This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
File:                     VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json)
Hash identifier:          SGAgE6JNceI+ZTv10FWWE/cxv25SnXLC9DhDwa1XSeU=
Subject key identifier:   0D:F7:5F:3E:2E:5D:0A:F4:A7:20:13:B1:44:1B:A1:3C:CD:E5:69:54
Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
Certificate issuer:       /CN=54a0f0811f9c256374448aa015d7769271821bf3
Certificate serial:       019BD1D6D39C12A65A209C27471EB4090C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
Manifest number:          8B
Signing time:             Sun 18 Jan 2026 16:01:15 +0000
Manifest this update:     Sun 18 Jan 2026 16:01:15 +0000
Manifest next update:     Mon 19 Jan 2026 16:01:15 +0000
Files and hashes:         1: Be8ZE-3fUDOUREKbRltRl9iw1eI.roa (hash: ts/tUG1XY8HQ9PPvnRSU96o95po47vRKYvpi0JSwMOQ=)
                          2: JPN0ZhHYSvkn7r532xwlghazy8M.roa (hash: b6weq00B1xhN/jGEGOFPdub/LMTw7LxhTg6NLGhBKwY=)
                          3: UZH0fpr1tyUVaCTBDnjkP57r0fg.roa (hash: asbZ5HvBqKNvkMzm24LOBMXDZ+s4an0DuYC6LDjlSWE=)
                          4: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: AN9P2yHh8ELojyUvnxn+tOlbjA/DviMb3v2kYUl0VSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 14:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d1:d6:d3:9c:12:a6:5a:20:9c:27:47:1e:b4:09:0c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3
        Validity
            Not Before: Jan 18 16:01:15 2026 GMT
            Not After : Jan 19 16:01:15 2026 GMT
        Subject: CN=0df75f3e2e5d0af4a72013b1441ba13ccde56954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:59:2a:30:69:3b:5a:3e:b7:c3:c9:cc:2f:
                    46:0f:9e:f4:b9:5d:7d:c9:e0:cc:a6:74:f3:9f:72:
                    5e:35:9d:d3:87:95:61:fb:d3:5c:6a:77:66:11:84:
                    e8:9c:b2:d1:2e:d1:ec:53:2e:0c:1c:34:63:20:c3:
                    4e:d5:4c:99:ed:c0:73:ab:72:7e:30:b3:45:eb:ee:
                    b3:93:35:ff:9f:ff:87:94:bb:ee:f9:88:64:bc:f5:
                    fa:76:74:6b:32:02:33:88:9b:85:d0:da:19:77:3c:
                    6e:e3:c6:6e:27:50:a9:c9:e2:67:47:01:4c:5e:21:
                    5c:65:b9:7d:6a:ba:68:1c:5b:07:1f:db:9c:e3:fc:
                    52:a0:c0:98:fc:76:3c:0f:7b:7b:35:96:22:f4:b9:
                    dc:67:b0:1e:98:b7:47:a3:1f:f9:d5:ef:cf:9f:ca:
                    70:8a:7c:16:11:d1:02:15:b4:c7:33:97:b0:73:e7:
                    ad:d8:f3:e0:d0:0a:36:4e:b6:7a:df:0f:71:43:65:
                    82:cd:22:39:5a:e3:f0:3d:d9:38:60:31:91:7a:7e:
                    2f:73:35:05:3e:86:c3:b9:ef:bf:3f:cf:e3:26:b9:
