This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File:                     v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier:          hdIzr0ExpxjdDbWRdhV/Ezjj6jT0wNE2MLiHrb86eOg=
Subject key identifier:   2E:A5:5B:AE:EF:DE:69:BC:45:59:74:5A:9B:85:22:52:2C:37:74:79
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer:       /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial:       019BFA9C2C5E74792896B6FB45D6CF3BAAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number:          07C7
Signing time:             Mon 26 Jan 2026 14:01:37 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:37 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:37 +0000
Files and hashes:         1: PjGZVG-uOaDVHbHbJIUYe0z8jmg.roa (hash: 6MncPoLprurVYfiY9ZBImtV4SOtSMwf+QcTHZ6cdyhk=)
                          2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: NYqXyjnWWr2JCzV4rzi2XZN3nxgXFUArPpQ9Q2WShds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:2c:5e:74:79:28:96:b6:fb:45:d6:cf:3b:aa:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
        Validity
            Not Before: Jan 26 14:01:37 2026 GMT
            Not After : Jan 27 14:01:37 2026 GMT
        Subject: CN=2ea55baeefde69bc4559745a9b8522522c377479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:35:51:d1:a6:90:18:02:1e:97:dd:5c:e0:
                    ed:54:8a:d9:dd:7c:4a:c5:31:3e:77:6a:f8:32:23:
                    fd:92:0e:6c:9e:6c:16:58:7c:9b:b7:24:94:c7:46:
                    0d:4c:48:9b:76:70:87:35:20:30:4b:c3:86:84:93:
                    69:9b:94:84:7d:4c:09:90:bf:b9:93:33:4b:32:da:
                    ee:50:8f:80:54:af:24:ff:9a:79:21:0b:a0:1f:a4:
                    e9:3e:ca:bc:c0:d5:f5:91:bf:55:0c:4d:4c:79:c5:
                    bf:55:da:95:3e:f6:95:07:66:cc:a9:80:48:7f:0d:
                    13:59:cd:82:b9:b6:70:45:ba:29:c5:71:c9:39:8b:
                    78:72:b3:f9:11:26:f1:29:ee:bd:f3:43:ed:ed:44:
                    3e:9d:f7:9f:10:8d:0d:50:e7:25:ef:12:a9:6d:fb:
                    f8:67:7b:f7:7f:12:08:78:b8:5f:95:fc:a4:4a:da:
                    ea:d6:b3:0a:c4:a2:b6:44:55:8a:b1:0a:b6:a9:85:
                    de:fc:9a:4e:ff:eb:19:ca:6d:f5:33:55:ae:c4:46:
                    0f:cb:0c:7c:34:21:4e:fc:b1:61:be:74:ac:6d:73:
                    ac:79:f5:a5:a2:2e:93:78:a5:9e:68:a2:b3:09:85:
                    c7:c4:3c:7f:77:8c:77:6a:35:4f:4c:cd:c1:d5:27:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:5B:AE:EF:DE:69:BC:45:59:74:5A:9B:85:22:52:2C:37:74:79
            X509v3 Authority Key Identifier:
                keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:12:71:cd:71:81:3b:0d:55:45:60:c1:95:c6:08:77:56:
         95:93:a6:ad:ca:c5:51:8a:35:b6:62:42:eb:3e:a0:3c:2c:48:
         30:c6:90:48:15:ba:fa:2c:92:ef:6d:f5:d8:f7:8b:01:c7:de:
         5c:e9:26:ec:30:28:92:4d:8c:34:5c:1a:0a:33:ef:24:e9:ce:
         d2:d0:f0:2e:76:27:43:e4:55:ff:a7:60:4f:29:7a:1f:91:5c:
         1d:35:16:9d:c6:61:ce:94:75:4d:2b:ce:45:35:c7:8d:e9:d6:
         bf:7e:a7:08:0c:ea:c2:38:d3:90:1a:6b:b6:4a:2c:a8:c7:18:
         b1:78:1c:fe:c9:e3:86:68:b1:3b:ac:22:01:93:03:d3:4a:bb:
         71:35:bd:a7:98:88:39:94:1d:02:68:b5:51:bb:b3:da:bf:bb:
         9c:9b:23:ef:22:af:fc:f1:29:68:a4:d6:ef:d9:9b:00:4d:ce:
         7a:2a:1f:e6:85:34:46:c2:96:e8:db:e2:4a:2c:74:f6:b7:c6:
         4b:42:56:27:49:9a:0e:5c:1d:f3:e2:79:b7:14:c3:5a:62:ac:
         ea:20:ac:f8:df:92:10:9f:ae:06:df:53:09:e0:43:de:0c:49:
         43:ae:d3:3e:08:71:91:ec:7f:a1:77:79:e1:4a:e6:37:fe:52:
         c2:75:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:22:06 2026 by rpki-client