This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File:                     vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier:          4vWicPxlp7FQnssucGoiBqS8zRvQJWj8c+k78PTKwAk=
Subject key identifier:   DA:DC:2D:F4:E5:97:C3:D9:94:A9:2D:75:70:02:98:D1:A7:CA:B9:7A
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer:       /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial:       019BF83F9CC803E33C80DB90DD80BD94F1B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number:          0404
Signing time:             Mon 26 Jan 2026 03:01:17 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:17 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:17 +0000
Files and hashes:         1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
                          2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: 6rrC2Jy/Ue/ycfcl6012dlBO6qk9pt+GIF3S64oIrIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:9c:c8:03:e3:3c:80:db:90:dd:80:bd:94:f1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
        Validity
            Not Before: Jan 26 03:01:17 2026 GMT
            Not After : Jan 27 03:01:17 2026 GMT
        Subject: CN=dadc2df4e597c3d994a92d75700298d1a7cab97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:e9:f7:b8:1a:37:ba:90:bf:10:51:15:c7:
                    b9:6a:09:03:27:df:71:43:95:fa:45:a0:ad:17:04:
                    31:2b:8c:cd:f6:0b:0d:da:bb:1b:5d:07:9d:7c:bb:
                    a0:58:c5:4e:31:25:69:cf:93:1f:2f:60:29:bd:a8:
                    3f:8b:6e:d2:ba:89:39:13:b0:ae:00:fa:b3:dd:f0:
                    20:f7:e1:9d:1d:76:f7:4b:6d:da:8d:91:fe:c7:50:
                    89:b0:32:26:99:dc:46:68:f5:7a:46:97:f9:6c:7b:
                    e6:95:99:a4:7e:03:66:78:5a:ed:ff:f4:5f:65:75:
                    f7:5a:84:84:39:53:1a:8f:e4:7b:9a:60:d5:80:d6:
                    e2:cb:2e:84:75:70:d1:c4:2c:85:e4:41:03:2b:9a:
                    8d:11:f5:c9:4d:db:a7:1b:59:a2:25:45:70:fc:e3:
                    7d:d1:ee:cb:22:40:b4:03:19:06:71:3e:e0:ec:d0:
                    ac:c9:2e:38:0c:7d:0b:01:a7:6a:ac:dc:c2:5d:db:
                    d6:4d:ae:9a:3a:18:27:01:5c:df:97:d5:a3:54:d1:
                    1c:42:98:5d:f1:d7:8a:a0:91:dd:d0:28:17:4d:3e:
                    be:dd:88:71:f4:7f:83:b4:7a:1d:bc:dd:be:d2:d6:
                    b5:40:88:bb:c3:6f:b7:80:e9:be:ed:64:33:80:65:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DC:2D:F4:E5:97:C3:D9:94:A9:2D:75:70:02:98:D1:A7:CA:B9:7A
            X509v3 Authority Key Identifier:
                keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:71:60:d0:94:94:af:61:de:ec:89:69:85:b9:c7:65:af:24:
         8f:5b:13:1e:fc:5f:52:b4:c6:03:a8:fb:79:3b:90:d6:d5:82:
         c2:31:a9:28:ef:32:94:ec:f2:aa:95:51:01:a2:8a:9c:23:64:
         c5:e5:58:1b:f8:f1:5b:c8:86:bd:5c:7b:ab:78:f2:63:a0:9b:
         8d:a7:44:a9:20:d5:a9:dc:52:bf:fd:ec:ff:f3:46:f4:e6:1b:
         5c:95:d4:8a:c6:32:67:55:1c:02:5e:f8:61:16:de:ea:29:b3:
         34:82:4d:57:d0:c1:35:01:ad:06:42:37:de:ad:86:cf:21:fd:
         a3:3b:0b:85:fa:11:2b:9d:8f:7d:5e:cf:86:5a:24:46:64:5c:
         e8:46:79:ef:14:3b:78:46:b6:ec:4a:2c:b2:7f:93:f4:c2:ae:
         90:dd:1f:8d:1d:21:28:9d:7a:0c:d3:cf:a6:ae:88:64:f4:e7:
         03:78:36:63:75:de:c4:2a:70:ef:ad:e8:70:34:7b:99:ad:c6:
         e9:3c:74:22:39:97:0e:8e:86:8c:07:1c:06:87:f6:67:1f:cf:
         bc:ee:1c:6d:1d:35:37:c3:76:4d:f1:08:0c:7b:00:c4:46:99:
         c7:2c:8d:b1:45:79:24:54:0e:d2:ed:94:fa:2a:1f:4d:4a:71:
         fc:f8:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:04 2026 by rpki-client