This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File:                     Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier:          aow24POwtvRMBMecejylfCQ8hJxVs11Y9u+SJIG5EaQ=
Subject key identifier:   D2:BF:58:0A:7A:75:19:BE:A0:F9:F2:82:EF:94:D2:04:67:A6:5A:5B
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer:       /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial:       019BD846EEED87B10251A01F5199D6A458B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number:          13D1
Signing time:             Mon 19 Jan 2026 22:01:25 +0000
Manifest this update:     Mon 19 Jan 2026 22:01:25 +0000
Manifest next update:     Tue 20 Jan 2026 22:01:25 +0000
Files and hashes:         1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: v4thQiFrWTyTbE2hnfjxu+IfVevVEGjPrj/lNLStKlc=)
                          2: gid3PHY7_WHPVtbluwSuNieeZ-Q.roa (hash: 4gqwUBOsuCwNSypnwWO7WCLX7NlTT/vUufoeKcrMUME=)
                          3: ziiqrtMgnlnu-hPLFOMONS1-3pU.roa (hash: 8ZnAKWsJ3RNRSyRqd1uds5FxjmnKS3VN0RT4iyIYFXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:46:ee:ed:87:b1:02:51:a0:1f:51:99:d6:a4:58:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
        Validity
            Not Before: Jan 19 22:01:25 2026 GMT
            Not After : Jan 20 22:01:25 2026 GMT
        Subject: CN=d2bf580a7a7519bea0f9f282ef94d20467a65a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:ab:50:6e:bd:44:5c:9c:13:f6:ca:0f:9b:
                    6d:7f:5d:62:4b:85:ca:19:44:ff:82:7e:42:d2:5e:
                    b5:71:7c:9a:77:85:eb:7d:0f:37:53:01:72:e0:e2:
                    18:17:5e:0b:05:f5:8b:ab:30:3c:c5:fa:bf:4c:4d:
                    e1:5a:0a:81:47:46:99:ab:4b:55:c7:96:ad:a7:da:
                    e5:95:6e:2f:fd:c3:45:ae:3f:30:b2:80:38:cc:ee:
                    10:57:9c:5d:95:1d:f6:a3:6a:20:1d:ed:72:08:13:
                    cc:b1:69:59:ec:f6:e3:8f:68:15:26:75:5b:d1:e0:
                    23:d5:35:98:5e:e0:b6:38:f4:da:18:ca:c2:07:66:
                    bf:9e:3b:ed:19:52:e3:97:47:44:45:5b:cd:43:63:
                    72:10:dd:bb:5f:89:fb:f9:0b:8d:f2:97:19:a8:86:
                    1f:0e:0d:55:72:f4:d5:a6:4e:46:13:4e:4d:11:ee:
                    b5:e4:94:9f:02:be:df:35:83:8f:86:51:0f:a2:c7:
                    58:af:7f:3d:6a:e3:45:7e:77:e1:ac:07:39:82:8d:
                    0c:45:af:5b:8d:58:7b:e1:04:35:c4:24:e3:27:d4:
                    a3:e7:fd:85:bd:fe:bb:7a:34:cd:e2:ed:6d:01:60:
                    b6:d5:f0:ec:e4:b3:eb:c3:21:4a:8b:6e:37:d5:1c:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BF:58:0A:7A:75:19:BE:A0:F9:F2:82:EF:94:D2:04:67:A6:5A:5B
