This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
File:                     Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json)
Hash identifier:          pDGWt8OoFEImK0VH3+tjE2e3x/ArfqXWhA6NFjqThLM=
Subject key identifier:   78:E2:6D:C7:A6:C6:CC:5A:39:9F:4F:29:E0:5A:31:0C:DB:52:44:5A
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Certificate issuer:       /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial:       019C27068B300391A3F0004181A46BD4A0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
Manifest number:          12DB
Signing time:             Wed 04 Feb 2026 05:01:06 +0000
Manifest this update:     Wed 04 Feb 2026 05:01:06 +0000
Manifest next update:     Thu 05 Feb 2026 05:01:06 +0000
Files and hashes:         1: 1so34E8eiJbU3SBH98Un9cOyxZA.roa (hash: 1ldGTGYNQmiwKAKpaJZD0c4cvg8xFAkpG1EIpaEahUw=)
                          2: 5elWeBxLAe6yYejdEv5iOxl2wpY.roa (hash: cXPMx2p9BOBuSf+gbtxIhaiMUrpE5QpYWOZwherOPxc=)
                          3: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=)
                          4: ODMDEGyVLTmd47TMfFo6JexY6HQ.roa (hash: zruo3XY1xsZ3gUUyKc7wrw3okSMA8oCjUH3Rw6OmsMw=)
                          5: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: JX7bxTtpi0iQ/Wq/pRje/DgErkDEeo8Kr2+8Byle7aU=)
                          6: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=)
                          7: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=)
                          8: kWCTgWZt28p39DxdSCAtv_HwK2c.roa (hash: 6Pr8hVCpj9ARKpg6hJBVs5kjCmMHYsPhDj8rNCbBx5s=)
                          9: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=)
                          10: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=)
                          11: n0qUh9R2qSn_FGDUGu4NzWw85oA.roa (hash: VouJP45N/Qz78cWxNlxzcacwk9tugDuBJxf1M6WkcOE=)
                          12: na40Ok_i5qXlAc5-oaWGzhjqYgo.roa (hash: fwFOgCfZSKadLjWHLtjDEi/Ibt41w2vO2VBSuz+dD5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:06:8b:30:03:91:a3:f0:00:41:81:a4:6b:d4:a0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Feb  4 05:01:06 2026 GMT
            Not After : Feb  5 05:01:06 2026 GMT
        Subject: CN=78e26dc7a6c6cc5a399f4f29e05a310cdb52445a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:11:c2:44:40:91:e8:d2:41:51:ce:ee:17:
                    44:c5:93:45:8a:e5:19:4e:a9:a0:ec:04:e1:64:0a:
                    96:5c:db:b3:e3:15:12:0d:20:05:c2:09:b2:61:b3:
                    cd:c3:6c:c2:a5:28:aa:8e:d6:4c:f0:30:96:47:0c:
                    2c:43:ee:93:7b:6c:e0:e8:c1:ba:e4:2d:25:93:3b:
                    e3:08:2e:0c:21:e8:28:ef:4f:b1:e6:9a:f8:0a:24:
                    47:ae:46:d9:9b:ff:68:e6:6d:de:56:a4:6e:be:96:
                    41:f0:85:02:57:23:45:a1:3f:11:5a:da:a1:58:f5:
                    ee:05:de:6b:c0:54:41:3b:d7:1b:c2:b0:72:2f:b6:
                    ca:82:2a:42:a9:d5:d0:9d:ec:7d:eb:b5:46:9c:4d:
                    3e:d0:02:69:24:b1:d5:c5:45:44:ef:55:9c:03:24:
                    be:31:39:39:0a:dd:1b:7f:1a:4a:99:74:6b:ff:98:
                    d3:d0:2f:65:d4:a4:e9:e3:04:6b:73:38:f8:bf:0b:
                    21:5e:e5:5a:b0:93:92:a7:d0:7a:70:77:70:f8:92:
                    e3:f7:a3:c2:9d:0c:5a:5a:47:3e:f9:ae:a7:6c:b3:
                    20:e7:96:40:5b:7e:7e:b6:a2:af:52:f5:35:6d:c1:
                    a2:b0:b7:fe:be:48:1a:75:48:45:0e:db:18:b1:64:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E2:6D:C7:A6:C6:CC:5A:39:9F:4F:29:E0:5A:31:0C:DB:52:44:5A
            X509v3 Authority Key Identifier:
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:af:1a:6f:41:09:48:e5:08:8f:6a:fc:5d:ce:cd:e7:61:
         7c:73:da:0c:50:8c:88:86:c3:02:a7:f0:f0:a3:91:d3:bb:c2:
         25:a9:96:47:eb:77:05:fc:d1:b3:ea:c9:37:05:90:25:dc:48:
         51:aa:93:e6:6f:bd:84:b2:3f:75:5e:a0:e2:d9:7f:47:e7:4c:
         6a:b7:80:37:c2:f6:7c:87:3c:8d:ad:25:9b:f7:96:5a:24:10:
         7c:c8:42:0d:ad:d8:0f:e1:4e:7a:a0:00:40:e1:d3:8d:ab:0f:
         70:ab:a4:ae:19:9d:31:6b:b2:8f:61:cf:68:50:b5:3a:f2:91:
         00:a1:22:55:9f:d4:85:0f:dd:b7:82:e6:f3:31:4b:a5:ee:86:
         5d:57:51:65:47:8c:6f:f6:ee:e8:91:f1:8d:a9:ef:02:08:4c:
         86:e8:61:c4:0e:b0:09:00:62:d6:dc:52:76:35:99:96:32:a7:
         eb:54:5c:c7:e2:b4:b0:43:01:c6:06:e8:f0:81:4a:21:5b:02:
         54:93:fb:36:4d:a8:8e:eb:0a:05:5e:6a:e8:b1:17:6c:4a:0f:
         0b:62:cd:03:1e:5c:e9:43:33:40:98:4c:d5:08:80:ba:2b:1d:
         19:dc:3f:55:26:36:d6:75:de:ce:03:97:4c:bb:30:af:07:1e:
         ca:4d:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 08:30:30 2026 by rpki-client