This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File:                     VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier:          fIqzSTs5TxOAFueYp0Lomd+zefJ988T8JZD6zKIkuNE=
Subject key identifier:   6F:EB:EB:08:F9:93:61:26:B1:0E:55:9C:46:14:41:29:37:0A:B0:42
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer:       /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial:       019C0E5950C769C0E510F21250C6D081570F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number:          17F9
Signing time:             Fri 30 Jan 2026 10:01:00 +0000
Manifest this update:     Fri 30 Jan 2026 10:01:00 +0000
Manifest next update:     Sat 31 Jan 2026 10:01:00 +0000
Files and hashes:         1: 2e5AvXlufc-kEczHhTECSJ-V-JQ.roa (hash: I9+kJ0K5wv3UioVKT0ZYctRfAuqgjg7khDoT9z5Qntc=)
                          2: 4LBzWO_530DcCpzjlEfXk_h_vW8.roa (hash: H+p9nsy8NewbJx1+0VvALNZxKQ+AzKGCdkwiJQ4ANZM=)
                          3: GmiNV02KpRdxeBzvA-9_R7Rwp5k.roa (hash: 1nMmGCSVtG3D2xti3D/6NXcOSYqZ/aoCI5L5XEr0uig=)
                          4: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: qgwwRchiq0iVP5aWuUJLQzlrpb8Tjs+eW2jcnLmyMEI=)
                          5: g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa (hash: KFBqHuaTNX9BJpnJ/kNbP6C31mWv4bvManEdzG/ajqc=)
                          6: mk7ttr1hKMruQA-V9YpclvWNi_0.roa (hash: DCTpzfyrUDoRJthmL9oXt5chUKx5z7hp5NsgIKGeX6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:59:50:c7:69:c0:e5:10:f2:12:50:c6:d0:81:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
        Validity
            Not Before: Jan 30 10:01:00 2026 GMT
            Not After : Jan 31 10:01:00 2026 GMT
        Subject: CN=6febeb08f9936126b10e559c46144129370ab042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:4b:f2:b7:20:c5:ed:36:07:e6:bb:b6:79:
                    00:c6:4d:1f:98:77:40:9a:e8:80:58:f6:9c:c9:bc:
                    d1:e7:5f:2e:e9:5f:f5:6d:b1:16:1d:c6:70:6b:2e:
                    fd:54:bf:f5:b0:3b:bd:e1:9d:37:36:65:65:ae:a8:
                    61:6d:43:ce:43:dd:18:a0:4e:68:d6:4b:b6:70:81:
                    3f:a6:32:a7:8a:6e:12:39:7a:d5:c7:fc:63:ae:c4:
                    ad:53:51:cd:d1:52:92:36:ba:6a:b8:e3:58:c9:f4:
                    a1:e2:92:f0:8f:fc:1d:59:15:0c:e6:22:f5:27:69:
                    58:01:5f:c2:80:6c:e7:9a:b3:83:81:ed:0c:c6:46:
                    f0:ad:49:67:06:58:68:2a:97:44:16:20:12:b2:9d:
                    d2:6b:fb:20:09:87:46:89:4c:89:6c:94:1a:1e:c5:
                    f4:60:6f:ee:9c:2a:b5:77:21:33:d4:ed:fb:e9:1f:
                    c5:73:5e:2a:f9:32:ce:5b:e1:f2:96:93:90:7b:a6:
                    4b:ed:3a:fd:6f:32:df:d0:8b:f2:67:90:44:83:bb:
                    0a:0c:b4:40:90:6d:4e:a2:9d:f3:0b:f8:b6:d5:04:
                    8a:6b:b4:94:a4:b8:83:a4:d7:79:7a:9a:9e:c9:23:
                    10:e0:b5:7f:a0:5c:a4:6a:a3:c5:66:af:8f:1c:10:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EB:EB:08:F9:93:61:26:B1:0E:55:9C:46:14:41:29:37:0A:B0:42
            X509v3 Authority Key Identifier:
                keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a1:0f:d1:2a:10:34:84:33:16:78:5c:7f:c7:d1:7d:77:7b:
         b8:cc:d6:31:56:16:6c:62:d5:e1:82:5b:7c:bd:c3:47:58:6f:
         26:b4:79:83:84:c7:66:d4:f7:25:e3:66:9d:84:8a:53:ee:07:
         4b:24:77:64:17:a9:64:b1:96:7f:77:9b:f4:b4:61:16:61:07:
         90:a6:b6:ef:97:e5:f6:f3:68:12:04:0c:ec:09:fd:25:e2:25:
         82:28:e4:a8:74:3e:69:b6:39:71:ce:3f:71:41:c1:23:78:4e:
         10:5b:28:3d:f1:62:63:b1:0f:a8:d6:38:7a:45:19:e3:fb:d1:
         4e:b5:ca:f3:fc:e3:f4:79:0e:f9:5d:1e:f9:2c:ea:ce:4d:88:
         b9:9a:9c:be:ad:71:81:8b:cc:ef:9c:da:d4:ea:c1:6a:92:7d:
         a8:bb:dc:3f:b1:a5:d2:22:7e:94:ae:9b:91:81:9b:29:bf:13:
         82:2b:b3:3f:e7:b2:d4:01:f9:90:70:71:02:c8:0a:be:76:e7:
         90:19:aa:bf:9a:e3:e8:8a:57:46:45:5d:77:16:b8:ab:1b:fe:
         93:7d:14:24:cb:13:74:eb:84:60:19:77:12:3f:e7:a3:26:5c:
         df:7a:76:b0:af:3b:18:d1:35:98:00:aa:35:f0:ab:f4:d1:27:
         4d:c1:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:34:41 2026 by rpki-client