This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
File:                     VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json)
Hash identifier:          UhgnthAZ83vSma/ytwsee85FUNeP6eYKa3vf+LKoh48=
Subject key identifier:   AD:7B:11:D3:93:6A:B0:C9:FC:4D:B9:E6:51:B7:7C:E0:C7:DD:24:1C
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Certificate issuer:       /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial:       019BF53F010C9B4330D4C148628A78334B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
Manifest number:          1432
Signing time:             Sun 25 Jan 2026 13:01:45 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:45 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:45 +0000
Files and hashes:         1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=)
                          2: 35XNJH4DSb19i8o6WUk8AizWXlw.roa (hash: bNnlRUj215HLo7MgAukw3lU1c5wmBEx5iCiaR7HqQk8=)
                          3: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=)
                          4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=)
                          5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=)
                          6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: u18TVnWQUdeRA3GBNUOqkevsn/SP7GatAPwYkgC8IaE=)
                          7: W9SQbbft_Ki8s56MIbDhOe_7c3g.roa (hash: eeYBhi006bZdizyLLMhXoXvVRBAU1f0G/iCMoGWg62g=)
                          8: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=)
                          9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=)
                          10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=)
                          11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3f:01:0c:9b:43:30:d4:c1:48:62:8a:78:33:4b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
        Validity
            Not Before: Jan 25 13:01:45 2026 GMT
            Not After : Jan 26 13:01:45 2026 GMT
        Subject: CN=ad7b11d3936ab0c9fc4db9e651b77ce0c7dd241c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:95:0e:40:ad:48:f6:8d:7a:79:41:fb:2a:
                    99:70:f2:23:7f:c3:6e:41:2d:2c:69:7b:27:5a:30:
                    d5:a0:a9:fa:e9:e1:cc:ff:90:e9:e5:bc:8a:d1:41:
                    5d:77:59:50:df:16:8b:b5:69:21:2c:70:14:58:f5:
                    80:c7:c2:7a:67:e2:f9:27:fe:86:71:20:db:37:b1:
                    76:71:b1:65:0f:d3:23:aa:bb:33:ee:a5:2e:fc:a8:
                    c4:2a:70:8d:0e:01:fe:92:53:d3:f2:81:05:09:cc:
                    1b:b5:78:e6:a8:41:56:f8:71:dc:ae:1a:b4:10:6a:
                    6f:3f:c9:df:bf:b8:80:a3:3f:d5:19:09:02:a6:df:
                    b5:02:f6:27:76:c7:2c:34:bd:0f:55:e9:07:21:b4:
                    46:48:bf:91:55:85:14:f7:24:69:05:8a:3c:06:40:
                    f2:0f:19:40:71:3c:ee:ae:c8:6e:36:17:1c:ea:36:
                    d2:bd:70:39:92:8f:83:13:59:2c:42:98:a1:70:61:
                    f5:4a:c6:72:b1:d8:03:13:29:f2:e8:4c:10:fb:62:
                    80:27:05:7e:d6:f9:d5:e3:ff:f4:25:47:95:74:cd:
                    f1:4c:49:17:f4:eb:f5:a6:c9:70:8f:81:e5:a1:4e:
                    03:93:8f:19:6d:59:90:9c:49:c3:75:12:c1:eb:49:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7B:11:D3:93:6A:B0:C9:FC:4D:B9:E6:51:B7:7C:E0:C7:DD:24:1C
            X509v3 Authority Key Identifier:
                keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:eb:fd:ac:4e:e8:88:14:14:62:3f:3d:14:1d:73:48:0f:
         fc:3f:49:ee:73:7b:77:7b:23:02:16:00:e9:51:5d:a5:fd:04:
         d8:c9:45:e2:32:90:30:a8:e5:45:7e:47:b7:32:de:44:cb:9f:
         22:0b:a0:d0:75:18:16:c8:7b:b7:b8:ae:33:42:c9:49:97:c3:
         ee:85:58:fb:ea:0a:c1:4b:5a:51:62:b3:fb:2f:ab:37:f6:0f:
         7d:6b:e1:e3:a9:63:40:55:df:a0:c2:9f:d5:f1:96:1a:57:e3:
         3d:c3:15:bc:86:51:fb:44:67:b4:f8:2d:42:fb:f0:04:29:60:
         6f:0b:10:4f:4d:20:9b:cc:20:45:36:d2:4a:b1:61:5b:91:20:
         b5:2e:e2:3c:46:46:14:33:0e:92:9e:dc:93:13:5e:a8:97:08:
         3c:9b:86:af:e4:61:39:3e:20:fa:21:f2:9c:38:67:83:94:26:
         04:da:4c:2c:9b:bc:c3:37:11:03:dd:40:e9:4f:1a:e1:f0:b3:
         05:a7:ca:8b:21:55:35:e5:b0:f7:ae:5f:51:a2:12:44:2c:6c:
         d9:4b:b6:d4:53:8d:68:17:96:33:6d:85:c9:bd:99:5b:97:a8:
         98:5b:bf:ee:f1:bc:95:d8:3b:53:fe:ca:50:34:db:f6:6f:87:
         e0:40:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:47 2026 by rpki-client