This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
File:                     vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json)
Hash identifier:          dvJ9RnXxUMFSEGFdixndlC8vRH3V47tW2CtwC05NNkk=
Subject key identifier:   1E:26:58:22:0C:AF:87:87:6B:51:81:B9:62:A3:48:29:15:34:46:71
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Certificate issuer:       /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial:       019C42B4955EC796AF64BA42967D6A0298D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 14:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:56 +0000
Files and hashes:         1: _qrU1bCSPRoOOveg6cKRbdBRuMk.roa (hash: EuanKU6jP53XoKKJyuThtthL9JW99aO6nJOSR8TpqPE=)
                          2: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: qFEHeYEfEdoDMiD7BSN8Zz0GftE8NzViVNGywJupvJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:95:5e:c7:96:af:64:ba:42:96:7d:6a:02:98:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
        Validity
            Not Before: Feb  9 14:00:56 2026 GMT
            Not After : Feb 10 14:00:56 2026 GMT
        Subject: CN=1e2658220caf87876b5181b962a3482915344671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:cd:da:35:88:f4:e6:80:28:44:7c:91:16:
                    0b:a5:77:ad:f8:c9:de:db:72:9a:ad:d6:e5:57:88:
                    28:8a:25:1b:51:b7:db:17:91:43:6e:51:a9:1f:67:
                    d5:54:f5:7a:87:e9:64:58:52:55:d9:2e:af:2c:a2:
                    20:b6:33:2e:8d:d7:8e:a5:ed:a2:f7:8a:cf:06:cb:
                    b0:bb:2d:7b:81:75:9c:34:95:e2:1d:62:58:4b:46:
                    1f:aa:d6:e2:b0:91:8c:8a:de:30:2c:43:9f:fb:e5:
                    26:66:4a:d2:d8:a9:64:e3:f7:03:26:4c:6e:ab:6b:
                    da:f1:eb:38:9f:5f:7b:2c:25:b8:b7:bd:ae:64:80:
                    9d:29:7f:c3:c1:e1:48:cc:d2:24:5e:2d:d3:df:f5:
                    cb:aa:59:c4:b5:eb:cf:29:35:66:ba:0a:1a:0e:b8:
                    0b:88:bd:22:71:d3:1b:d3:5b:65:f0:02:b8:86:1b:
                    ab:16:3a:79:d9:61:9b:56:f7:9b:4b:32:52:96:ef:
                    1a:48:47:66:65:19:6b:bd:33:f8:c9:dd:8f:8f:b8:
                    e7:6d:b9:ff:0d:87:dd:57:e7:07:a0:5a:99:0f:9e:
                    bb:f4:71:c5:a9:6a:73:51:67:52:00:2b:d6:be:95:
                    17:c7:2a:db:35:82:70:56:d3:47:02:4a:c2:87:f2:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:58:22:0C:AF:87:87:6B:51:81:B9:62:A3:48:29:15:34:46:71
            X509v3 Authority Key Identifier:
                keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:99:22:35:b2:90:8e:51:10:eb:78:92:f7:62:fa:68:7b:
         45:2e:65:be:25:d0:11:f4:16:aa:50:c2:3d:c1:47:75:d2:db:
         8f:36:d9:4f:9d:e9:62:24:66:0e:b1:43:f1:73:2e:03:6c:7e:
         33:dd:34:2e:fd:59:03:85:ec:32:40:e4:6a:e6:dc:b7:3a:74:
         60:9a:57:b8:be:81:e1:02:c9:57:14:35:63:3f:91:34:a9:6f:
         08:6f:d6:90:87:47:62:4e:ec:31:95:e3:79:22:c7:7b:a0:63:
         eb:aa:09:2f:8f:1e:37:8b:d9:62:9a:7c:95:15:16:20:72:a7:
         b5:63:7c:62:fd:e4:8d:bf:2c:1d:1c:21:8d:a7:35:c5:2e:c9:
         76:4f:a0:5b:68:31:46:09:93:e4:8b:ce:0e:1a:29:f0:4c:b7:
         4c:43:21:7f:5a:09:f4:01:d6:70:b7:24:e5:69:f2:3d:b1:ae:
         42:62:92:82:7e:cd:c2:0e:f1:8f:0c:10:86:ec:17:49:5d:38:
         b4:e2:d1:f5:09:24:51:ad:8c:6f:27:b0:de:8f:9b:99:eb:d6:
         14:a1:04:dc:96:f2:c4:9e:c8:9e:04:35:a2:62:14:23:b7:a8:
         b8:c2:cc:25:82:86:4c:be:52:5a:bf:dc:d6:58:3e:af:ee:4f:
         42:11:f7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:19 2026 by rpki-client