                    95:11:60:c4:fe:9d:b4:72:fc:2e:0e:93:64:88:69:
                    f9:ec:ac:c9:9d:b2:79:3c:3f:a9:7e:e2:2d:07:76:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:5F:3E:2E:5D:0A:F4:A7:20:13:B1:44:1B:A1:3C:CD:E5:69:54
            X509v3 Authority Key Identifier:
                keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c6:03:f3:f5:16:36:21:27:2a:5a:34:f2:69:c6:62:c4:9b:
         17:53:d4:ba:2f:dd:f1:e7:91:15:21:f3:c5:a7:c8:2a:07:c8:
         03:fe:fa:a7:28:bf:42:35:f5:87:fb:a0:3a:f4:57:43:ca:c1:
         b9:6a:51:7f:e8:bb:24:98:ab:9f:3f:3e:5a:62:2d:36:f9:9b:
         3e:8d:59:e5:c9:61:5e:44:65:ec:7f:52:70:be:2f:fe:a5:7a:
         d2:19:18:ca:1f:4f:28:a0:69:c8:f8:b4:5f:d6:4e:de:0c:69:
         a0:f7:1b:29:b5:69:6a:ca:17:ec:10:9f:80:3a:fe:4c:84:f3:
         c0:6b:70:9b:2c:f9:3f:f1:44:d3:10:2f:a7:f1:3d:6b:ee:38:
         5e:e0:9d:5b:fe:d7:5f:94:61:19:08:f4:2b:31:15:fd:a6:58:
         7a:a6:15:dc:55:4b:8d:11:86:cd:f2:81:31:63:4a:ce:9b:c2:
         3f:c9:c3:fa:40:e9:b8:9f:5e:e5:43:b8:ad:b6:83:25:ca:8d:
         59:83:f3:b7:8f:70:a3:fe:0a:98:a0:d7:7e:f7:62:06:6a:25:
         a7:36:67:1c:75:68:9c:e6:a3:a8:93:56:b2:1f:76:ed:98:91:
         8a:58:a6:53:d3:ec:de:ea:64:23:c6:57:da:4a:4a:97:82:d8:
         18:45:83:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvR1tOcEqZaIJwnRx60CQyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4
MjFiZjMwHhcNMjYwMTE4MTYwMTE1WhcNMjYwMTE5MTYwMTE1WjAzMTEwLwYDVQQD
EygwZGY3NWYzZTJlNWQwYWY0YTcyMDEzYjE0NDFiYTEzY2NkZTU2OTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI9ZKjBpO1o+t8PJzC9GD570uV19
yeDMpnTzn3JeNZ3Th5Vh+9NcandmEYTonLLRLtHsUy4MHDRjIMNO1UyZ7cBzq3J+
MLNF6+6zkzX/n/+HlLvu+YhkvPX6dnRrMgIziJuF0NoZdzxu48ZuJ1CpyeJnRwFM
XiFcZbl9arpoHFsHH9uc4/xSoMCY/HY8D3t7NZYi9LncZ7AemLdHox/51e/Pn8pw
inwWEdECFbTHM5ewc+et2PPg0Ao2TrZ63w9xQ2WCzSI5WuPwPdk4YDGRen4vczUF
PobDue+/P8/jJrmVEWDE/p20cvwuDpNkiGn57KzJnbJ5PD+pfuItB3Y1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA33Xz4uXQr0pyATsUQboTzN5WlUMB8GA1UdIwQY
MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt
MDI5NjRjNTBkMjEyLzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy
LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMYD8/UW
NiEnKlo08mnGYsSbF1PUui/d8eeRFSHzxafIKgfIA/76pyi/QjX1h/ugOvRXQ8rB
uWpRf+i7JJirnz8+WmItNvmbPo1Z5clhXkRl7H9ScL4v/qV60hkYyh9PKKBpyPi0
X9ZO3gxpoPcbKbVpasoX7BCfgDr+TITzwGtwmyz5P/FE0xAvp/E9a+44XuCdW/7X
X5RhGQj0KzEV/aZYeqYV3FVLjRGGzfKBMWNKzpvCP8nD+kDpuJ9e5UO4rbaDJcqN
WYPzt49wo/4KmKDXfvdiBmolpzZnHHVonOajqJNWsh927ZiRilimU9Ps3upkI8ZX
2kpKl4LYGEWDFw==
-----END CERTIFICATE-----
Generated at Sun Jan 18 17:58:15 2026 by rpki-client