This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
File:                     VbKW1rU0_joyzBw6ToE1jyFsk8c.mft (raw, json)
Hash identifier:          Dao+xX2KpWYupPUZGtG+5xE63cifxiqZEDiXAyb6rEU=
Subject key identifier:   93:B7:00:83:71:6C:8A:83:4F:2F:76:93:94:3F:74:0E:6F:F7:46:89
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Certificate issuer:       /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial:       019BA2347A67A46BA2E8175285332D22C79D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
Manifest number:          17C0
Signing time:             Fri 09 Jan 2026 10:01:46 +0000
Manifest this update:     Fri 09 Jan 2026 10:01:46 +0000
Manifest next update:     Sat 10 Jan 2026 10:01:46 +0000
Files and hashes:         1: 9NrJq1PjqTf1LnPwQedEpXRnEk4.roa (hash: fr/nWxinOZldfn60cYUZlZDHivbCDizqDitVeOZXjns=)
                          2: Mkm00kmOtbyp8v2pUXV3V6vE1tE.roa (hash: GKx1bFwxEz7qdfbQuVuQsrofytJyEfD186Dd/Qd5sc8=)
                          3: VbKW1rU0_joyzBw6ToE1jyFsk8c.crl (hash: jQqnRHJEt+ItsUNfS3jqbWASMT5CMZTKfHkKmUOSpFM=)
                          4: kJBGsmLmdv3_rdcLll4R2O-kvbE.roa (hash: a47Qs0dNWHXnDI9zO5DlJ3ttKiMFrvp3WDVURet9wMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:34:7a:67:a4:6b:a2:e8:17:52:85:33:2d:22:c7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
        Validity
            Not Before: Jan  9 10:01:46 2026 GMT
            Not After : Jan 10 10:01:46 2026 GMT
        Subject: CN=93b70083716c8a834f2f7693943f740e6ff74689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:88:03:22:c3:8a:07:8a:ee:97:e1:01:20:
                    65:29:51:97:c8:fc:14:bc:4a:73:69:52:55:55:51:
                    b6:a5:08:25:41:27:07:84:79:29:2b:d2:c8:cb:8c:
                    3c:71:9b:16:81:3f:af:96:83:11:5e:e0:45:ea:51:
                    6c:f3:3d:ad:a7:9e:94:3f:34:0c:58:b4:8e:8b:71:
                    3a:12:3d:28:48:17:55:34:2f:c5:89:d6:5b:08:09:
                    66:68:2a:54:b4:0f:5a:5d:38:f9:69:66:01:6d:8b:
                    78:5d:46:c6:06:24:62:d4:d9:0e:7a:a4:3e:c8:18:
                    e0:b8:d2:86:50:6b:6c:ce:89:4a:ee:6a:c9:a3:c7:
                    e9:be:61:0c:5c:ab:11:a4:a2:a6:41:cc:b4:93:ec:
                    b6:da:0b:3c:ef:90:d5:53:cc:5c:4f:2c:c1:f6:21:
                    9c:91:2d:f3:f5:12:50:d9:2a:ec:7a:4f:4f:ca:64:
                    8b:b4:e7:99:39:77:32:2e:0c:e0:e1:f8:de:46:d0:
                    bb:55:7f:7b:d8:8a:3c:d4:07:07:90:e5:6f:ae:f6:
                    a9:55:0d:4a:e8:b9:02:7d:5e:c3:6b:ef:e5:91:74:
                    3f:e8:51:5f:a5:b5:be:a7:0c:a7:5b:2d:1f:40:7f:
