This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          qSMfnIhomlpqHQlcOgumNfQgfvGWpB1i3/L9s3VLLQ4=
Subject key identifier:   75:9C:13:B8:3D:11:1E:92:8A:EF:AE:05:1F:E6:15:E2:AE:3D:ED:72
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       019BF3BDF522E65D6BC0FC98E887C0810A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          156B
Signing time:             Sun 25 Jan 2026 06:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:11 +0000
Files and hashes:         1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=)
                          2: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=)
                          3: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=)
                          4: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=)
                          5: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=)
                          6: CKaHb2UFUB81R70K_cX-CMGCB4c.roa (hash: SL1gTzVmd4toTboFdORx+c2tTjUEiufXea6TCoAA21E=)
                          7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=)
                          8: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=)
                          9: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=)
                          10: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=)
                          11: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=)
                          12: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (hash: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA=)
                          13: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=)
                          14: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=)
                          15: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=)
                          16: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=)
                          17: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (hash: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g=)
                          18: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=)
                          19: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=)
                          20: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: D0+dPOCNQa+RCNvae1DpEwR4VYuuHr/WpLNF+eoAimw=)
                          21: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:f5:22:e6:5d:6b:c0:fc:98:e8:87:c0:81:0a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Jan 25 06:01:11 2026 GMT
            Not After : Jan 26 06:01:11 2026 GMT
        Subject: CN=759c13b83d111e928aefae051fe615e2ae3ded72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:14:58:20:a9:e2:8f:9f:f8:31:05:22:bf:
                    d5:62:27:d5:4e:7e:ee:2b:33:21:41:32:b9:09:23:
                    51:de:88:93:16:b9:0e:2e:db:4e:0a:1d:57:a5:6d:
                    2b:15:ed:89:54:ea:9f:24:f1:3d:25:47:90:8f:da:
                    ed:f0:4d:d8:a1:7f:f2:e2:3d:f3:e4:ad:19:ab:65:
                    fc:57:2a:f0:7f:cc:37:5f:7a:af:96:6c:e8:c0:33:
                    13:4c:79:49:f5:b9:ef:c6:47:fd:76:87:5e:d1:68:
                    c0:ff:d9:e7:2c:03:64:36:85:e2:a6:07:67:74:cd:
                    4a:7d:71:ca:dc:41:b6:5a:50:7c:b9:ae:0c:80:a3:
                    09:e5:0b:f3:ec:a6:4a:5a:9d:a0:8d:58:d6:2a:84:
                    3b:78:dc:a4:fe:32:65:55:86:0b:c8:d6:28:ba:33:
                    21:cf:22:76:4d:bf:d2:7b:98:d3:9d:4a:e6:32:1c:
                    f6:96:5e:ba:ff:5b:b3:ee:96:d3:6f:67:ec:32:79:
                    35:49:bb:0b:1e:c2:d6:44:43:45:1f:29:16:4b:f7:
                    58:f2:ea:3c:71:b5:30:c1:90:b8:f6:c3:5d:71:1f:
                    a4:63:ac:ef:eb:43:bc:48:f1:83:2b:0b:55:69:7c:
                    23:a9:b3:15:73:6f:80:5d:73:9c:36:32:68:dd:cb:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9C:13:B8:3D:11:1E:92:8A:EF:AE:05:1F:E6:15:E2:AE:3D:ED:72
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:37:92:bd:dc:91:c2:f5:18:35:ed:4e:b5:2c:98:2a:f5:2b:
         54:0a:b2:b5:31:d1:fa:af:d7:0c:9f:08:c3:1a:40:88:cb:22:
         58:4f:84:4e:88:23:1e:50:13:5e:f5:cb:75:80:d5:02:12:2e:
         6d:39:db:48:b9:fc:72:13:74:d3:d2:f0:72:07:37:cb:2e:25:
         f9:d6:e9:1e:9f:20:75:30:5c:05:e3:41:11:2f:95:34:5b:ad:
         43:44:bf:46:87:36:2d:f2:de:7f:d0:7b:99:88:db:34:e3:35:
         2a:6a:76:57:d4:84:dd:cd:30:a0:74:8d:1e:2a:16:96:aa:d9:
         b7:8b:9b:ea:f6:c0:0c:76:9a:c8:30:14:72:65:79:03:8e:ff:
         7b:8f:50:83:50:18:2e:c2:70:da:f5:7e:d5:b9:ba:15:a5:65:
         73:1b:61:2d:88:f1:92:6e:37:be:9e:0b:f3:ac:94:16:1e:f1:
         da:b8:62:7a:1e:30:be:39:fc:20:04:e7:91:f2:c1:13:a6:c8:
         d8:90:c0:ae:86:c7:e0:eb:22:3b:3d:25:ae:c2:56:dd:fe:21:
         ae:4b:f0:8e:fa:40:9f:32:81:b6:d0:60:5e:79:24:7c:a6:7c:
         61:c9:72:03:54:fb:6b:79:f7:79:6e:49:3f:7c:9e:b4:9c:4a:
         53:1b:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:44 2026 by rpki-client