This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          Jcgj6cV/9kUy91t9t49BwDY6fdyf3ZRQsOM1fW1/0Vk=
Subject key identifier:   00:85:65:74:4C:E1:76:58:6F:7F:25:19:1F:4E:93:69:2F:B9:7F:C7
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       019BDE7FB0FF363B357C1C7B62AB6F57FD09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          1810
Signing time:             Wed 21 Jan 2026 03:01:08 +0000
Manifest this update:     Wed 21 Jan 2026 03:01:08 +0000
Manifest next update:     Thu 22 Jan 2026 03:01:08 +0000
Files and hashes:         1: 1es75LXX8EZ01C80XE67R3PQMtU.roa (hash: UJ4bcXqfnb31k16ESQyvCulDeQy/+beKenH/t1j9EJM=)
                          2: 49CPBIX4EaMxdJyd3xYYFltrGoU.roa (hash: Ex0IMnX8TLJnPKPjJx+ZpKeCCZJl+8I3fLOLd7VY8do=)
                          3: 4Ha_i2fzynlg4lj4N3UFrsXHdcM.roa (hash: lLpMGC2U8Hm7Bc/fFKcXEXNGa72FYEBuCz/vfAkOk0U=)
                          4: 6qu84XFuPii8dmN5M2pPKpvNN-c.roa (hash: vR7dTXZXBgGIxPaEQ+mopFcKCVQSvAaelss5UpF8Gd0=)
                          5: B4c6N2MizK8adC1jI5nCnuasVyQ.roa (hash: vkr5AztZBkpOoQXyn9yDEdd3WF22aoRXCoS3gCShBNw=)
                          6: LIZxOBTNmVM3vK9tCq5zRPUgpTo.roa (hash: 3Qw4C14Da/T7HDkcqKq+3FVfcQywVkmcZXawejrDHl0=)
                          7: MBFdqFLJcxVtOw-JJT6-6DPU4C4.roa (hash: 0y4l4Mi7xbMuhzKukzW/37uq5/WSDRhRc3TFpkmhncA=)
                          8: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: UI3zhPzOIdRpm1++c5YKUNaQv0Vm2iQR3oUkB7ieIDE=)
                          9: b_sx65YpI1QLBEZRuGQGmmnaTnw.roa (hash: 3Il+MWS8tFj2nno2HoqXDI14YSxua6h0CGOf+Z3Kedo=)
                          10: hRhUcbu7KZRSvnkz4CO8BJLWuH4.roa (hash: uMFCDSPSzYAtqFKyN2Vv8Q5iqVvmZBowV1Ty5ZpBTEM=)
                          11: n9uTPhO6cyPpEsvXZmxf53LLc6s.roa (hash: utrFwmDJ3+vrF1blihW69IE07AwIQ9/EzS4iV75TiRU=)
                          12: pxjxLqbdPKMXnfYH2mej8-qFwLQ.roa (hash: wYSQv1VfP8JlL0OjNiuifDqK5UY4N2rWiXsEx4vZrtk=)
                          13: qLoILvDOqzV9K9GBxZphZks1tnU.roa (hash: /QV9XEO/ZKJk65wl5vLGWrkhUEz4TcA1M/MvWA4ViTU=)
                          14: uu4RDU_XEe_o-xgd8iKxunLsRRk.roa (hash: WSVYyW0VsPbEh7XSoefAa4skPLabJDbbiTqZspuhAAA=)
                          15: wdgVJPyUsZ9-HGk_FoAzT19gu6w.roa (hash: 2mneISDicPClVA1+3cQM33ETuCO6n5ZeA2u5SBMbUwU=)
                          16: yTlDO6dWszXiBm3hduGVp38lBa4.roa (hash: SegOwCCa/6cPlpQ15U35o2VjRPgrt2I4STP15j5SvSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 03:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:7f:b0:ff:36:3b:35:7c:1c:7b:62:ab:6f:57:fd:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan 21 03:01:08 2026 GMT
            Not After : Jan 22 03:01:08 2026 GMT
        Subject: CN=008565744ce176586f7f25191f4e93692fb97fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:33:eb:ad:1b:c3:db:8e:c2:fd:d6:e1:42:
                    90:e1:2e:01:a3:1a:d4:56:7e:d0:da:1f:70:65:7c:
                    5c:26:a2:21:40:75:d9:38:a0:96:da:48:6c:dd:8f:
                    54:87:1e:f0:7e:be:7c:a7:d6:e6:50:22:bd:ab:75:
                    0b:35:88:f8:9a:2d:77:53:c5:a0:cf:79:95:10:d8:
