This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          j+9993y2yQA+5x2edPhzP6eiPx5+O94i8AVk9U1LZLk=
Subject key identifier:   E4:B3:55:BD:FB:87:02:53:62:66:50:2B:FC:3D:BD:B2:E4:FD:14:FF
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       019BF386D62D985DB996584D9E4126800031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          0B0F
Signing time:             Sun 25 Jan 2026 05:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:58 +0000
Files and hashes:         1: 5DHFpW_Fur_ACF5udcuDaa5UBy0.roa (hash: RV1ouuVKQ7kL1Q4DBabTWl8NiN/KVLg46lUBk/TR09Q=)
                          2: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
                          3: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: K13OVWUUbbD7TOeDilWdcwYKuhm1FrtciIPsQ6xKX/I=)
                          4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:d6:2d:98:5d:b9:96:58:4d:9e:41:26:80:00:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: Jan 25 05:00:58 2026 GMT
            Not After : Jan 26 05:00:58 2026 GMT
        Subject: CN=e4b355bdfb8702536266502bfc3dbdb2e4fd14ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:b0:89:d3:c2:7a:c7:8d:52:1e:83:09:78:
                    e7:63:a2:29:e6:42:79:e1:dd:36:90:fa:f3:9c:f0:
                    b8:0f:fc:52:fb:71:21:29:af:27:16:76:35:9b:00:
                    e4:53:c7:b0:a7:7c:79:10:52:3c:a1:51:c6:79:af:
                    98:20:fc:3d:19:c7:de:d4:a0:5f:7e:d3:07:2a:fa:
                    cd:58:c8:22:5a:a7:80:87:c8:cc:a8:53:1b:14:28:
                    5a:b2:67:9f:37:7d:fc:a7:62:36:04:d0:16:7b:27:
                    6f:72:87:63:78:f7:22:d3:3f:e6:e9:ce:aa:68:c8:
                    ea:d3:45:f6:98:88:c9:fa:f9:2c:b3:e1:f7:5a:41:
                    b2:54:14:38:f4:a4:a4:de:dd:d2:a5:5c:ed:c7:15:
                    92:11:c1:c1:7e:6f:fc:0a:1f:11:98:85:3a:9c:a3:
                    d7:11:55:ac:8f:52:7a:76:17:06:9e:72:d5:77:2c:
                    ea:26:26:14:d0:17:6c:95:f1:42:67:fb:5f:c7:bd:
                    7e:c9:27:28:e6:a6:0a:be:6f:57:ff:ac:7d:3e:24:
                    ce:66:25:40:cd:96:a7:cc:96:59:3c:84:33:52:15:
                    23:0c:3c:b9:52:01:1e:3e:9f:b7:ef:eb:f7:31:8a:
                    da:a6:62:a4:43:e9:58:d1:c0:cc:bc:89:64:d3:94:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B3:55:BD:FB:87:02:53:62:66:50:2B:FC:3D:BD:B2:E4:FD:14:FF
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:cf:76:f9:2f:35:ef:c9:78:3f:4b:41:40:01:02:4f:8a:ca:
         fd:f4:26:70:ad:bf:51:2c:7f:0d:11:8a:91:6d:8d:4b:dd:c6:
         d8:fe:14:7c:72:74:3c:8f:e1:b1:20:4b:c6:03:57:f4:1c:45:
         90:d8:77:f0:8c:a6:56:0f:35:58:34:48:49:8d:b4:87:62:03:
         63:8b:ce:d2:46:cd:ea:24:f1:36:f5:59:69:a8:0f:68:37:00:
         17:c8:2f:74:9f:49:4d:46:b2:b1:04:d6:b0:de:e0:34:6a:04:
         a2:50:4b:52:e7:ae:31:c7:2f:56:89:c8:ef:37:8a:63:fe:f4:
         04:8c:42:15:2d:56:87:35:8a:fc:d2:08:4c:c6:1e:66:00:25:
         4b:3a:c1:29:43:a2:3e:ac:aa:ef:02:7c:a0:08:77:da:d0:0a:
         92:91:42:b9:92:a7:e9:29:10:5f:b7:19:ac:df:82:15:0d:53:
         5d:10:9b:97:42:19:dc:3d:3d:0e:2e:ac:02:61:5d:96:42:4a:
         4e:ae:2c:80:ee:5a:d4:f2:54:21:7d:32:04:9e:73:92:89:ae:
         66:a0:82:6b:78:39:fb:7f:59:55:f1:aa:c7:a6:9b:d4:cf:d4:
         c9:4f:14:20:d6:62:be:7c:4a:8a:97:cc:8d:ac:4e:51:14:63:
         32:9c:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:47 2026 by rpki-client