This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File:                     vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier:          mQfNeOfTbs/GKzlEf0BWk07QA6SV54RQQjVs7UzDTFY=
Subject key identifier:   97:9B:20:5A:6F:BF:3C:0C:50:31:6A:8F:A7:A4:04:C8:A3:40:55:6C
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer:       /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial:       019BF6BE8A2141355ECE343724AAB89F3D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number:          0BF6
Signing time:             Sun 25 Jan 2026 20:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:40 +0000
Files and hashes:         1: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (hash: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8=)
                          2: dENVCD_XZ3nvwZuxkEOco4CHe4U.roa (hash: rRLTwaIJTN8YwcNsiLSuRpjn4wvb6H8iEYEA2TwNDr8=)
                          3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: DmzItsdPV5O3LbMcDWhc5fcpVq0tdWZxVi8jqy4+LWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:8a:21:41:35:5e:ce:34:37:24:aa:b8:9f:3d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
        Validity
            Not Before: Jan 25 20:00:40 2026 GMT
            Not After : Jan 26 20:00:40 2026 GMT
        Subject: CN=979b205a6fbf3c0c50316a8fa7a404c8a340556c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:fe:29:8a:fc:55:b0:27:9f:c0:0d:45:2c:
                    b2:6c:67:34:bf:08:fb:0f:52:98:26:2d:9a:a6:d4:
                    be:e1:3f:bb:51:de:05:dd:a3:fe:79:a1:00:8b:63:
                    15:d3:07:4a:d5:ad:fc:23:bf:ec:db:14:15:6f:07:
                    2a:d7:78:36:ee:8e:cf:f1:00:3b:c9:67:d2:d3:4d:
                    26:3e:d9:b6:de:9c:d6:09:46:79:dd:41:a9:08:fc:
                    58:55:37:a4:44:00:ca:aa:3d:f4:6a:a1:a4:a6:e5:
                    58:7f:09:28:32:eb:79:f6:b5:74:1d:c3:67:9a:03:
                    dd:cc:dd:ef:e6:36:65:f8:95:52:67:f3:55:ed:1c:
                    96:e5:99:44:78:99:32:e5:85:c5:53:27:10:3c:41:
                    57:e3:30:49:cf:4d:44:53:68:b0:12:3b:bb:b6:e9:
                    7f:eb:88:d4:c5:56:17:af:3e:d6:dd:bf:f7:1e:3c:
                    3b:08:5e:5f:25:55:7c:57:92:e9:d9:5c:4d:28:b3:
                    02:8d:f7:09:20:73:4a:5b:26:53:28:d1:72:56:11:
                    56:c6:a8:7e:7d:c9:11:1d:b2:67:4e:78:2e:47:a1:
                    5e:e1:76:52:3b:62:03:47:f5:36:83:bc:4b:fe:62:
                    3c:0c:a0:89:78:fe:be:5d:81:ef:8c:7f:03:78:b0:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9B:20:5A:6F:BF:3C:0C:50:31:6A:8F:A7:A4:04:C8:A3:40:55:6C
            X509v3 Authority Key Identifier:
                keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:31:4e:24:65:b0:d4:ad:a5:70:19:6f:4c:4d:8f:63:b0:c7:
         14:9a:19:15:4b:ee:a5:30:e8:5f:57:d6:bb:ef:6d:18:3f:a0:
         79:6b:c3:11:c5:db:a9:af:ec:cd:c8:a0:3c:96:c9:ae:ef:80:
         1e:b0:db:44:0a:af:f9:ed:1f:c2:0b:f5:61:22:9c:95:f2:cb:
         ed:67:39:f2:80:da:a1:44:81:37:9a:df:bb:dc:30:fb:91:f3:
         7d:7b:cf:7b:df:8b:75:2b:31:71:b5:ec:f4:c6:b7:8d:1b:56:
         c0:5d:35:e9:c6:50:7b:01:93:ea:71:a3:49:ae:77:47:10:67:
         80:9e:6d:92:97:38:b8:87:1c:fb:b5:b7:2c:27:06:e0:dc:dc:
         6c:6b:48:2a:93:d5:23:4f:62:f2:3c:bb:3f:76:d6:70:67:91:
         93:86:b4:07:63:04:9a:39:29:20:75:e9:e2:53:ad:35:14:f8:
         b4:33:d0:de:d3:33:6a:f1:2c:42:7f:6f:c1:7c:dd:68:e7:27:
         8a:5c:1d:7a:7f:ce:26:81:b8:83:3c:85:e4:95:74:58:c4:53:
         db:95:83:cc:5b:f1:0f:ea:32:0d:e8:e4:c5:d8:15:d6:c5:a7:
         15:5d:7b:92:2f:a2:78:26:cd:6d:24:b4:4b:fc:a6:94:bb:2a:
         51:03:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:08:59 2026 by rpki-client