This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File:                     VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier:          k6sNQlVTvoT6icH8mippnxtaNiWC1b+ECzSZ57KFGAA=
Subject key identifier:   18:E5:6F:75:B2:0D:CF:5F:2C:E8:78:0B:44:71:6D:A2:CE:ED:0F:60
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer:       /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial:       019BFB09B62CD0E74F92029F243C9FAF5040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number:          0972
Signing time:             Mon 26 Jan 2026 16:01:16 +0000
Manifest this update:     Mon 26 Jan 2026 16:01:16 +0000
Manifest next update:     Tue 27 Jan 2026 16:01:16 +0000
Files and hashes:         1: SZwng8c8STc3WrdaRWzq-6TbXLg.roa (hash: 5kW6U6T1/vZEmpDdes9PfAiCAiyWcN3dkaJYH4AuORE=)
                          2: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: cfy2YD+5+K5fCF3n4vBgYzi+nmMnQB8emoStUCTNVzQ=)
                          3: Wf0i36PV-VmyKUK20H0rdHHPRas.roa (hash: 7LRImySHs+dAxi+a5eFHvvhxZ2AT2UvZ4Ch0CMlh2Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:09:b6:2c:d0:e7:4f:92:02:9f:24:3c:9f:af:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
        Validity
            Not Before: Jan 26 16:01:16 2026 GMT
            Not After : Jan 27 16:01:16 2026 GMT
        Subject: CN=18e56f75b20dcf5f2ce8780b44716da2ceed0f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:4e:47:e0:77:ef:43:f4:1f:a1:18:6a:29:
                    1b:a4:e8:63:7e:11:1b:36:e2:2e:98:6a:e1:bb:e5:
                    ec:9e:23:ed:58:78:32:f2:79:7c:0e:19:8a:aa:c1:
                    df:f3:19:b0:2e:e4:d9:63:2b:51:0f:38:44:60:1a:
                    b8:ed:dd:4d:ec:48:6a:0f:a5:7f:ec:0e:fd:a2:6f:
                    d5:f2:f6:89:65:14:b9:09:dd:f7:86:b3:5f:ee:2d:
                    8f:2f:66:9e:0f:7f:2d:3a:1a:b4:2a:fc:20:8e:42:
                    95:94:1d:b6:7f:f9:15:85:91:f2:52:90:66:63:b9:
                    4b:52:c2:ec:61:76:ab:dd:8f:e9:40:83:94:49:9e:
                    2c:a2:a9:e6:e5:b8:83:51:b2:50:9f:95:18:57:a2:
                    16:e2:b9:30:5e:16:79:ac:46:6d:cd:4f:51:32:16:
                    46:69:8b:39:5a:e2:d9:d5:77:8b:5a:b7:43:ed:ae:
                    1c:3e:f6:46:9c:7b:f5:4c:ff:19:07:c2:49:86:30:
                    4e:81:9c:ed:46:14:68:67:51:90:e6:06:84:b7:f7:
                    bf:42:05:c9:71:a3:33:ee:3b:f9:c4:1f:f5:61:ea:
                    99:64:3f:1a:e6:62:63:c0:39:28:8b:b9:0c:46:18:
                    53:b8:85:72:3c:02:0d:58:1d:6a:5e:9c:79:aa:13:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:6F:75:B2:0D:CF:5F:2C:E8:78:0B:44:71:6D:A2:CE:ED:0F:60
            X509v3 Authority Key Identifier:
                keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:cd:1a:10:6b:24:73:11:35:97:dd:0d:ba:a0:76:a6:f0:9f:
         64:1d:f9:d6:5e:27:f2:11:16:d5:55:5e:b0:e6:e0:b0:14:43:
         fe:4f:cb:0f:c4:ac:4d:14:b1:88:a5:56:58:58:2b:90:72:11:
         cb:6f:98:79:19:3a:e1:58:ab:76:4c:e0:c1:27:f8:fc:80:4d:
         6e:5f:9f:0f:5a:c1:03:bf:44:89:49:e4:18:5e:7b:32:ef:6b:
         b4:45:97:5f:9b:69:ca:17:f5:67:3c:78:c7:44:a7:1b:e0:a8:
         ae:33:98:d0:76:82:b6:81:45:e4:85:d8:0d:c4:71:d5:9d:53:
         a2:1b:e6:05:e7:7f:63:d2:df:dc:df:92:3e:53:87:9b:b8:44:
         17:cf:cc:ec:cb:86:24:f3:b7:05:02:19:dd:78:c6:d2:b9:a7:
         3d:ef:f0:e1:1a:94:4f:6c:2f:1b:ac:1d:cf:33:b2:43:57:7b:
         ec:f8:b5:81:b7:ca:dc:60:17:35:1d:3d:38:19:77:24:c7:0a:
         d2:df:cc:4e:e4:7a:24:af:47:fb:10:c4:38:49:4a:27:a6:8c:
         aa:c8:8b:45:ea:15:24:bb:b7:01:17:35:08:7e:45:ca:57:86:
         99:86:23:ce:a1:8c:4d:98:76:f3:3c:50:a9:4a:63:c6:2c:00:
         31:cf:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:18:55 2026 by rpki-client