This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File:                     VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier:          joZ7uqxBXnBMUEGpGduXXI3h016/l9FAYbVcbTXsGkg=
Subject key identifier:   BC:67:51:4F:A4:01:29:8C:3B:27:F9:B3:1C:22:37:BC:9D:9E:4F:70
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer:       /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial:       019BF3BD9E129AA4584A5BF39322BE7F8E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number:          0401
Signing time:             Sun 25 Jan 2026 06:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:48 +0000
Files and hashes:         1: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
                          2: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
                          3: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: nHBVinebxhynaEK5iSrJIoOYvUddc+rHA7c7RIj7RPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:9e:12:9a:a4:58:4a:5b:f3:93:22:be:7f:8e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
        Validity
            Not Before: Jan 25 06:00:48 2026 GMT
            Not After : Jan 26 06:00:48 2026 GMT
        Subject: CN=bc67514fa401298c3b27f9b31c2237bc9d9e4f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:69:80:2b:cc:4f:37:35:60:0b:8b:06:33:
                    a7:e4:b9:62:93:a8:f8:91:60:9b:84:a6:9a:16:c0:
                    2f:4b:28:83:ed:2a:6e:e2:eb:09:4d:9e:00:b7:3e:
                    0a:02:b8:18:58:71:50:dc:69:a7:8a:7b:77:d7:1b:
                    07:bd:05:49:8b:48:ad:85:34:38:89:01:56:53:81:
                    2d:c9:30:c6:e9:ea:37:6c:6d:f9:85:b8:33:90:d0:
                    0c:8a:35:52:c6:43:b2:40:35:1c:15:7a:6e:b3:09:
                    cc:21:38:e8:b8:4a:03:f9:01:19:dd:c3:a7:3d:72:
                    16:6b:2d:2c:39:5e:4d:65:e6:5a:da:57:03:a3:d3:
                    f2:4e:7d:31:6a:74:3b:2f:1c:9b:c0:c0:11:09:54:
                    25:09:ea:c7:1c:b9:57:59:41:c2:37:9c:fe:18:44:
                    1b:75:95:13:de:da:d6:6c:d5:a8:26:4b:16:6c:33:
                    5a:28:ca:aa:8f:e0:7a:aa:44:82:9d:3e:1b:51:ad:
                    9e:cc:21:a2:4e:b1:03:66:29:90:09:54:5c:81:92:
                    d1:06:ac:e2:1d:bc:c7:67:ee:89:52:9f:d7:4a:62:
                    3a:5f:e5:cc:9d:c2:1a:29:28:5d:86:9a:9e:54:1f:
                    33:dc:e5:c8:0d:a3:e6:d7:05:db:c2:8c:30:63:7e:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:51:4F:A4:01:29:8C:3B:27:F9:B3:1C:22:37:BC:9D:9E:4F:70
            X509v3 Authority Key Identifier:
                keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:45:a1:b4:9f:b2:f5:49:e1:4c:7d:85:58:7c:df:2a:c0:31:
         42:74:61:17:95:ce:91:03:51:a6:60:ee:42:32:d4:1d:f2:7b:
         67:55:ce:72:2c:6c:e9:6b:af:e3:48:d1:05:ad:eb:76:79:5b:
         ed:7f:22:40:b3:d0:d9:d6:72:5a:32:04:85:2e:d4:d1:6b:a7:
         fd:05:7d:60:14:a1:e5:fd:08:90:b0:4c:b2:1f:54:b5:4a:d1:
         6b:1b:e3:32:d4:31:9f:00:01:75:54:fb:b1:46:55:6d:cf:bd:
         ca:3f:2b:5e:23:ba:0e:ab:b1:84:02:a2:5a:30:c2:db:de:b0:
         ce:ae:f6:01:4b:a2:c4:21:a1:b9:3a:31:93:8b:8e:be:2b:9a:
         de:97:45:75:85:7a:fb:09:a3:70:5c:4c:49:46:d9:4c:bd:ff:
         0f:39:60:57:30:4a:45:02:bd:21:b4:40:53:20:a2:4a:e1:96:
         87:71:d3:53:4e:89:59:76:7a:fb:b6:93:78:35:96:ba:9e:7e:
         55:93:54:69:e1:e0:95:d4:29:24:60:65:16:5d:93:95:60:74:
         64:f8:b5:ff:68:a3:86:19:b7:38:b3:7f:ae:40:bb:ac:2f:c1:
         b8:c8:c5:fa:df:fe:46:9e:57:e7:2e:b3:01:67:f2:26:ba:9a:
         cb:a4:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:11 2026 by rpki-client