This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File:                     v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier:          hD8n6QmYxChRYpxshqvAgTeDm9RTSvFBSECQP/ULKXU=
Subject key identifier:   41:1B:5B:DA:1B:51:E4:FD:42:F1:D8:C2:9B:4E:6C:19:1F:00:23:5E
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer:       /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial:       019BF875D843FEF91CD73D7C211057E5E5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number:          17EF
Signing time:             Mon 26 Jan 2026 04:00:31 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:31 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:31 +0000
Files and hashes:         1: P2z60TT5kqB-d0NQ2XA4fLTFBz0.roa (hash: H2tzNdLvq80tMnAzPWbwLl8MIdAmcLNud7Ng3jnGJBE=)
                          2: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (hash: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA=)
                          3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: vVB88/xZp7VXYhycwKNT/USiqMrboFLOmnWhDj9UWCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:75:d8:43:fe:f9:1c:d7:3d:7c:21:10:57:e5:e5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
        Validity
            Not Before: Jan 26 04:00:31 2026 GMT
            Not After : Jan 27 04:00:31 2026 GMT
        Subject: CN=411b5bda1b51e4fd42f1d8c29b4e6c191f00235e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:61:19:7a:6d:8c:37:84:3f:5b:90:4b:d5:
                    45:73:31:6d:74:40:12:35:f9:54:99:c8:46:75:74:
                    c0:4e:47:b4:32:50:f5:30:5a:44:06:c8:00:b3:e1:
                    2a:33:f9:92:f9:27:7a:67:52:dc:bc:1d:9a:78:2e:
                    2b:9f:92:e3:fc:57:78:ef:92:4d:4f:e8:7c:90:6c:
                    6d:23:fd:62:cb:c8:06:7f:ae:bc:fe:8e:0f:b9:f3:
                    12:af:34:7b:61:36:32:d2:f6:d0:f6:d0:fd:72:d8:
                    dc:fc:53:a3:c5:52:11:a4:42:f7:03:c2:fb:1e:21:
                    3e:89:ea:06:40:68:de:bb:e3:ee:44:11:d8:f0:9b:
                    90:15:d7:eb:dd:2a:b4:56:80:0c:25:77:27:8d:b0:
                    57:46:5b:b7:31:a9:d9:04:11:ca:66:dc:3c:44:c3:
                    6b:9a:fa:dd:d4:1d:6b:30:05:84:28:a0:0d:b2:43:
                    b2:58:be:b9:6c:81:16:ca:1e:e9:d9:bb:3b:cf:13:
                    f9:c7:51:32:1a:a2:d1:9b:9b:98:a9:fb:88:65:b2:
                    88:31:8c:56:db:4a:6b:12:c1:12:86:bc:1c:f5:28:
                    a0:da:59:53:96:ab:3b:45:15:66:d6:c5:b9:b8:07:
                    eb:d0:d5:fe:a9:1d:0f:30:c2:13:29:df:18:8d:25:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:5B:DA:1B:51:E4:FD:42:F1:D8:C2:9B:4E:6C:19:1F:00:23:5E
            X509v3 Authority Key Identifier:
                keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:b3:79:53:4d:6c:b4:2e:4d:1b:47:5e:26:aa:1a:d5:a4:
         6b:af:a2:db:80:d5:a6:82:e7:82:7d:74:a1:06:88:b0:d6:35:
         8c:83:3f:79:26:a2:1c:52:a0:e9:d0:46:3a:cc:5d:6f:db:2b:
         1a:fc:a0:0f:08:4e:9f:57:3d:9f:d4:fe:e2:88:1a:15:b8:e1:
         19:cd:22:53:1e:3a:0d:5a:95:74:d0:a4:53:37:c5:a5:c7:ba:
         10:e3:dd:5f:83:b8:0b:19:0a:a4:d3:2a:8d:c9:92:16:55:0b:
         4c:5e:61:81:19:14:e7:0c:4e:fb:d3:41:81:19:2e:08:de:66:
         88:30:f7:eb:df:a3:3e:2f:a9:67:2f:97:04:87:a6:15:b6:22:
         9e:1d:86:30:14:2a:70:c4:45:3b:cd:fc:86:9e:92:bf:87:39:
         c5:07:dc:05:db:51:47:9d:9d:93:ed:72:f8:e7:15:ce:1f:91:
         d5:a2:4c:52:3b:c8:49:86:e4:b3:59:7e:a2:1c:72:e5:b0:aa:
         3b:98:7c:1d:ea:e4:e3:6a:d0:cd:e6:c5:76:ac:8f:7e:ee:02:
         2a:ef:4c:92:7f:e5:ab:fb:4c:c5:6f:b1:2d:88:f7:f9:28:8b:
         b9:d1:da:cd:07:de:db:58:b6:2c:af:2f:14:7e:90:05:9d:2e:
         21:c1:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:36 2026 by rpki-client