This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
File:                     vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json)
Hash identifier:          kI/eGEBdGhU1oEQLSWAXUvocqmvrwHUh6oPan/1IJiY=
Subject key identifier:   17:1D:3C:4F:1A:8F:20:3A:EF:40:1B:31:3D:B7:C0:62:87:74:6D:E1
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Certificate issuer:       /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial:       019C1E3A4FB181D736BF4D338EBBD307DC8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
Manifest number:          01FE
Signing time:             Mon 02 Feb 2026 12:01:03 +0000
Manifest this update:     Mon 02 Feb 2026 12:01:03 +0000
Manifest next update:     Tue 03 Feb 2026 12:01:03 +0000
Files and hashes:         1: 8HPlLJKGC0uGDXpjxVBwb6wa0qk.roa (hash: Ojh5/xBT32ZIv2cbh6f99Qcqv0JCaF6De9sA3ACbGs0=)
                          2: VK85rpozFq-WBREloOuqHfpQLVI.roa (hash: VLGfCYG/IdB8dymdqFgTGB3V6ioYoYPUTJ+uFq78shw=)
                          3: XyAp-ULJDGqQnYw4x0VOKO9WL4A.roa (hash: p7Y5UggA9XaPiUt8v09KTFjc/O7q3EmBodfSudOJ2G0=)
                          4: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (hash: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0=)
                          5: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: ECj7DrJQ3qp3CqcKJE/VJR4L0boSRMvj1lVc63L1Wqs=)
                          6: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (hash: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:3a:4f:b1:81:d7:36:bf:4d:33:8e:bb:d3:07:dc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
        Validity
            Not Before: Feb  2 12:01:03 2026 GMT
            Not After : Feb  3 12:01:03 2026 GMT
        Subject: CN=171d3c4f1a8f203aef401b313db7c06287746de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:63:0d:eb:88:73:72:22:ac:c8:5b:50:aa:
                    96:3f:cf:03:4b:f8:04:e5:34:07:a9:39:d0:ba:5f:
                    50:07:f9:c5:6c:1d:e4:8a:a6:50:47:45:2b:c9:7c:
                    4a:85:f4:b6:6a:30:70:68:89:e9:ac:64:4c:ce:44:
                    44:79:94:b0:53:97:6f:be:82:59:f3:f0:ae:51:74:
                    ce:23:64:ac:44:5a:a3:b4:a4:a2:52:93:b9:59:bb:
                    ce:4a:33:b4:b3:e4:03:3d:36:b5:2f:d4:c8:12:b3:
                    82:26:eb:9b:03:f3:a1:b4:00:64:73:bf:69:14:68:
                    e9:88:4c:14:df:45:5b:6d:fc:f9:4d:e1:79:61:8a:
                    f6:3d:51:96:52:6e:a0:df:63:9f:b4:a0:d2:58:fd:
                    46:e4:9f:f1:a7:79:84:78:d6:03:88:4f:b7:d7:5e:
                    35:26:3c:16:85:2b:62:e3:3d:6d:0d:df:ec:00:37:
                    7e:1e:c0:d6:75:06:e4:91:46:81:d6:02:32:2a:83:
                    ba:c7:21:d4:e1:ca:e2:32:9f:bb:5e:9f:fe:45:3c:
                    98:ba:1f:86:51:6d:f1:18:95:dd:69:84:a9:b5:11:
                    53:65:f8:3a:7c:1c:f5:85:1e:8e:da:a8:83:2e:61:
                    f8:79:94:ac:49:ff:79:70:84:3a:04:cf:a6:26:4e:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1D:3C:4F:1A:8F:20:3A:EF:40:1B:31:3D:B7:C0:62:87:74:6D:E1
            X509v3 Authority Key Identifier:
                keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ad:9e:50:5e:d1:fb:4c:63:2c:2c:f0:34:32:af:86:a6:9b:
         1d:79:1d:14:d6:32:72:45:f8:4b:8c:4d:67:48:11:0c:37:ee:
         f9:f1:9c:cb:cd:85:ff:74:ef:34:7f:f4:57:08:e1:be:cf:ca:
         5d:ae:e3:4d:9c:fc:c7:85:41:f6:1b:84:35:07:e9:4b:31:17:
         eb:93:dd:54:e8:b6:07:63:a9:15:29:95:ce:48:b0:c1:bc:60:
         28:69:d2:83:c0:82:e7:2f:ff:90:d6:f0:bf:0a:09:72:1f:75:
         c3:c5:76:70:1e:55:c6:e9:a9:9e:6b:6d:9d:2d:ae:98:40:a9:
         51:37:5a:6a:9a:26:f9:24:6a:18:5b:9e:4c:c6:1b:4d:9b:b9:
         93:55:53:c4:55:59:a3:1d:72:32:49:1e:ad:0d:fd:8b:62:59:
         8c:ae:9b:d1:9f:0e:20:52:0d:52:c9:76:61:a5:9a:02:40:90:
         10:93:6a:01:c4:62:4c:e3:29:ec:13:7d:9b:5d:a7:c5:ec:1d:
         90:04:09:aa:b0:b2:3b:2f:09:f1:de:74:06:aa:42:c2:a3:6d:
         7b:3f:e8:09:36:d0:e2:8e:f7:c4:4d:35:05:2c:40:92:cc:51:
         ae:7b:9d:6f:76:b6:bb:69:c9:68:6e:8c:a7:a2:72:b6:3f:48:
         29:d3:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:15:25 2026 by rpki-client