:47:5f:07:41:c4:31:c7:fa:47:38:4a:b7:26:0a:
                    e7:33:07:cc:9d:2c:76:49:94:57:15:08:db:d1:78:
                    60:fc:c8:12:45:e0:9b:ff:4c:45:61:5e:51:53:52:
                    b0:dd:2f:8b:a9:49:81:9a:62:10:6d:2c:c8:b4:b3:
                    40:e8:df:ff:f2:09:f0:1d:da:c4:cc:8c:8a:94:0a:
                    83:79:57:fb:51:0a:9b:5b:5f:3c:a0:ff:3d:86:db:
                    94:5f:50:05:8d:64:37:93:16:41:02:40:ba:09:68:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9B:C1:F5:24:DF:67:FC:59:4E:34:05:EC:15:7D:46:FB:DF:F5:47
            X509v3 Authority Key Identifier:
                keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:66:df:2b:21:20:4d:c9:14:aa:be:f9:17:f9:12:ee:ef:
         b6:93:b2:51:84:fb:af:cd:9e:3e:86:cd:24:6f:16:22:cf:d6:
         ba:da:63:74:11:59:a6:a3:44:d3:dd:37:20:b0:c1:18:58:e0:
         3d:50:53:5a:04:41:5c:f1:54:58:06:46:e3:28:68:03:0e:4a:
         6c:6c:e0:51:92:1d:95:f5:8b:31:7e:4b:52:2a:e5:0e:80:bd:
         a3:09:fc:5e:58:22:49:d7:4a:db:e0:5a:ab:9e:fd:b7:15:06:
         f0:45:9d:92:7f:08:e9:af:6c:c1:a2:06:25:37:44:f7:77:ac:
         7a:06:6f:da:19:20:ec:60:6d:1b:db:e9:08:ee:b6:73:bd:8d:
         a0:1f:4d:8a:07:17:19:fd:26:94:ba:67:3d:ec:95:ea:3d:4d:
         28:af:c3:6e:31:b8:a7:5f:15:f6:bd:54:bb:41:ae:3e:87:71:
         da:04:c9:d7:7a:f5:74:fc:f0:14:97:98:5e:ef:9a:81:97:85:
         af:f1:71:7b:8f:8a:b3:8c:e5:ad:2d:31:36:bf:f8:9d:a9:dd:
         b5:fa:2a:b5:ec:30:06:e8:15:9c:1f:25:ac:e6:03:b0:86:de:
         53:83:67:5a:96:ec:7c:63:18:b6:eb:02:00:f7:0a:b1:b0:bc:
         36:37:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:21:00 2026 by rpki-client