This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          TARuv1IwsfFkUuNQpexNVi0DMz9pm8aWNQSISPtMeMg=
Subject key identifier:   CA:7D:29:78:1F:E1:F4:9D:E2:31:7A:68:D0:FA:BD:3F:7F:A0:AA:FE
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       019BF8AD34A62E35FC9AFC04979FD599EC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          1499
Signing time:             Mon 26 Jan 2026 05:00:59 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:59 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:59 +0000
Files and hashes:         1: 1M_KfK7WN2a9S2sM4HPxRdgNk3Q.roa (hash: FXLWu7cTao5t5N2dNabz3TuA4IoXpfS81L/ChF9Q08w=)
                          2: 3v4aI3hIcklmgeZ_UAwLSRXNdMQ.roa (hash: IpPkFkZsNYzLAK3kRG6z1JeeccdjVJAcpoXlT9FO7rs=)
                          3: 6hfKommEGXOxbZsoMmyZp1Jipf0.roa (hash: PBG49W+jrBQkGXpn4QJjssvWvrDP7tqPFzk/gI0/fXg=)
                          4: 6iU5q2O8knwO6rsCxrpEDYfQfwc.roa (hash: wn70AHhkmwh/HEbVbZLkEYQ5m0ssl6kZ6p4p/pcbYdw=)
                          5: 9ClNIRUhBNtx6NUYh8zm6GwII1c.roa (hash: vGZ8wnFhqRVJP+elmOStrLyKU7bRjBC5vLXKAyxYAyo=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: LqVIYeUliR57ZWeML+0AmDvVm9j9270tVTXnwyY1aA4=)
                          7: CwEJEkChVeT5ByriMeWvHMii5Kc.roa (hash: +buHsgpQk2jvmt0OGhHOlWMDX6OUOHB42I6FSxQelZE=)
                          8: DLvFNukbRAhZM4TuFhov4WWOGb0.roa (hash: Sq2gts+S55hxx/TOW9y2dVTRNKFXvpr4cfM5oauwoaM=)
                          9: EU0dIexXpepLqV4coUUAIRVb-H8.roa (hash: Sb2wLX/RqNGdGCSytUaEJdgIu7Q+7vz9Pa8hlXYY0rU=)
                          10: FSSW1ZODYaGOgTHhq7srADJ7wNo.roa (hash: t1sAD3HTmL1FNe10X/d6I8aLemzTkwpNiXZMluJaeak=)
                          11: Fq-R29bbT_OFMbzC4S4L4IdB-is.roa (hash: JzQ34FqB0/yZtRfeREt9DodHo2xR3cGWACcIkZal6yg=)
                          12: LMCAcXdS2XUrnwUK8y3aA_YgYVI.roa (hash: Zx7X9nBZcYpyZkk9a1fb6zgF5sti3hLdBb/GhQbu+WI=)
                          13: POkwjuuBGCe0F21ORjR2-VQPpzM.roa (hash: 2Yn0ZCvtpiHPj7sihF4ez4hggi+qgq8ycEgz8zN0BIM=)
                          14: WVYa2teNXynmvJvnFVohphSasGE.roa (hash: orfB14/U2twh+Xy8e+efxXCsqq9c3OWe/VkDs9EtPWg=)
                          15: ZJn7G6eupzsYI6Qb_3PZRyUP64A.roa (hash: MBZe37MzhPFgcFvelUunWWfavB0OARuzaKp7z8aRi3s=)
                          16: Zema6N-_yb1spowlt5JHLTMroU4.roa (hash: qF9Cqwb/phFXGyfXmecnj5M4wNF9UM4/U7GSyXzWvos=)
                          17: ala-3w7jXBx1Y6f2e_qq-HBChTo.roa (hash: JIf9VJc6GvAkZ5p/ya8p2yQh9PHmYhCztgviL6iUJrc=)
                          18: dSEucPba5jbG_hBap1JYIaV4Psk.roa (hash: RBIyIZiDbpY1D9V0ivY3QmCifvd4xUi/eYRwLwz+HUI=)
                          19: djDUS_Dp1clYmZIjyKII50PHWfk.roa (hash: vJJCn0Gst4uVO2l5ZPOKkOm7N8sHDzQxxWFRYaz0dr8=)
                          20: eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa (hash: g0rKhAIGDEgpNj647haSdnpBK13OSalrt6qPIIz9V48=)
                          21: hBwQvgPhGJzR_22ttNwtHhdx7UE.roa (hash: BA8aCpTJ5opcE6AfKmkjJWSoOHA/DSBCKSoiBPNDf6k=)
                          22: jp70RKj-l4e-FsAEnfnaN0KnsKo.roa (hash: Wc9n68tUKd4lrFnJAtiaeP7RW1dgjzh0zCTtcCNTJto=)
