This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File:                     VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier:          L+9nSxm3XGppmOUBQWNljVMcikm9Uo/dRGyjidmKI20=
Subject key identifier:   63:A6:AD:CF:CB:5F:78:2E:AB:2A:86:20:7F:C5:CA:CA:58:7E:F0:41
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer:       /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial:       019BFF8B9CE0FD290BA4E0052FB21AD76A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number:          17FE
Signing time:             Tue 27 Jan 2026 13:01:38 +0000
Manifest this update:     Tue 27 Jan 2026 13:01:38 +0000
Manifest next update:     Wed 28 Jan 2026 13:01:38 +0000
Files and hashes:         1: 7mUqcc1ZRAcERQzQ4MU8EdZH35w.roa (hash: xeQvwrLQZUiDoUb0ml1L918hdYLeraoGxz+49zwQRSg=)
                          2: E6FBR8FbVLIUW7WxfYp69wFcuIY.roa (hash: HezEpZLefLuIH9OWJJvBZrFd9gwz+w6esymhDsqSfJk=)
                          3: Nf1GLWHH5S4xnQq4dEe73SmQVsE.roa (hash: QPJuLoZDzY8eonJVvSRYMDnynsieOzZqr/yxLPKKOzw=)
                          4: S9YbIMFSJorIHr_re90ZoTMMK1E.roa (hash: 4Uzvxo6RhXxW8F4qaHX9okkF5Pq4l7xy0xjbdpClalg=)
                          5: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: D3pYGEhDQDMIxEnSETx97JMCZCJOcyklAnhH0ii5YEI=)
                          6: agZ_22w8nR7yzP-r4nyk_GYagPg.roa (hash: sBmwyEO+p9XOhRYaD+uacFTguzE0ei3xiuK+qpOGZ10=)
                          7: lrEowygn1dHToN0btk6rp2MTIvI.roa (hash: sTbSNMMoubd2bZ7dOugalKP6owvalS8OX2kJMEZCoIo=)
                          8: oJ73hXNTI3ql6e9efqOk-gbJ-UY.roa (hash: 7RS1/FzkO8/64GmnNWvKz94G3bPh1VWWYxYmkCi0PVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:8b:9c:e0:fd:29:0b:a4:e0:05:2f:b2:1a:d7:6a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
        Validity
            Not Before: Jan 27 13:01:38 2026 GMT
            Not After : Jan 28 13:01:38 2026 GMT
        Subject: CN=63a6adcfcb5f782eab2a86207fc5caca587ef041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:01:cb:f7:b4:3e:df:49:a4:b5:de:05:a2:
                    f3:a6:23:0f:1f:09:49:05:d0:67:de:3c:a7:4c:1f:
                    4a:26:b3:0a:33:95:d2:ef:07:b8:e1:29:fb:d3:cf:
                    1e:8d:94:8f:6e:7d:48:7f:f7:4c:79:85:62:57:1c:
                    25:b4:1e:da:0a:29:96:86:b1:aa:e2:27:7a:fd:d8:
                    99:52:84:e0:6b:f4:64:e4:69:95:9d:b5:90:ab:3e:
                    78:1c:69:48:7e:ed:bc:ee:8d:c1:7a:56:6f:17:f0:
                    ba:52:9c:e3:ae:7d:18:83:ec:3f:06:01:59:32:68:
                    40:2c:cb:83:33:62:7b:fe:98:17:0d:73:9c:a3:0e:
                    55:ea:fe:8f:4c:22:bc:ef:4c:0a:b1:f1:a2:10:41:
                    03:2a:5b:e6:41:8f:9b:72:52:d2:ee:78:a0:19:08:
                    76:47:13:35:f2:ad:e1:06:a4:32:33:21:cf:f5:9b:
                    fe:69:24:6f:5f:a6:26:99:4c:ac:48:ed:10:f3:2b:
                    4c:b8:90:65:cd:20:29:a2:53:1a:28:0f:40:8c:1e:
                    09:c5:bb:a1:57:9d:76:df:d3:73:70:bd:27:d2:6a:
                    14:75:74:24:dd:c8:91:60:4c:f7:50:f3:8d:65:d3:
                    c3:41:c9:93:f7:14:88:d2:d7:6f:dd:d2:3f:92:fc:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:AD:CF:CB:5F:78:2E:AB:2A:86:20:7F:C5:CA:CA:58:7E:F0:41
            X509v3 Authority Key Identifier:
                keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6a:f7:c9:a8:c7:c3:8b:13:f0:30:fa:de:71:99:e7:f6:1f:
         a7:b7:73:1e:43:41:a2:a6:98:c4:a2:e2:d2:95:b5:0a:0c:a4:
         00:2d:b5:42:b5:c4:d0:ae:bc:b4:eb:54:e5:d2:4a:6c:e4:f2:
         2e:1a:34:fc:17:c2:84:80:82:ea:b0:d8:a7:cf:13:e1:b0:9a:
         99:bd:24:91:e9:6a:0e:cf:f5:4b:b1:4d:09:6a:0c:40:52:fe:
         1c:8b:81:d8:29:c2:af:62:81:2a:ae:34:66:d0:0a:68:fc:15:
         59:61:dd:29:46:09:0a:0f:9d:c6:d5:5a:14:a3:4c:70:ba:de:
         80:0c:8b:0e:f3:00:b6:2d:3f:79:84:5c:a3:5c:6c:76:e7:01:
         e9:27:14:33:00:47:36:07:f3:54:0a:bb:aa:c7:de:ff:ac:73:
         f7:b5:a5:57:3f:3d:a8:8e:05:93:58:bd:13:52:db:19:50:a1:
         73:31:50:1b:a7:56:1e:01:4c:64:8c:3a:b0:c9:bf:70:4b:0c:
         b4:dd:d7:35:4a:5c:af:51:f2:b5:5e:83:56:8b:23:3b:48:8e:
         48:c9:0a:53:e4:9b:9f:3f:03:86:c5:02:27:c1:be:c0:09:4b:
         fd:6b:c6:35:bb:7d:42:ea:49:20:40:59:72:91:4b:fb:ca:73:
         6d:47:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:51:31 2026 by rpki-client