                    7e:f0:13:38:b6:76:44:20:02:a7:47:50:37:8e:74:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:00:83:71:6C:8A:83:4F:2F:76:93:94:3F:74:0E:6F:F7:46:89
            X509v3 Authority Key Identifier:
                keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:61:cd:da:49:98:91:52:be:33:c3:c7:d8:c7:e1:1c:da:14:
         8b:d1:b7:5f:da:0f:68:ca:2b:6a:c1:51:39:b8:77:5e:d4:87:
         b8:12:99:cd:fb:93:b7:cb:09:43:0e:a7:99:7e:6b:e0:e5:8f:
         db:87:6a:25:24:57:0a:af:4f:4d:02:0d:13:4a:6f:23:7a:52:
         32:ef:65:8e:d3:fb:6b:0c:ba:48:aa:22:46:4c:65:01:e5:df:
         4f:74:f7:05:ec:e7:7c:dd:f0:c3:85:a4:a4:9e:8e:23:d5:66:
         79:c5:fe:51:1e:31:07:13:8d:77:c2:be:6c:01:1d:15:f8:bb:
         28:ac:ed:0b:e8:cf:c4:01:fb:b3:1f:c7:cd:29:f1:56:1c:33:
         26:6c:80:54:8b:0c:2f:f7:70:91:d1:c9:c6:88:45:19:95:95:
         76:fd:39:37:14:3a:e5:56:77:4a:59:ee:96:41:ec:1e:06:51:
         ee:96:0a:c4:78:69:93:d8:5b:da:99:1e:31:9f:e2:7d:c5:a4:
         d5:6d:23:45:9d:4e:89:2b:23:ba:81:2b:ff:3a:08:f9:6d:f4:
         62:0a:0d:09:d7:d3:37:23:e5:f1:79:e5:f6:1f:2f:85:3c:77:
         1f:55:1b:68:a2:ac:05:e1:e5:f5:12:67:99:4b:c8:e0:8c:e5:
         55:e0:9b:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuiNHpnpGui6BdShTMtIsedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjI5NmQ2YjUzNGZlM2EzMmNjMWMzYTRlODEzNThmMjE2
YzkzYzcwHhcNMjYwMTA5MTAwMTQ2WhcNMjYwMTEwMTAwMTQ2WjAzMTEwLwYDVQQD
Eyg5M2I3MDA4MzcxNmM4YTgzNGYyZjc2OTM5NDNmNzQwZTZmZjc0Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUKIAyLDigeK7pfhASBlKVGXyPwU
vEpzaVJVVVG2pQglQScHhHkpK9LIy4w8cZsWgT+vloMRXuBF6lFs8z2tp56UPzQM
WLSOi3E6Ej0oSBdVNC/FidZbCAlmaCpUtA9aXTj5aWYBbYt4XUbGBiRi1NkOeqQ+
yBjguNKGUGtszolK7mrJo8fpvmEMXKsRpKKmQcy0k+y22gs875DVU8xcTyzB9iGc
kS3z9RJQ2Srsek9PymSLtOeZOXcyLgzg4fjeRtC7VX972Io81AcHkOVvrvapVQ1K
6LkCfV7Da+/lkXQ/6FFfpbW+pwynWy0fQH9+8BM4tnZEIAKnR1A3jnQsLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO3AINxbIqDTy92k5Q/dA5v90aJMB8GA1UdIwQY
MBaAFFWylta1NP46MswcOk6BNY8hbJPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEt
ZGQ2Y2M5N2M5YmRkLzEvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEtZGQ2Y2M5N2M5YmRk
LzEvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWHN2kmY
kVK+M8PH2MfhHNoUi9G3X9oPaMorasFRObh3XtSHuBKZzfuTt8sJQw6nmX5r4OWP
24dqJSRXCq9PTQINE0pvI3pSMu9ljtP7awy6SKoiRkxlAeXfT3T3BeznfN3ww4Wk
pJ6OI9VmecX+UR4xBxONd8K+bAEdFfi7KKztC+jPxAH7sx/HzSnxVhwzJmyAVIsM
L/dwkdHJxohFGZWVdv05NxQ65VZ3SlnulkHsHgZR7pYKxHhpk9hb2pkeMZ/ifcWk
1W0jRZ1OiSsjuoEr/zoI+W30YgoNCdfTNyPl8Xnl9h8vhTx3H1UbaKKsBeHl9RJn
mUvI4IzlVeCbRw==
-----END CERTIFICATE-----
Generated at Fri Jan 9 18:08:05 2026 by rpki-client