This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File:                     vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier:          K/FTb1DusC9YoSNhZcwVRkhYSdWhqkpAWsFrqG3KkuI=
Subject key identifier:   8D:03:D3:F6:E2:4C:71:6A:B5:B3:88:75:54:C5:F2:C2:5B:16:65:1A
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer:       /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial:       019BF5ABD29087511BDE8F6D879B18372CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 15:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:36 +0000
Files and hashes:         1: GMFbMXRu6EBkQ9myYXVyJDahzbg.roa (hash: +dgTRqdqVNlrN9h5FoD/gUpBUreTgCju2UOGfnCCQFM=)
                          2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
                          3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: VwI39PDj47R5pygC/2Axk/j64zMJnVpTdqgl63aoIyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:d2:90:87:51:1b:de:8f:6d:87:9b:18:37:2c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
        Validity
            Not Before: Jan 25 15:00:36 2026 GMT
            Not After : Jan 26 15:00:36 2026 GMT
        Subject: CN=8d03d3f6e24c716ab5b3887554c5f2c25b16651a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:50:55:46:1f:8b:2a:88:91:52:fa:0e:ac:
                    d5:e3:66:f5:b7:80:e5:f8:ca:cc:ff:6e:e5:f0:88:
                    db:36:41:fd:ef:a6:dc:b1:b3:1e:d4:48:67:86:26:
                    e1:22:85:42:fc:40:27:07:13:35:1d:45:fc:1c:57:
                    68:aa:2b:8c:e5:d0:b2:12:66:cb:0d:cb:7a:ad:1e:
                    74:ea:54:eb:c8:16:84:24:98:38:de:bc:1e:a9:be:
                    ea:0c:d8:48:c8:f4:5b:1a:41:44:6a:21:17:44:f0:
                    c6:9a:27:04:f6:94:37:c4:4c:62:6c:9c:ef:e9:be:
                    c1:15:1e:1e:a4:bb:1e:9d:28:9b:cc:ee:c0:4c:7b:
                    93:a9:dc:a3:c1:81:17:ff:19:b4:a3:83:25:ee:6b:
                    62:c0:7d:47:ef:ad:24:14:bc:50:f4:74:33:8e:c0:
                    08:cb:5d:87:1e:58:31:74:80:6e:ed:93:5d:89:c7:
                    d4:d1:78:c2:23:b8:3f:10:24:61:80:72:36:b2:4c:
                    1e:e6:5b:fe:37:8a:13:b3:19:88:71:7f:46:58:d9:
                    4c:4a:0d:19:6c:f0:7c:30:20:0d:51:6d:9d:43:a9:
                    a8:b6:63:b4:58:a4:1c:91:b6:fe:3d:f7:ff:94:b7:
                    6e:7c:3d:a6:a1:bb:d2:66:9d:92:60:b9:a6:ea:62:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:D3:F6:E2:4C:71:6A:B5:B3:88:75:54:C5:F2:C2:5B:16:65:1A
            X509v3 Authority Key Identifier:
                keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:59:c4:a2:cf:c4:6f:12:fe:a9:54:19:39:a3:f1:22:1d:
         1d:ff:3c:ee:98:3c:35:cf:35:2b:55:cf:c7:20:dd:fb:f7:f3:
         cc:1e:07:81:ca:b8:eb:21:b8:a9:bd:1f:80:6d:49:9b:cb:a4:
         d0:1c:2f:62:ff:02:83:99:27:bb:22:f8:6e:ad:2a:82:ad:c0:
         28:b0:5c:fd:06:b4:cd:4e:2f:46:ae:00:e5:3f:22:7d:a1:de:
         43:2c:83:8d:7a:a1:9d:81:04:2a:9a:4c:3f:35:cc:01:d5:e9:
         86:18:34:79:ae:50:4a:cc:7a:30:08:f3:6a:01:e3:37:41:e1:
         da:fb:18:48:87:16:dd:73:be:b1:cd:c3:0e:1b:d4:86:b6:cb:
         e3:14:30:5d:d7:3d:b6:22:e2:e5:ef:92:bf:b3:e9:01:a2:35:
         86:9f:eb:31:ea:ad:51:2a:b5:5a:b1:9b:9d:b6:44:df:5e:65:
         4f:68:79:b1:72:61:ef:59:41:10:96:5f:34:8a:00:0e:71:ff:
         29:ac:1d:85:7b:60:52:6d:5e:c3:5e:c4:58:ed:13:d2:ce:7c:
         b2:4c:25:13:28:79:23:be:a6:50:a8:99:af:01:f5:7a:3f:21:
         9d:30:df:f2:61:38:09:59:5b:6b:42:1c:8e:81:7a:02:ad:84:
         d0:73:78:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1q9KQh1Eb3o9th5sYNyz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNmM0OTdmZjRkNGE4YmI1YTI0YmRkMjA1MTU3NWI0OWEw
ODNjNzUwHhcNMjYwMTI1MTUwMDM2WhcNMjYwMTI2MTUwMDM2WjAzMTEwLwYDVQQD
Eyg4ZDAzZDNmNmUyNGM3MTZhYjViMzg4NzU1NGM1ZjJjMjViMTY2NTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYpQVUYfiyqIkVL6DqzV42b1t4Dl
+MrM/27l8IjbNkH976bcsbMe1EhnhibhIoVC/EAnBxM1HUX8HFdoqiuM5dCyEmbL
Dct6rR506lTryBaEJJg43rweqb7qDNhIyPRbGkFEaiEXRPDGmicE9pQ3xExibJzv
6b7BFR4epLsenSibzO7ATHuTqdyjwYEX/xm0o4Ml7mtiwH1H760kFLxQ9HQzjsAI
y12HHlgxdIBu7ZNdicfU0XjCI7g/ECRhgHI2skwe5lv+N4oTsxmIcX9GWNlMSg0Z
bPB8MCANUW2dQ6motmO0WKQckbb+Pff/lLdufD2mobvSZp2SYLmm6mK5awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0D0/biTHFqtbOIdVTF8sJbFmUaMB8GA1UdIwQY
MBaAFL5sSX/01Ki7WiS90gUVdbSaCDx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2It
NjVhZTU4YTliZWU4LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2ItNjVhZTU4YTliZWU4
LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOFZxKLP
xG8S/qlUGTmj8SIdHf887pg8Nc81K1XPxyDd+/fzzB4Hgcq46yG4qb0fgG1Jm8uk
0BwvYv8Cg5knuyL4bq0qgq3AKLBc/Qa0zU4vRq4A5T8ifaHeQyyDjXqhnYEEKppM
PzXMAdXphhg0ea5QSsx6MAjzagHjN0Hh2vsYSIcW3XO+sc3DDhvUhrbL4xQwXdc9
tiLi5e+Sv7PpAaI1hp/rMeqtUSq1WrGbnbZE315lT2h5sXJh71lBEJZfNIoADnH/
KawdhXtgUm1ew17EWO0T0s58skwlEyh5I76mUKiZrwH1ej8hnTDf8mE4CVlba0Ic
joF6Aq2E0HN4bA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:38 2026 by rpki-client