This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File:                     VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier:          xBJnS62eZJhjmdHzzFJdVIyMACBcThl1/TSvUt2/suQ=
Subject key identifier:   26:E8:27:EC:15:0B:D6:08:AC:BA:0F:65:2F:09:60:38:F3:12:75:CC
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer:       /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial:       019BF53E884B10A28C94166081A483CE5570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 13:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:14 +0000
Files and hashes:         1: 2e5AvXlufc-kEczHhTECSJ-V-JQ.roa (hash: I9+kJ0K5wv3UioVKT0ZYctRfAuqgjg7khDoT9z5Qntc=)
                          2: 4LBzWO_530DcCpzjlEfXk_h_vW8.roa (hash: H+p9nsy8NewbJx1+0VvALNZxKQ+AzKGCdkwiJQ4ANZM=)
                          3: GmiNV02KpRdxeBzvA-9_R7Rwp5k.roa (hash: 1nMmGCSVtG3D2xti3D/6NXcOSYqZ/aoCI5L5XEr0uig=)
                          4: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: AbNW1sO+K1fwXy1hEUebV3kcTWevB1Bi+NpIW0FC0HI=)
                          5: g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa (hash: KFBqHuaTNX9BJpnJ/kNbP6C31mWv4bvManEdzG/ajqc=)
                          6: mk7ttr1hKMruQA-V9YpclvWNi_0.roa (hash: DCTpzfyrUDoRJthmL9oXt5chUKx5z7hp5NsgIKGeX6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:88:4b:10:a2:8c:94:16:60:81:a4:83:ce:55:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
        Validity
            Not Before: Jan 25 13:01:14 2026 GMT
            Not After : Jan 26 13:01:14 2026 GMT
        Subject: CN=26e827ec150bd608acba0f652f096038f31275cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:ff:aa:bb:5e:05:27:d1:d2:c2:32:06:dc:
                    55:a5:e5:0c:d6:37:a4:1d:30:59:3b:ea:80:7e:05:
                    a4:60:e9:f2:73:7b:86:08:55:bd:95:16:eb:62:81:
                    bb:18:a9:2b:3a:70:fa:43:4d:03:07:9e:60:b5:7a:
                    b2:4e:e0:2b:83:29:7b:9f:df:99:49:0c:7d:b0:0f:
                    29:2c:68:cd:24:34:eb:e6:50:b1:b7:0d:57:79:5c:
                    fa:19:57:7f:11:46:6a:5b:0d:e6:1e:12:01:03:ef:
                    4b:be:ad:07:0a:aa:00:00:80:b3:49:c7:94:86:b1:
                    86:7f:46:9f:2a:67:97:e2:20:69:90:13:98:c5:41:
                    2c:f8:7b:86:c6:dd:25:9a:6f:97:e6:55:ed:ee:5c:
                    bf:d1:e3:c4:cd:5d:6c:38:ca:48:04:fa:86:be:c9:
                    ef:79:3c:23:f4:c2:2c:fa:06:1e:b1:cd:4f:67:d9:
                    36:04:1b:c4:7e:3e:02:c4:32:1e:52:29:c2:26:10:
                    1d:96:03:c9:68:a7:67:e4:87:ca:f3:5e:8f:59:07:
                    ca:06:08:e2:a8:0e:87:07:8a:2a:1f:dc:eb:24:bc:
                    fe:5a:a8:86:df:09:59:dd:f3:65:99:df:4a:14:98:
                    f4:d4:6e:65:6a:2a:5b:5b:66:48:44:9a:e2:3a:3b:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E8:27:EC:15:0B:D6:08:AC:BA:0F:65:2F:09:60:38:F3:12:75:CC
            X509v3 Authority Key Identifier:
                keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e0:82:d7:ae:71:65:82:e9:43:e4:84:78:b9:70:13:47:d3:
         bb:23:74:bd:00:a5:19:62:18:3b:45:99:ec:28:3d:cf:38:f7:
         bb:b7:a0:b5:fc:d6:83:8e:e1:54:cb:fe:ae:b7:cb:da:7c:c0:
         4a:bf:c3:8b:fb:b8:f7:11:1a:b6:96:be:f7:51:fa:65:e2:00:
         c0:72:50:64:2a:fc:39:08:c6:00:51:72:d6:6b:45:4b:52:bd:
         2b:f2:b7:06:97:0a:38:6a:56:8c:a2:cd:45:b0:28:b0:6e:f4:
         5d:98:5b:8e:6a:ad:ba:5d:ea:89:46:e7:3b:3d:5f:49:68:aa:
         84:46:1f:cb:b1:86:3e:81:46:91:07:2b:12:39:5f:a5:b5:15:
         32:d4:79:24:c9:3f:11:6e:08:fe:56:79:cf:1e:f7:7b:54:69:
         82:c0:52:14:e5:a0:81:d8:73:98:33:e4:a2:f5:3f:c6:c3:29:
         5a:e8:75:31:8a:ed:ae:a8:74:83:0c:68:2b:8d:3c:74:b4:44:
         29:32:3c:b6:7b:f8:4e:6d:51:89:d4:6c:ef:77:fe:17:d7:ba:
         ec:c6:f9:71:db:f5:39:44:3c:63:92:2c:3e:26:68:d3:b8:67:
         a3:f8:a0:b7:81:39:f5:30:71:13:71:5b:ba:63:99:55:4f:93:
         4a:01:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:16 2026 by rpki-client