                          23: oBQjnG6Zj6o_8VxMtUsGatV5hV4.roa (hash: 7dA7xujM9AdU+gFa8obBWyqzT2p9RQ/v2ZO8GDKs3tU=)
                          24: wfQmPdI-vmy_WQj32p1pdNv8LjM.roa (hash: Wlbgs7E1UKGfQEo0Wy61nxhp0A6dAzQWLbqDaTK1Nbc=)
                          25: wqMSf4TrRzX1v1lLyVp0rCqMWLY.roa (hash: 1E+Xv8wtnswf3OgqernoluNz5hyvaYNmHhkW4xlZGIc=)
                          26: z0A9SiYDfgi894bbsnwqjIIKm_E.roa (hash: 0kWVTAgMN8/IObLAgrvtPloL9CuNOeQsdQJfTEF/3/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:34:a6:2e:35:fc:9a:fc:04:97:9f:d5:99:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Jan 26 05:00:59 2026 GMT
            Not After : Jan 27 05:00:59 2026 GMT
        Subject: CN=ca7d29781fe1f49de2317a68d0fabd3f7fa0aafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:3a:5b:8f:2b:87:16:cc:23:5c:83:32:47:
                    93:d3:d7:76:23:b2:58:b0:5e:23:45:73:14:59:2d:
                    96:ce:5c:97:c0:b7:3c:8d:20:ff:5a:7e:c8:cd:60:
                    22:49:8c:eb:85:c4:81:da:c6:c8:23:56:31:b9:e3:
                    73:d1:e1:68:cb:56:1e:96:c8:7a:cf:17:40:d0:68:
                    0d:0e:a0:2a:4f:da:a7:64:38:d8:62:ff:e1:f8:71:
                    15:66:ee:df:37:af:c5:4a:ec:25:be:0b:c2:ce:df:
                    73:53:4f:e1:8a:7f:e1:07:0c:62:5f:95:8a:80:01:
                    2c:aa:90:d6:fd:3a:a9:e7:89:eb:7b:d5:c7:18:16:
                    60:5f:48:98:27:2c:ae:b2:48:2e:b1:5e:93:8b:de:
                    27:da:96:b2:89:32:47:16:77:35:2c:37:28:91:18:
                    9d:39:41:8b:b4:bb:5f:a4:e6:cc:e1:1d:cc:95:22:
                    02:66:85:11:8a:b1:08:79:a2:ec:d6:66:c3:c2:7f:
                    73:7e:ae:91:93:9b:9e:80:31:a1:84:45:cb:ab:d9:
                    da:97:41:df:96:28:7c:a8:d2:22:a8:2d:03:24:4a:
                    de:21:d1:8e:3e:65:aa:39:4d:db:51:b8:63:1b:09:
                    a8:17:8c:7a:bf:c0:37:01:2c:49:ca:2a:4c:4b:86:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:29:78:1F:E1:F4:9D:E2:31:7A:68:D0:FA:BD:3F:7F:A0:AA:FE
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:86:0c:fa:0c:45:93:7f:8d:6a:55:b3:1e:b5:b9:21:be:
         db:db:a2:e2:a1:a5:e5:64:1c:4e:28:a7:12:c7:b8:5f:90:2d:
         ee:73:8f:d7:0f:d8:de:f7:d4:ab:74:05:c5:fe:ed:b0:9e:df:
         ed:a8:2a:21:0e:39:4a:33:69:a4:0d:67:75:0f:68:82:ab:18:
         b9:4b:39:5e:7c:5a:a1:56:0e:b0:6c:bb:cb:37:61:97:7a:c0:
         12:67:27:e3:76:a9:34:c6:45:37:f3:c7:c5:6d:66:6a:c5:e3:
         08:cb:1b:d2:b0:4b:cf:c9:51:e8:b6:78:7f:7c:37:c5:d6:00:
         cd:96:ab:93:ab:9e:35:74:e7:10:e1:61:77:d7:d3:11:36:32:
         60:57:26:ef:df:1b:63:61:20:9c:fa:8b:83:ab:08:a3:d1:60:
         18:76:d1:5d:c7:a6:83:1c:17:d9:3a:99:26:5f:f0:23:5a:c5:
         f5:d5:45:73:5e:02:ea:80:e4:30:48:6c:0e:98:a2:fe:76:48:
         f2:4d:2c:5e:60:5d:fa:5f:98:59:77:02:f7:12:0f:a8:bc:57:
         ac:84:99:3e:41:7a:3f:44:f2:ac:f3:89:2d:5e:2b:57:76:1d:
         98:46:6d:49:63:3d:eb:a9:09:4a:b8:9c:d5:87:ab:5e:9b:a8:
         80:82:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:49:00 2026 by rpki-client