This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File:                     veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier:          t5F+Qi4q9PvQKT4AEor1ZK+zHZfqRRGI1lMEhSGmSUI=
Subject key identifier:   3A:AF:0A:3B:6F:DE:FF:C9:14:54:CF:67:D3:72:66:4E:AD:45:CB:13
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer:       /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial:       019BF42B8FC02AFE976D60DEC16667C88087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number:          0ECE
Signing time:             Sun 25 Jan 2026 08:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:54 +0000
Files and hashes:         1: fNmRYBB_y5qrTpD_HG4Mj6gKJGg.roa (hash: GCMtnktG1EHO/VdELDulMItSCpc0TfpSbN+GlUgxuiE=)
                          2: h7Uzdn3QCG9HXrxBJJQfKOf_wrU.roa (hash: B5SpfQD49xaKavcSBPmQWnJvbXttVFrT+Gp3dIpS18Y=)
                          3: i__p0JsHuiqPylXpC5Eh8HJk-q0.roa (hash: tD7G29bUtBn0T0NGAjmoXjsJogAe47kZEPeNJWkADNw=)
                          4: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: 3yjzYz3Obi7z4/Ys3l6S0/2NaKF0MRf+6Y+C9yuyjKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:8f:c0:2a:fe:97:6d:60:de:c1:66:67:c8:80:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
        Validity
            Not Before: Jan 25 08:00:54 2026 GMT
            Not After : Jan 26 08:00:54 2026 GMT
        Subject: CN=3aaf0a3b6fdeffc91454cf67d372664ead45cb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:54:45:a3:dd:46:06:f9:b9:e3:b7:45:7e:
                    79:90:23:b0:38:8f:c4:37:c3:d4:6d:7b:28:85:84:
                    99:a5:c3:eb:62:02:f9:8d:81:40:95:86:7e:0a:3a:
                    22:7b:0d:67:8c:77:ec:35:14:1c:5c:5b:5f:da:39:
                    b5:76:df:c9:90:66:24:74:98:61:30:c9:72:03:25:
                    57:77:8d:f1:ef:af:41:7e:a0:df:58:39:f7:4e:59:
                    80:a0:a2:55:f2:da:46:03:8f:3d:4c:46:b2:7e:ba:
                    6f:8b:d1:1b:8d:44:57:05:d0:63:a8:93:7c:01:a7:
                    af:bc:af:fc:3a:2a:5c:9c:67:05:3b:63:53:e8:ec:
                    e0:5e:33:26:40:50:f4:0b:82:57:c0:ca:51:42:d9:
                    7c:e0:fa:eb:bf:d9:38:bd:1c:ce:87:6c:8c:eb:c0:
                    3f:e1:bc:3d:b1:4f:ef:0e:2e:8b:79:23:1b:2b:74:
                    96:fb:c2:01:a4:bf:7f:6d:66:62:da:ab:dc:6f:1b:
                    58:b1:a6:db:0f:32:10:ca:d3:14:6d:fb:b2:d2:6b:
                    90:c6:77:4d:bd:3c:06:b0:f7:00:0b:41:9c:1c:f2:
                    cc:60:be:c7:2a:3e:f9:3c:b9:60:c8:b7:65:c2:ad:
                    65:02:5f:b1:d0:f8:00:79:d5:26:08:cd:21:21:9c:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:0A:3B:6F:DE:FF:C9:14:54:CF:67:D3:72:66:4E:AD:45:CB:13
            X509v3 Authority Key Identifier:
                keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:32:3f:92:f8:c5:46:10:76:f1:22:45:f2:27:eb:0a:5f:4c:
         0e:56:ed:d6:c2:e6:1d:f8:93:6b:ef:b0:eb:50:92:b3:48:4e:
         ef:a0:80:69:a3:9e:dd:c2:98:e6:f4:93:d6:53:74:7c:c2:60:
         c1:f1:ab:87:2f:8a:52:67:df:e6:18:39:1b:18:91:23:6f:70:
         bf:d7:3e:4f:69:76:72:19:61:c7:b3:83:cd:fd:b0:41:f4:3e:
         c6:bb:bc:f6:7b:5e:f7:23:2b:6b:56:77:b8:7d:bd:01:0e:30:
         85:c9:2c:2d:ca:fb:36:9b:6f:c6:70:14:c4:e2:b8:5b:a0:1f:
         f2:c4:70:9b:31:6c:d7:81:c3:e2:43:3f:15:2c:90:09:11:38:
         29:2a:19:f9:b5:a0:8e:59:87:79:f9:da:c4:a7:79:ce:74:b6:
         5d:81:10:8d:a9:8e:fc:38:f0:36:6e:4a:de:51:d6:0a:08:4c:
         74:0a:64:2f:d1:43:8b:87:9d:61:3e:4f:33:97:19:ac:3d:61:
         8f:ae:05:93:e8:c1:e8:c1:b7:ce:ad:07:1f:ff:6b:6f:57:52:
         a1:40:88:d9:f7:4f:29:2a:51:d8:34:af:83:bf:e6:48:34:b3:
         36:8b:8f:fe:e7:bb:d6:33:4f:5e:e2:c6:7a:80:b6:6a:8a:77:
         a8:3a:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:07 2026 by rpki-client