This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File:                     VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier:          B7Oz5T6+sDwsTTeYwldu4svfqVefUkqD+ouZyMspdAM=
Subject key identifier:   6A:A5:F9:C2:46:05:D6:3F:27:B6:87:E2:95:8D:3D:84:1B:6E:37:50
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer:       /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial:       019BF651940C41FEF898F23403353C0E5858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number:          1417
Signing time:             Sun 25 Jan 2026 18:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:39 +0000
Files and hashes:         1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
                          2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: vfBxJrc7bUNPd7Qd2WGWllE1lXyhpIIM6N+E/Jb+3/w=)
                          3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:94:0c:41:fe:f8:98:f2:34:03:35:3c:0e:58:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
        Validity
            Not Before: Jan 25 18:01:39 2026 GMT
            Not After : Jan 26 18:01:39 2026 GMT
        Subject: CN=6aa5f9c24605d63f27b687e2958d3d841b6e3750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:11:09:0b:42:1e:4d:35:c6:32:dc:54:07:
                    4e:17:6e:9d:9b:0b:f8:43:5a:2b:f5:a0:fe:fb:3f:
                    18:39:2f:48:77:dc:fd:0c:28:d6:26:0b:b0:d2:f1:
                    04:ff:ea:d1:dc:e3:fc:66:36:26:ae:41:3a:b9:8a:
                    dd:2b:83:00:50:25:13:c4:51:c1:19:6d:a9:e7:e0:
                    e4:ea:9c:bf:03:ba:38:a7:f9:55:e6:84:7b:ab:a6:
                    ef:d2:5e:fb:3e:76:74:1c:ae:0d:f7:3c:da:22:21:
                    cf:41:5c:cf:38:75:f6:65:27:5f:53:dd:9b:e5:0c:
                    15:cf:a4:8d:c1:19:0b:8e:6e:a9:7d:d8:af:92:0e:
                    b1:13:45:d6:84:54:5d:80:db:5d:07:6c:b2:13:37:
                    11:93:36:2f:71:1e:7b:c8:a3:89:a8:1a:78:c8:2a:
                    8f:57:66:2f:08:b7:a7:7c:1f:58:1c:57:ce:47:7a:
                    bd:83:e8:c0:5a:52:c8:be:75:ef:47:31:10:44:c3:
                    b3:bf:e7:34:06:84:96:e5:19:00:70:b8:f4:f5:06:
                    01:6c:16:3a:32:3f:a9:68:65:34:fb:58:6f:a7:71:
                    a2:2a:0a:e7:19:ca:45:d1:a1:c5:d5:9b:76:76:d9:
                    6e:74:f2:72:4d:43:2f:f8:27:72:43:91:d9:5d:2b:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A5:F9:C2:46:05:D6:3F:27:B6:87:E2:95:8D:3D:84:1B:6E:37:50
            X509v3 Authority Key Identifier:
                keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:fb:a9:3b:5f:aa:ca:24:ea:b5:a7:8c:80:50:07:05:8f:
         e6:ba:cd:85:25:d5:3b:6e:67:51:8f:4c:72:ff:e2:8a:71:f6:
         8a:46:71:af:0b:50:54:2d:72:b1:3b:af:3c:d8:7c:8e:5e:7f:
         53:0c:42:ce:33:43:86:46:5f:2e:aa:39:fc:d3:20:e8:f3:5f:
         a8:7d:86:6d:3c:30:e2:16:a4:82:a1:58:e3:7d:78:db:47:3d:
         8a:6d:ca:a1:de:70:c8:f8:ea:14:4e:c0:2a:74:93:d4:dd:2d:
         c4:8f:f4:f1:fa:05:d2:14:b6:d8:23:9c:80:d6:a7:af:3d:96:
         56:45:fd:93:d1:98:5c:77:bb:a6:bc:e9:39:82:7c:35:19:a9:
         39:6e:99:0b:ab:85:c9:85:49:6b:4e:98:1d:6d:bc:3c:59:5e:
         1c:ec:81:d6:6a:8a:6b:3b:f0:7e:1b:8a:b0:b8:16:4e:a5:54:
         4b:3d:00:b0:fc:64:37:4a:5f:d6:05:6a:49:75:22:59:18:ef:
         f5:57:96:8c:36:95:2d:ee:fa:98:12:02:00:0d:0a:a5:8b:19:
         f1:07:bd:cc:57:4b:a0:37:2a:d2:c8:57:d7:9f:4f:5d:45:d4:
         91:ed:4d:c9:e8:11:c4:53:cd:0a:2f:63:92:6a:35:4f:ac:96:
         1c:f1:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:44:48 2026 by rpki-client