            X509v3 Authority Key Identifier:
                keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0c:3d:fe:7e:1a:d3:86:e9:9c:3b:e6:6a:c8:33:9f:36:09:
         d7:0e:96:0a:c2:73:54:8e:2d:6f:82:b4:58:47:2c:6b:15:9f:
         b5:7a:8b:13:2f:9b:34:d4:5e:ab:02:6d:ba:88:a7:40:f4:20:
         cd:cd:37:e1:f5:8d:f3:9a:e9:2e:d0:ec:2a:71:0c:0c:8c:b8:
         24:c5:3d:6e:7d:5b:43:3a:aa:85:6e:4c:8a:23:af:a1:71:83:
         26:48:dd:ba:2a:f7:6b:60:5c:c8:25:a3:66:cd:43:87:89:13:
         fd:9b:54:c1:d3:5e:29:0f:c7:92:b4:30:ef:2a:26:f0:eb:b8:
         65:70:ab:a9:3d:c1:56:a9:42:51:fe:a8:25:07:56:b8:29:3a:
         05:82:40:3b:13:45:d8:3c:b4:91:81:c2:50:cb:58:d4:49:9a:
         b9:1c:04:52:c2:39:4c:72:95:7e:a9:a0:40:cf:b3:af:a0:41:
         35:dd:d5:9d:92:3e:5f:2e:65:b3:31:84:30:bd:70:1d:75:c1:
         45:cf:68:f6:92:dc:26:5c:cd:06:0a:e9:5d:78:0c:03:6a:af:
         18:af:b1:96:15:62:c8:90:3b:23:a3:8c:11:c9:ce:b8:6c:16:
         c1:2f:a9:68:93:9a:97:b4:ad:5f:a1:8c:fc:20:d1:86:97:31:
         c0:97:a9:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvYRu7th7ECUaAfUZnWpFi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YTcyY2ZmNDFiZGI3YzdlMDE4NTVkMzkwNzZkYWY3MjE3
NDJjNzAwHhcNMjYwMTE5MjIwMTI1WhcNMjYwMTIwMjIwMTI1WjAzMTEwLwYDVQQD
EyhkMmJmNTgwYTdhNzUxOWJlYTBmOWYyODJlZjk0ZDIwNDY3YTY1YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31irUG69RFycE/bKD5ttf11iS4XK
GUT/gn5C0l61cXyad4XrfQ83UwFy4OIYF14LBfWLqzA8xfq/TE3hWgqBR0aZq0tV
x5atp9rllW4v/cNFrj8wsoA4zO4QV5xdlR32o2ogHe1yCBPMsWlZ7Pbjj2gVJnVb
0eAj1TWYXuC2OPTaGMrCB2a/njvtGVLjl0dERVvNQ2NyEN27X4n7+QuN8pcZqIYf
Dg1VcvTVpk5GE05NEe615JSfAr7fNYOPhlEPosdYr389auNFfnfhrAc5go0MRa9b
jVh74QQ1xCTjJ9Sj5/2Fvf67ejTN4u1tAWC21fDs5LPrwyFKi2431Rw4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK/WAp6dRm+oPnygu+U0gRnplpbMB8GA1UdIwQY
MBaAFFWnLP9BvbfH4BhV05B22vchdCxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDct
MzM4OTg2MTc2YjFmLzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy80ZjkxOGItMjhkOS00MTliLTg2NDctMzM4OTg2MTc2YjFm
LzEvVmFjc18wRzl0OGZnR0ZYVGtIYmE5eUYwTEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsww9/n4a
04bpnDvmasgznzYJ1w6WCsJzVI4tb4K0WEcsaxWftXqLEy+bNNReqwJtuoinQPQg
zc034fWN85rpLtDsKnEMDIy4JMU9bn1bQzqqhW5MiiOvoXGDJkjduir3a2BcyCWj
Zs1Dh4kT/ZtUwdNeKQ/HkrQw7yom8Ou4ZXCrqT3BVqlCUf6oJQdWuCk6BYJAOxNF
2Dy0kYHCUMtY1EmauRwEUsI5THKVfqmgQM+zr6BBNd3VnZI+Xy5lszGEML1wHXXB
Rc9o9pLcJlzNBgrpXXgMA2qvGK+xlhViyJA7I6OMEcnOuGwWwS+paJOal7StX6GM
/CDRhpcxwJepNA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 03:01:51 2026 by rpki-client