This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File:                     vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier:          OwbZ/h0dV6HZ0NbwPnCRRfSbvsFyKKwrLjYa3K9L7Rs=
Subject key identifier:   B9:F0:E2:96:E3:73:0A:A1:5B:04:09:73:44:85:4A:D3:FA:88:C4:9A
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer:       /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial:       019BF5E39DD5004CEF3542147E5462E8D768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number:          15C9
Signing time:             Sun 25 Jan 2026 16:01:33 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:33 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:33 +0000
Files and hashes:         1: A6vGIJGT64W29On7fsToe2iuYDQ.roa (hash: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI=)
                          2: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (hash: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E=)
                          3: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (hash: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ=)
                          4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: dXxek+rsZ9qJqSiIh4x3Spl2jjw9ToWOyRciSroeR64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:9d:d5:00:4c:ef:35:42:14:7e:54:62:e8:d7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
        Validity
            Not Before: Jan 25 16:01:33 2026 GMT
            Not After : Jan 26 16:01:33 2026 GMT
        Subject: CN=b9f0e296e3730aa15b04097344854ad3fa88c49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:19:dc:69:d4:27:75:e7:8b:f1:db:3c:20:
                    e7:c4:27:10:ef:9b:d2:92:c1:80:16:b4:83:b6:13:
                    a2:f7:a2:07:7c:b1:42:88:07:7e:a2:75:f4:7d:b8:
                    b6:95:c1:2f:a8:ac:54:dc:c0:89:d8:9d:89:0d:c8:
                    61:41:d8:a8:e8:dc:80:83:ac:c9:de:d6:81:8b:52:
                    f7:ca:9f:b9:c6:50:19:54:0a:d9:d4:31:62:f8:12:
                    0e:16:f1:76:ad:82:17:2d:59:a9:1b:4f:79:69:0d:
                    8c:93:1c:2e:d4:1c:30:85:94:5a:8b:5a:af:bc:d3:
                    3f:ff:a8:8f:1b:e5:e0:06:b6:bd:0e:8e:38:45:f1:
                    ca:0d:84:07:af:3f:ce:90:3e:68:97:b1:ef:f9:ff:
                    48:04:74:5e:bb:df:e7:02:45:a3:41:60:e5:db:74:
                    2d:d8:e5:1d:42:3a:aa:2e:72:98:26:fc:a6:68:5f:
                    3d:20:45:40:c5:fe:7f:4c:b0:31:08:ef:1b:2d:b4:
                    bf:b6:f6:eb:f2:b1:e8:40:26:88:86:29:d9:5a:3b:
                    a2:e7:09:db:8f:b0:4c:e6:43:91:aa:1b:14:c7:41:
                    47:1a:4d:58:2f:f9:2a:c5:30:bc:07:75:0c:14:2e:
                    50:9a:85:f9:b4:a3:3c:40:42:a1:1c:cc:b5:94:43:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:E2:96:E3:73:0A:A1:5B:04:09:73:44:85:4A:D3:FA:88:C4:9A
            X509v3 Authority Key Identifier:
                keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2b:1d:b9:5f:8a:99:31:c0:3b:86:c8:86:6e:5b:93:9c:7a:
         90:e6:2e:db:a2:e8:62:cb:73:3c:f2:ed:e8:56:13:cb:d1:2b:
         1b:fe:e0:ba:9e:f9:42:f6:09:00:9f:9f:6c:7b:43:73:05:d2:
         6b:50:c5:70:da:92:58:f9:46:e1:45:a4:19:76:53:72:dc:1c:
         22:09:28:ac:87:ce:18:35:c0:82:71:99:94:cb:d2:32:f8:d9:
         95:96:ef:57:3c:b9:25:99:33:9c:44:26:a6:50:4d:73:55:91:
         15:0b:84:a8:90:d3:23:aa:8d:28:0c:2f:25:c3:51:e4:cd:7e:
         bc:0a:33:3b:58:fe:b4:66:63:e2:92:c1:29:7a:62:4a:68:d1:
         57:2a:d3:5b:39:53:5a:9f:60:a5:37:88:8e:02:2e:13:cb:05:
         03:52:b3:a0:f5:b3:bc:9f:1f:dd:dd:1d:4b:25:2c:f4:61:91:
         55:39:bf:dc:8e:61:44:6f:74:f8:8f:cd:80:36:48:f6:be:b9:
         63:07:9b:6f:4c:96:f6:67:ae:10:89:d7:97:39:c2:99:d8:0e:
         bd:62:73:08:5d:dc:6c:70:93:d8:07:2d:1c:84:b1:51:31:3c:
         70:16:79:ca:fc:f6:aa:48:e9:eb:bd:ae:1f:c9:c2:63:8d:bb:
         2d:84:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:57 2026 by rpki-client