This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File:                     vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier:          t13VqBTCFqwveug8eEKVy5wEciaJTz08g6hJNo7BGwE=
Subject key identifier:   46:5B:D5:57:7E:11:8F:12:23:91:BF:1C:1E:E9:46:57:69:EF:C1:D3
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer:       /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial:       019C45ECE2B76D1CA668B0593D0589C97EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number:          0930
Signing time:             Tue 10 Feb 2026 05:01:18 +0000
Manifest this update:     Tue 10 Feb 2026 05:01:18 +0000
Manifest next update:     Wed 11 Feb 2026 05:01:18 +0000
Files and hashes:         1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
                          2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
                          3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: fnvfcAoXwr8On9pAGxi+c/4ko6GoLhThYLoPaUFQnhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:ec:e2:b7:6d:1c:a6:68:b0:59:3d:05:89:c9:7e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
        Validity
            Not Before: Feb 10 05:01:18 2026 GMT
            Not After : Feb 11 05:01:18 2026 GMT
        Subject: CN=465bd5577e118f122391bf1c1ee9465769efc1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:6a:b4:a5:a3:42:25:13:60:ab:86:3d:ea:
                    4a:bd:aa:7d:80:cc:49:66:db:63:2c:6f:d9:6f:99:
                    6d:7f:18:6f:b3:79:e5:0b:52:78:42:da:73:c1:f0:
                    d2:ae:92:e7:9b:e3:c9:5a:14:95:4a:35:31:7c:82:
                    62:e9:43:e8:bc:32:79:01:d5:4b:07:2e:32:c4:6d:
                    76:94:b8:7c:7f:ac:8a:5d:14:3e:d8:7e:48:be:5d:
                    42:66:3a:07:f6:bb:50:dd:4b:75:ba:31:8e:2e:3d:
                    4e:ca:bd:b2:9f:74:ab:a1:93:87:f3:94:ce:3e:bb:
                    f0:e4:e7:9d:15:6e:3e:89:8f:7e:0f:02:38:f7:9d:
                    0e:7a:8a:a9:f4:e1:b2:69:dd:50:8f:41:a2:18:2e:
                    a8:ef:1d:4c:e6:a3:69:df:47:83:36:4e:20:94:4c:
                    53:8a:6e:fe:43:9f:68:29:be:fc:98:04:a9:93:d3:
                    99:cd:18:c3:7e:57:9d:97:81:5f:e9:0d:33:3b:a9:
                    8f:85:d2:fa:d4:1a:66:83:d1:c0:aa:60:04:71:92:
                    7d:91:28:94:43:ae:de:46:04:eb:21:52:71:82:0e:
                    10:c1:db:90:41:fc:19:9a:a3:3f:39:23:2e:ed:52:
                    26:a4:ff:e7:12:8d:1c:ba:4b:98:7c:6f:df:e1:4c:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:D5:57:7E:11:8F:12:23:91:BF:1C:1E:E9:46:57:69:EF:C1:D3
            X509v3 Authority Key Identifier:
                keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c6:31:45:8d:6e:06:ed:0a:f1:49:c3:2e:24:f2:04:44:1e:
         bf:51:f3:72:3f:cc:59:81:78:83:a0:56:4a:ee:b1:c3:24:bb:
         8b:46:30:72:72:54:b4:b8:31:92:99:a1:c6:b6:53:50:bf:40:
         b5:9a:07:78:5c:99:a6:ec:a6:94:5a:f6:ad:f2:e9:86:f3:17:
         be:88:ca:52:da:a4:42:d2:0b:e7:9d:f3:66:0c:1f:d8:0f:6e:
         9d:1c:40:61:d4:9e:c6:b3:ef:17:55:df:96:03:e1:e5:6b:de:
         e7:f5:32:e2:d5:9b:86:6f:8f:c7:2c:0b:a9:39:a7:d6:b7:42:
         5b:fb:c0:58:f2:5a:fc:84:52:af:a2:f2:ac:b7:a9:3b:9f:c5:
         92:01:ac:71:bc:3f:c6:ca:21:d3:d7:ee:f9:35:a9:17:e8:a5:
         f1:15:11:c1:75:92:0d:75:79:f3:22:ba:81:90:8b:df:46:f3:
         74:42:7d:a6:aa:f8:b0:59:63:61:68:ca:96:03:0f:eb:9b:a4:
         7c:15:b4:7b:01:9d:46:3b:9c:47:8a:74:f7:91:fc:2b:12:de:
         b1:c4:e1:27:bd:f8:ad:f8:ae:ce:4c:0e:4a:6e:3a:10:d8:49:
         29:20:bf:b1:2c:d7:34:7d:97:3a:f2:e4:96:58:36:7c:45:b1:
         7a:17:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:40:07 2026 by rpki-client