This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
File:                     vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft (raw, json)
Hash identifier:          GC9X8Q+sOWWqRX8lDsAJGpRZ+xhSR6rrI7N0jEGql3E=
Subject key identifier:   A8:6B:B0:08:9C:62:7D:9A:DA:ED:E7:76:16:85:9D:4C:63:44:AE:2D
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Certificate issuer:       /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial:       019B902D7E0558B7714D2F6991C9A4440F00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
Manifest number:          0D0C
Signing time:             Mon 05 Jan 2026 22:00:59 +0000
Manifest this update:     Mon 05 Jan 2026 22:00:59 +0000
Manifest next update:     Tue 06 Jan 2026 22:00:59 +0000
Files and hashes:         1: vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl (hash: PDh7B8rdTHo1/FGs3aA6UDYSESGOZfDH/zIcHmxQjCA=)
                          2: ywsPXOHRV5iC_U8Kx3E6fIirpS0.roa (hash: 3lNvDQfCt6hAulnUYGzPmQT+uldjzxP7nScqzqvC1Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:90:2d:7e:05:58:b7:71:4d:2f:69:91:c9:a4:44:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
        Validity
            Not Before: Jan  5 22:00:59 2026 GMT
            Not After : Jan  6 22:00:59 2026 GMT
        Subject: CN=a86bb0089c627d9adaede77616859d4c6344ae2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:45:b4:d1:b3:5f:49:10:bd:c7:5e:09:95:
                    25:03:7f:04:95:34:52:c7:fa:22:90:7a:1c:1c:61:
                    e3:f3:3a:ad:9b:1c:e2:61:93:66:5c:a7:16:55:2b:
                    36:57:6f:64:32:01:fa:cf:8b:23:5c:1b:0e:d3:dd:
                    00:17:13:3f:2b:e5:de:99:ac:33:20:2e:95:57:a0:
                    4d:70:74:ce:51:9e:42:0a:08:06:8d:83:8f:71:14:
                    b2:bc:c3:d0:11:3e:02:12:bc:55:55:50:57:0d:48:
                    e6:a4:1c:cb:8d:98:a0:89:ee:6d:f1:95:06:e5:cf:
                    52:12:73:e6:c1:4e:8e:cf:4a:44:e8:49:81:67:6a:
                    ca:7e:78:6a:b0:70:85:94:be:96:a4:3b:c8:ea:1e:
                    e8:21:9a:8e:8b:44:a3:32:00:3a:ce:95:0c:71:14:
                    08:b3:76:46:d7:72:c9:3f:29:e6:9e:5e:e1:73:45:
                    6e:ec:6b:6b:8d:d1:02:83:27:99:07:9c:db:4a:b1:
                    b0:1a:9a:d8:25:e7:6d:22:d2:28:4a:e3:52:07:75:
                    af:d6:01:17:07:20:fb:c1:7f:eb:1b:63:93:f6:31:
                    a6:92:7b:7a:bf:7b:57:f5:7a:aa:9d:de:c2:61:bd:
                    fc:05:00:4e:9e:cb:d0:db:37:5f:12:0c:fb:fc:c8:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:B0:08:9C:62:7D:9A:DA:ED:E7:76:16:85:9D:4C:63:44:AE:2D
            X509v3 Authority Key Identifier:
                keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:a1:08:fe:26:b8:d4:46:98:46:64:54:26:08:f4:88:24:
         2c:08:0d:68:d2:be:37:11:e3:0a:a1:4c:db:f5:c7:3d:87:49:
         1d:d4:ce:f4:b1:73:57:16:18:28:74:c1:2b:5b:be:fc:77:23:
         9d:89:ec:9b:32:e4:a5:44:58:b0:c8:2e:46:ff:e9:a3:76:9c:
         9f:d2:01:72:ad:b9:49:be:32:40:7c:00:74:a5:15:47:5c:26:
         d1:26:9a:c8:d5:1b:3f:3d:6b:2c:e1:d0:02:e3:a4:20:b8:8f:
         8d:8d:1a:27:22:d4:b6:d9:b9:42:c4:fd:36:ef:b2:7f:aa:87:
         e1:b3:56:fc:57:e5:2d:08:df:3a:89:db:b9:8b:30:08:96:a4:
         54:50:82:e5:32:26:4e:e3:a3:84:b5:36:99:99:00:f6:05:63:
         24:f8:0f:a5:cb:f1:89:6c:f9:60:60:20:14:72:24:97:df:12:
         8a:ba:50:1b:b1:63:af:5c:26:66:d5:12:e3:c8:df:65:28:a5:
         67:e1:56:05:b1:68:5f:44:c9:80:bc:6a:12:46:e1:5b:43:86:
         86:c1:4f:bc:f1:d3:af:ed:74:b5:45:e5:13:a9:6b:60:96:02:
         e0:08:ce:7f:9f:51:8c:9e:05:42:d0:00:90:9a:86:6e:8d:b3:
         95:b0:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 01:47:47 2026 by rpki-client