This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
File:                     Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json)
Hash identifier:          fPgK4aabsvuH5DGjU/YkMnbxiZYeUSVhSYC2VeCLav0=
Subject key identifier:   03:F7:9F:1F:B1:3A:7A:03:DB:AE:18:CD:43:5F:E8:8C:D6:D3:AA:D8
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Certificate issuer:       /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial:       019BEF060252B3CC1D65DB327719CE7D89C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
Manifest number:          12BE
Signing time:             Sat 24 Jan 2026 08:01:47 +0000
Manifest this update:     Sat 24 Jan 2026 08:01:47 +0000
Manifest next update:     Sun 25 Jan 2026 08:01:47 +0000
Files and hashes:         1: 1so34E8eiJbU3SBH98Un9cOyxZA.roa (hash: 1ldGTGYNQmiwKAKpaJZD0c4cvg8xFAkpG1EIpaEahUw=)
                          2: 5elWeBxLAe6yYejdEv5iOxl2wpY.roa (hash: cXPMx2p9BOBuSf+gbtxIhaiMUrpE5QpYWOZwherOPxc=)
                          3: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=)
                          4: ODMDEGyVLTmd47TMfFo6JexY6HQ.roa (hash: zruo3XY1xsZ3gUUyKc7wrw3okSMA8oCjUH3Rw6OmsMw=)
                          5: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: IiuPVC75Eg3fHnqOhpPUwEDlOJT2T59Hhyr5C6sYw1U=)
                          6: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=)
                          7: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=)
                          8: kWCTgWZt28p39DxdSCAtv_HwK2c.roa (hash: 6Pr8hVCpj9ARKpg6hJBVs5kjCmMHYsPhDj8rNCbBx5s=)
                          9: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=)
                          10: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=)
                          11: n0qUh9R2qSn_FGDUGu4NzWw85oA.roa (hash: VouJP45N/Qz78cWxNlxzcacwk9tugDuBJxf1M6WkcOE=)
                          12: na40Ok_i5qXlAc5-oaWGzhjqYgo.roa (hash: fwFOgCfZSKadLjWHLtjDEi/Ibt41w2vO2VBSuz+dD5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ef:06:02:52:b3:cc:1d:65:db:32:77:19:ce:7d:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Jan 24 08:01:47 2026 GMT
            Not After : Jan 25 08:01:47 2026 GMT
        Subject: CN=03f79f1fb13a7a03dbae18cd435fe88cd6d3aad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:f4:10:08:a4:a5:e3:58:e6:c2:cb:55:55:
                    cf:a5:59:a4:88:8f:91:a2:65:2f:93:f0:25:a5:e6:
                    65:75:75:5f:bd:9d:97:b1:67:c4:a3:c8:49:10:b4:
                    29:f8:23:4a:a1:8e:88:3c:64:24:58:d9:1b:14:b7:
                    24:88:e9:c7:df:e4:42:f9:5a:22:b9:b9:48:63:fd:
                    b3:07:2b:10:07:9b:16:17:4f:72:f3:cc:24:e6:73:
                    a5:a7:3f:a9:ad:44:3a:76:17:ca:e1:78:f3:f7:2a:
                    98:73:17:a1:72:14:e4:e8:53:26:7b:4d:ad:8f:33:
                    4a:f1:94:41:61:18:ad:77:47:cc:ea:ef:f9:54:df:
                    71:39:e2:36:31:8a:6b:a4:b9:58:85:91:a0:4c:05:
                    c7:7b:a4:68:77:a3:a0:98:60:82:82:80:60:70:34:
                    25:b3:2f:df:17:3d:1c:5d:c9:ee:15:01:ac:a2:61:
                    38:53:d1:49:ae:26:c7:3f:b0:a3:71:4b:d3:d3:05:
                    fa:6a:f0:91:7c:0b:a0:d7:31:5b:e3:0c:79:52:66:
                    b4:91:94:ba:ea:71:f7:9f:cb:ac:4e:13:b3:05:d4:
                    be:78:bb:73:1c:3d:ef:71:eb:8a:da:10:ef:f0:b3:
                    a5:9a:27:97:96:93:f9:54:7a:03:da:d2:85:52:89:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F7:9F:1F:B1:3A:7A:03:DB:AE:18:CD:43:5F:E8:8C:D6:D3:AA:D8
            X509v3 Authority Key Identifier:
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:32:1e:6f:ab:d3:53:5e:6b:0a:89:23:8c:cd:4d:a2:3c:26:
         89:da:eb:7a:17:df:7d:7d:e7:cf:a7:f6:aa:27:cc:b9:4b:fd:
         d0:28:9f:a2:b8:9f:99:2d:7f:1b:82:4d:05:cd:ab:ea:50:af:
         46:95:01:a6:4d:ee:f5:37:83:02:bb:13:74:b2:84:d6:c5:3c:
         78:84:ad:51:21:b0:f4:17:bf:c0:42:93:cb:58:74:49:bb:f0:
         b2:cf:a2:90:14:5b:a3:e5:57:62:cf:1b:32:04:66:0b:69:e1:
         ab:52:9d:f5:2c:ec:c0:45:8c:24:05:0b:5e:b7:42:87:40:0d:
         14:d0:0d:58:47:b7:5b:3c:30:db:a2:a9:8a:7b:88:fc:d9:cc:
         24:a6:61:0d:9c:c6:97:94:d7:3f:fd:b9:b4:4f:72:9c:00:a8:
         3c:9c:9f:5b:08:3a:28:a5:31:68:00:0b:95:c9:5e:99:55:2f:
         07:3e:03:4e:bb:5b:3e:ef:c8:e9:4a:86:e7:dc:05:da:31:4d:
         ca:60:a5:31:d3:28:07:82:4c:f1:01:cb:48:85:6c:cf:96:54:
         02:82:3a:24:05:2b:25:03:65:91:85:fe:c7:54:11:d7:af:41:
         be:77:aa:4a:b1:37:f8:b6:aa:a9:65:e0:9c:12:1a:5b:ff:79:
         e8:4d:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 11:39:55 2026 by rpki-client