                    09:ab:3c:7e:35:cb:40:6e:32:2f:d3:c7:27:5c:4b:
                    6c:6e:ff:e6:21:63:9f:7c:23:17:dc:22:4a:03:c0:
                    f4:b7:ae:4a:79:18:17:c9:1f:e8:a2:24:60:5d:d4:
                    99:cb:de:53:6e:0a:07:3e:fc:53:64:fd:12:05:ee:
                    03:18:4d:d4:71:7e:19:6e:83:31:c6:6a:33:c9:3f:
                    14:e9:cc:51:43:26:af:30:4c:a1:c8:a1:c5:b8:2b:
                    58:a6:ba:4d:c0:83:2c:95:f2:53:2a:28:d2:aa:d7:
                    79:e8:7e:cd:2d:b1:2a:aa:96:9d:17:d2:b7:1f:c5:
                    b4:5f:8d:89:ad:3b:c2:8c:9a:ef:32:63:44:8a:bf:
                    e6:cc:d2:65:95:bb:ea:49:22:3f:45:df:e6:27:2c:
                    b9:3c:13:e0:65:dd:fc:4a:1a:3b:73:ff:27:bf:85:
                    5c:dc:30:95:f9:00:7f:63:0d:a6:7e:07:1b:ae:7f:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:85:65:74:4C:E1:76:58:6F:7F:25:19:1F:4E:93:69:2F:B9:7F:C7
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:f5:34:a8:b6:ac:ca:b3:7c:95:c1:2f:34:f0:9f:9c:ab:
         17:4f:b5:6b:f7:1e:44:43:7c:cc:31:b7:e1:07:54:eb:d1:00:
         3b:ed:21:fd:b0:3d:91:eb:de:39:a7:06:20:54:88:f0:48:6c:
         86:c7:69:06:be:eb:47:17:70:ae:56:09:40:d2:9d:95:be:14:
         c0:1b:f3:18:dc:f5:69:7f:98:84:18:2a:e3:fa:a3:a6:75:93:
         41:91:13:c2:2e:84:d0:4c:13:e9:13:c1:39:d1:1e:c4:c7:93:
         8e:1a:1e:c1:8e:8f:0c:3d:e2:d4:3b:7a:a9:94:62:d5:fe:07:
         da:bb:af:77:36:cb:81:47:25:91:f1:2c:d2:5b:4d:45:5d:9a:
         da:33:f5:05:54:2e:61:de:d7:f3:49:8b:bf:bd:18:71:cf:ca:
         cc:1a:99:43:36:86:25:92:1a:de:4a:6d:cd:b7:fb:9b:48:6c:
         82:d6:12:b5:7f:28:d3:e8:27:38:bf:65:3c:84:73:dc:9e:9a:
         72:4f:f7:c1:8b:a8:04:d6:36:3b:e5:5d:91:71:05:ff:03:ca:
         39:d6:b6:c0:7c:94:57:32:1a:f4:38:02:37:a6:a7:19:ce:58:
         e2:5e:23:1a:fc:35:24:3f:3a:b9:96:c8:25:7d:cb:8c:62:6b:
         c6:1f:e8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvef7D/Njs1fBx7YqtvV/0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjYwMTIxMDMwMTA4WhcNMjYwMTIyMDMwMTA4WjAzMTEwLwYDVQQD
EygwMDg1NjU3NDRjZTE3NjU4NmY3ZjI1MTkxZjRlOTM2OTJmYjk3ZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp0z660bw9uOwv3W4UKQ4S4BoxrU
Vn7Q2h9wZXxcJqIhQHXZOKCW2khs3Y9Uhx7wfr58p9bmUCK9q3ULNYj4mi13U8Wg
z3mVENgJqzx+NctAbjIv08cnXEtsbv/mIWOffCMX3CJKA8D0t65KeRgXyR/ooiRg
XdSZy95TbgoHPvxTZP0SBe4DGE3UcX4ZboMxxmozyT8U6cxRQyavMEyhyKHFuCtY
prpNwIMslfJTKijSqtd56H7NLbEqqpadF9K3H8W0X42JrTvCjJrvMmNEir/mzNJl
lbvqSSI/Rd/mJyy5PBPgZd38Sho7c/8nv4Vc3DCV+QB/Yw2mfgcbrn93cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACFZXRM4XZYb38lGR9Ok2kvuX/HMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5H1NKi2
rMqzfJXBLzTwn5yrF0+1a/ceREN8zDG34QdU69EAO+0h/bA9keveOacGIFSI8Ehs
hsdpBr7rRxdwrlYJQNKdlb4UwBvzGNz1aX+YhBgq4/qjpnWTQZETwi6E0EwT6RPB
OdEexMeTjhoewY6PDD3i1Dt6qZRi1f4H2ruvdzbLgUclkfEs0ltNRV2a2jP1BVQu
Yd7X80mLv70Ycc/KzBqZQzaGJZIa3kptzbf7m0hsgtYStX8o0+gnOL9lPIRz3J6a
ck/3wYuoBNY2O+VdkXEF/wPKOda2wHyUVzIa9DgCN6anGc5Y4l4jGvw1JD86uZbI
JX3LjGJrxh/o3w==
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:36:11 2026 by rpki-client