This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File:                     VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier:          WWUUweL6r/X6/oUY34BYJH8xYrLkiybGU6rlIyhYW/I=
Subject key identifier:   AE:97:36:BF:CE:C6:FF:27:4A:03:F0:A3:78:3D:7D:17:CA:FA:4C:6E
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer:       /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial:       019BF53F0411EDF7A76329347FE3F7A4DF37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number:          0CE4
Signing time:             Sun 25 Jan 2026 13:01:46 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:46 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:46 +0000
Files and hashes:         1: CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa (hash: kcWbbVv8ASdYvi8EuyOv3tMh0xXxdFL5jH6YworqpiU=)
                          2: OCwZn3M2fA5Hq8kNmQdHXm6169A.roa (hash: hYYgtO03EJt7YSnRsoX8WPt38DBVQ4OQ4v1UuaWwBlg=)
                          3: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: Ud20eIWsxsjL8lGDpOkPhiEvRNtQuZgW7BrVrXjxuAc=)
                          4: qK3CTioRHIZv8tRs19l4YH3NK7Q.roa (hash: mYr/W0vsn5NqGep9nH2w5E2ZZ+X10OK8JIo9QGjsoSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3f:04:11:ed:f7:a7:63:29:34:7f:e3:f7:a4:df:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
        Validity
            Not Before: Jan 25 13:01:46 2026 GMT
            Not After : Jan 26 13:01:46 2026 GMT
        Subject: CN=ae9736bfcec6ff274a03f0a3783d7d17cafa4c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:f7:35:75:51:85:7d:8d:80:89:d3:9b:66:
                    13:db:81:3c:a2:36:00:fd:ed:73:8e:f4:74:33:23:
                    6b:2b:76:a5:3a:28:08:9a:87:0a:19:40:e3:37:b8:
                    55:cc:9c:00:25:8a:f5:45:72:4a:31:ff:1d:16:13:
                    69:db:d0:92:94:bf:80:7d:88:ec:af:8c:0b:1c:74:
                    36:a0:1f:df:1c:da:64:ac:84:b3:6f:b8:8c:bd:50:
                    3b:da:c3:10:17:40:d9:23:3d:05:7b:70:10:44:cd:
                    62:43:74:d4:f7:58:52:8f:e8:53:63:56:4e:8f:fe:
                    1d:2b:5b:06:d9:52:eb:72:0f:dc:7a:d3:eb:8c:86:
                    39:d0:e1:bd:f1:7a:4d:6c:64:7b:28:23:4c:df:0a:
                    dd:eb:c0:2b:df:f2:50:64:6a:31:a4:37:50:7b:80:
                    5a:77:c8:5e:a4:ac:3b:95:05:eb:c1:09:62:96:b1:
                    7e:0b:94:b9:6f:8a:54:13:61:bb:00:32:dd:1d:7b:
                    7b:83:cf:72:1b:e9:8e:30:f9:16:91:1d:66:d8:d6:
                    21:c9:11:d1:13:e7:db:45:83:54:98:f6:ad:ff:00:
                    7b:eb:e4:1b:a1:59:1d:fa:c7:b6:e9:e9:08:9a:9d:
                    74:fa:c4:a5:9b:2e:33:a9:39:ea:9f:b7:18:93:c3:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:97:36:BF:CE:C6:FF:27:4A:03:F0:A3:78:3D:7D:17:CA:FA:4C:6E
            X509v3 Authority Key Identifier:
                keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:74:e2:bb:b8:64:9f:50:17:94:da:04:28:53:a6:c9:bb:91:
         7e:ce:d6:4c:48:b7:ef:7f:5d:fd:75:e6:67:c8:7f:01:48:5a:
         ec:6e:af:5c:1c:5b:73:78:21:3c:56:7b:b8:a4:2a:b3:f0:cd:
         5f:34:a6:3f:72:40:ed:4b:b0:c4:d1:cd:2f:33:a0:8c:30:fb:
         6b:fa:72:f6:f6:a1:f5:54:02:3f:4e:30:c9:57:43:f3:43:38:
         4a:52:79:0d:02:5d:23:48:63:84:03:af:97:5d:49:65:ae:17:
         62:35:ed:99:ab:2c:10:78:f3:11:95:16:93:23:64:41:1b:d2:
         c0:d8:33:e4:ed:4f:88:7d:d7:fd:fb:ee:67:24:bf:01:95:27:
         90:dc:ca:55:c2:c8:d6:29:5c:30:86:7c:8e:d8:58:3b:df:3e:
         86:60:b6:16:84:e3:9b:de:77:06:7c:7e:26:af:4e:1c:c7:7e:
         2c:6a:1a:2f:a2:6d:61:ef:4e:a5:53:74:89:3a:25:d5:f9:6d:
         24:74:d2:32:1b:83:2c:77:df:53:6d:97:a6:22:46:b1:49:ed:
         c8:ac:c9:8c:02:c7:9f:c3:63:0c:cf:cb:e9:30:f0:21:ca:26:
         78:01:a4:8e:ad:8b:0e:ae:e2:77:52:af:cd:db:62:69:fd:99:
         d8:a1:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:22:50 2026 by rpki-client