This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          ghbObFKlgGcLyoVlKSYgjkgoGfZBuyfH+6wHRM9L3l4=
Subject key identifier:   BA:55:D1:ED:4C:1B:6B:D6:80:F2:82:BA:79:70:DE:8A:71:CF:00:F1
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       019BF72CB2D4B553671DA5096C5556CF4F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0C80
Signing time:             Sun 25 Jan 2026 22:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:00 +0000
Files and hashes:         1: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: ErLPbNK7cOc1aPq9j6B4ZXAOhK46R6X4Y4horZhB3Ok=)
                          2: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (hash: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:b2:d4:b5:53:67:1d:a5:09:6c:55:56:cf:4f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Jan 25 22:01:00 2026 GMT
            Not After : Jan 26 22:01:00 2026 GMT
        Subject: CN=ba55d1ed4c1b6bd680f282ba7970de8a71cf00f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8f:5b:0e:28:90:96:83:c8:33:34:18:21:8f:
                    f7:be:61:03:ce:e2:63:3f:e0:65:59:31:f1:15:56:
                    26:4d:79:b6:ac:fe:25:f5:4f:f9:2a:13:b8:12:36:
                    9c:9c:2a:40:04:e2:7a:61:d3:01:ed:fa:85:1c:a4:
                    3c:4f:73:05:34:2a:eb:bb:9d:5f:7d:4d:4d:1d:67:
                    a9:1a:2e:62:dd:05:9c:c7:84:5c:6d:9e:2e:b0:48:
                    81:46:b3:00:34:88:f9:fc:74:f8:7e:1c:5e:6c:11:
                    7e:d5:06:86:a0:11:83:b4:00:a3:66:fe:b2:da:f2:
                    18:be:63:f8:7a:87:32:1c:05:90:cc:f7:9a:b3:72:
                    7c:0c:6a:6a:5a:2f:fb:99:98:1c:d2:d2:55:44:d2:
                    a9:aa:1d:dd:13:ab:01:dd:9a:21:27:ae:e1:f0:39:
                    ed:c7:87:9c:1a:35:41:0f:63:c1:49:62:bc:c9:b2:
                    62:ee:0b:8b:cd:6b:db:29:f1:a5:98:65:54:41:65:
                    12:d4:78:04:46:ef:99:55:02:f4:cd:77:ba:04:96:
                    5e:6f:0a:dd:04:c6:fe:ff:56:76:99:76:ba:4d:a0:
                    57:a0:aa:fe:ee:23:90:98:3a:b0:71:76:e0:ec:34:
                    00:dc:2a:4a:35:53:f9:7a:77:2f:8f:72:6f:f6:09:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:55:D1:ED:4C:1B:6B:D6:80:F2:82:BA:79:70:DE:8A:71:CF:00:F1
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:b3:d8:39:d4:9e:38:d7:80:80:ca:38:4c:02:3c:15:ef:
         c3:a2:70:e8:ab:6a:a0:71:37:33:d5:a5:f5:5d:6e:f7:36:e3:
         af:40:fa:5e:f2:8e:a3:cb:ff:d9:61:fa:81:be:7c:e7:d8:74:
         97:5f:b9:85:86:96:68:fd:b6:df:10:ae:eb:44:4d:91:76:a4:
         ea:ae:44:a1:8c:87:3f:53:92:53:96:94:e2:ce:58:8b:29:7d:
         ae:c3:8d:e1:fc:58:cc:7d:ab:43:23:f7:11:bc:7b:61:b9:6d:
         14:99:ce:e9:61:dd:38:45:2c:e0:92:12:91:84:62:da:f0:88:
         2b:bf:35:5a:41:fc:a4:26:d5:ad:fe:dd:4a:83:b1:5d:d4:4c:
         1d:12:fe:fc:e7:23:4b:d1:74:c4:f2:33:e9:a0:20:06:96:98:
         67:a5:1f:17:a3:e0:98:d5:cf:9a:27:70:24:ff:57:11:d7:2a:
         e5:93:ea:c4:d5:2c:78:5a:af:ed:79:78:16:f3:1a:b7:dc:c8:
         48:46:46:51:b0:4b:87:6c:62:0f:76:64:6e:f8:9d:b3:3d:ef:
         7e:95:26:49:f0:d1:58:29:f2:f9:94:84:ff:46:f8:d3:de:66:
         d9:b4:bd:c2:bf:5d:39:30:11:1c:3d:4d:d4:26:75:57:16:18:
         bf:50:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:48 2026 by rpki-client