This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          f6/H+ksfBNiHzeopDEEdBuf6SMBmwix2X3EOu3mPq2I=
Subject key identifier:   5D:FC:EB:D6:45:A0:A9:8F:7B:AB:98:44:DC:AE:5E:44:E3:F1:58:2F
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       019BD76AE8A8883A3DECCECEC36A52EBEFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          03D0
Signing time:             Mon 19 Jan 2026 18:01:06 +0000
Manifest this update:     Mon 19 Jan 2026 18:01:06 +0000
Manifest next update:     Tue 20 Jan 2026 18:01:06 +0000
Files and hashes:         1: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
                          2: 3ltc2E-XV23FLAhFLiFXgGH2y1M.roa (hash: Ke9aQJV5yF1N+FQzT+5CimXwYEH8WFL1M6bre7/tYY4=)
                          3: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
                          4: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
                          5: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
                          6: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=)
                          7: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
                          8: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
                          9: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
                          10: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
                          11: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
                          12: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
                          13: Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa (hash: idjJ3BOFW0sv/bdtwbSz3j+KpA5MQW5Fct3dXY7lh4s=)
                          14: R6YdT3A1dPoz_GlM1sv_fuPZtYY.roa (hash: +0b5MOqwjLPDlEzzisb4dVnFj5iEfZJ4Ui/+kwf7BEk=)
                          15: VFq7oOwuoK-4Ezbw8Byjy6HKneY.roa (hash: /kEtmYfU+u/9qUgUdtsAwlr6x9IMzXSTi0t0BiXXPhA=)
                          16: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: 1dOF+WQ+7mQOHSkAxJ3PWQ/9kzWIiixKRHc8bNg8idM=)
                          17: VmNcPIFLFmt8lASZRcTotORQggs.roa (hash: 4s0uFoDgWGmc6B8fcskIBEcAU4dr7LjBKY1u+A6rmEQ=)
                          18: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (hash: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA=)
                          19: ZsJPTZXXB045lk8pCnsp2CLYOZM.roa (hash: GPfwJy4uFitVDvcySR6+0SS8jibEAKPckREFyT+sS5c=)
                          20: a-uv6NcQQFUj4AlHMAn_keIfHpY.roa (hash: DGUml10FputozIpRl4oW5dyB0wWScyZsA35A31zOw64=)
                          21: bEbGHAVBvLNhZMOl0igfKIEM0No.roa (hash: EIV52KkKGsMHvVBu+0ylavrX5X03lUn7tKLOYPYuNh8=)
                          22: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
                          23: nCxmMvqeJn__lxGCNUJCZkLMOTc.roa (hash: Ai3iY7UqLgg+IqHPxW+NvQb5rxDBknt3AUCWv9ikXpU=)
                          24: oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa (hash: 1OWtYAgWFUz9U3ZRyQBV7HsQLa1e5YTunuUhvpeW3zA=)
                          25: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=)
                          26: vBgWOLwGFhFl4PcsLO1_iz1Pd28.roa (hash: HMFB9WBALYD9h4RLHvYHJTUV6TnrOwPF6X+4N/rsrBo=)
                          27: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:6a:e8:a8:88:3a:3d:ec:ce:ce:c3:6a:52:eb:ef:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Jan 19 18:01:06 2026 GMT
            Not After : Jan 20 18:01:06 2026 GMT
        Subject: CN=5dfcebd645a0a98f7bab9844dcae5e44e3f1582f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:bf:4f:ba:a9:bc:a0:2f:0f:10:4e:64:4b:
                    12:7f:5a:b4:4a:8c:18:04:b7:94:0b:f7:14:e4:ce:
                    b3:79:e9:0d:24:02:47:18:f0:bf:11:44:b3:07:c1:
                    e8:26:b2:0f:0f:3d:aa:4a:52:5f:ff:bf:d8:b5:50:
                    5e:9c:13:c4:4f:fe:f9:43:7f:d1:a1:58:12:a1:0b:
                    dc:ea:93:dc:00:7d:6e:48:91:3c:10:97:cc:c7:82:
                    42:68:f5:45:68:de:74:80:39:66:0c:39:51:eb:05:
                    80:db:23:ce:e5:af:d6:ae:b0:51:1c:da:b9:c2:cc:
                    45:b5:70:e7:9e:ed:42:2b:d3:b4:43:8a:92:51:15:
                    4d:6f:f4:91:48:e4:7f:30:14:27:5d:78:1c:c2:83:
                    79:f4:0b:1c:83:c7:7b:16:ae:47:eb:63:78:02:f1:
                    22:cb:56:5e:8a:9d:f5:f9:f3:ef:16:fc:fc:94:35:
                    8b:19:3f:4d:7b:72:b9:c0:a0:26:99:51:34:d6:66:
                    34:8b:4b:5e:d0:14:2e:6a:79:c8:cc:24:d7:17:4e:
                    39:99:30:c6:73:4a:b2:ba:71:e8:1f:04:01:80:ae:
                    11:ca:d3:6a:ac:4e:63:f8:31:2d:d9:2b:aa:d4:36:
                    7a:1b:d9:92:c2:07:be:c9:5e:cd:32:7e:de:25:f7:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:EB:D6:45:A0:A9:8F:7B:AB:98:44:DC:AE:5E:44:E3:F1:58:2F
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:81:dc:59:56:a2:4d:26:92:02:a0:23:ab:da:d2:08:6a:e8:
         a6:fd:c0:8d:bf:22:4b:5f:89:7e:d8:e6:f8:00:cb:be:4c:b0:
         92:ad:d1:18:1a:c9:6c:5a:55:24:0b:1c:03:11:d6:67:e9:04:
         51:84:3c:55:dd:79:ec:38:4a:45:96:32:c7:7d:c5:97:2e:65:
         1a:98:a9:64:4d:e5:75:4c:8b:d0:90:e7:ce:4a:be:ba:a4:3b:
         59:d5:a8:9b:12:75:41:7c:70:10:cf:e9:d5:fc:2d:6c:18:31:
         06:ce:0c:ac:61:71:4f:be:0f:24:c7:c4:56:d8:f7:03:da:aa:
         59:ad:cb:50:29:86:15:07:ea:73:62:2e:ba:3b:9f:03:d7:e5:
         57:f8:2b:a6:6d:c8:2b:5e:f3:86:2e:ec:4d:32:cb:cb:77:9c:
         ee:28:e3:61:d5:9d:05:29:08:b6:ec:c3:14:72:0d:6d:5b:d3:
         a2:41:1c:51:3d:36:5f:7f:15:44:23:ec:5d:38:46:d8:3a:8e:
         e5:48:80:0b:60:f5:bc:b8:4d:47:8b:14:c7:89:1e:5d:47:69:
         84:1e:3d:10:73:d8:c8:dc:65:77:d7:f2:f8:b6:a2:21:c4:e5:
         46:4d:fb:21:63:ad:59:c7:c3:dc:ae:1c:01:c0:47:17:49:bb:
         b9:a9:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:24:41 2026 by rpki-client