This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          W5P7HAziMW46uYDXiN3wipzF2XczThuuV79KLvHJFIU=
Subject key identifier:   A3:98:59:4A:59:36:DD:B4:A8:16:3D:71:F6:9D:BE:70:76:0A:37:A5
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       019C42B4333571451F83EF4CFD49FCBCBBF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:31 +0000
Files and hashes:         1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: h6IjvgGDEgJfh7qoQ1K19AQIhnPAdhSV0ID2yHAbHZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:33:35:71:45:1f:83:ef:4c:fd:49:fc:bc:bb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Feb  9 14:00:31 2026 GMT
            Not After : Feb 10 14:00:31 2026 GMT
        Subject: CN=a398594a5936ddb4a8163d71f69dbe70760a37a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:13:ae:de:0c:8c:cd:ba:19:2f:af:3d:a3:1a:
                    a5:0e:d1:42:03:3a:f4:92:17:95:c1:db:09:92:21:
                    6e:b0:3b:f5:7d:b8:d8:78:6e:57:40:af:07:be:f2:
                    90:70:50:10:20:d7:39:9f:d9:2e:e0:5c:13:a3:0d:
                    e4:0c:ca:9e:1a:88:a7:bf:19:c1:d5:0e:f7:41:00:
                    33:ff:08:70:4e:f8:51:14:d2:2f:30:33:27:e1:fa:
                    06:c6:74:0a:2c:d7:27:65:ce:33:8c:eb:18:46:5f:
                    7b:b1:4e:30:7e:37:b9:89:83:ca:69:3c:b7:c4:3f:
                    a5:51:78:8c:51:0d:10:1a:04:55:b4:a2:39:f6:29:
                    05:ba:ca:eb:8f:47:e8:27:36:e4:96:06:0c:c1:db:
                    dc:da:c6:de:31:98:93:be:75:c9:a9:17:6c:33:68:
                    9a:95:ee:87:17:83:d3:f3:44:45:18:50:df:28:72:
                    a8:93:24:05:0b:ca:15:f6:a8:c8:56:2e:6f:dd:44:
                    05:f3:0c:fa:93:93:58:eb:6c:49:a6:b2:4d:d7:2c:
                    24:41:62:b7:85:78:85:bf:f2:85:e9:3b:f2:86:3b:
                    62:b4:d8:df:1b:5e:72:2e:cc:ca:5a:55:69:b9:f9:
                    60:9d:68:d8:43:80:54:9a:a2:69:78:6c:6b:7c:8f:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:98:59:4A:59:36:DD:B4:A8:16:3D:71:F6:9D:BE:70:76:0A:37:A5
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:66:f4:2d:ed:4f:ff:61:c2:26:7a:27:ab:87:7b:0a:a0:87:
         6e:5a:af:9c:d4:26:ba:12:c6:62:54:e7:90:af:d8:8c:7c:24:
         b3:99:d8:b0:2e:68:c5:6e:67:43:a2:2e:69:ab:07:82:d5:7d:
         6b:35:e1:86:84:79:a1:24:be:53:39:5f:2d:0c:34:9c:42:b3:
         17:ef:63:7e:e3:8d:37:82:0f:ee:9e:85:11:a9:23:00:b3:37:
         d2:85:3d:40:f4:54:61:57:b1:59:2a:db:4b:b3:2f:31:f0:1e:
         a0:8e:e3:23:0f:0c:8f:90:d4:45:ac:db:0b:e4:ca:5c:63:e0:
         c5:d4:59:6b:6e:1d:5a:13:f3:3b:da:81:f3:c0:50:cd:39:c4:
         90:f4:ee:e2:fb:de:4d:b3:63:05:dd:ae:db:fb:89:4e:dd:7d:
         7e:0a:2f:71:42:c2:6f:c1:fb:07:88:e4:7a:b1:c1:7f:31:75:
         dd:1f:80:b0:9d:6f:d3:26:e4:2d:0c:42:db:6a:8b:01:3f:c2:
         9e:47:8e:cf:54:c0:80:e8:69:90:f1:04:9c:ff:ff:24:39:be:
         86:a5:ba:74:29:d8:91:10:01:3d:41:32:74:06:c9:f8:be:b7:
         c1:74:34:d9:12:21:5e:90:c9:2b:13:48:ce:f7:54:4e:18:ca:
         2e:0a:3b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtDM1cUUfg+9M/Un8vLv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy
ZjIzZDgwHhcNMjYwMjA5MTQwMDMxWhcNMjYwMjEwMTQwMDMxWjAzMTEwLwYDVQQD
EyhhMzk4NTk0YTU5MzZkZGI0YTgxNjNkNzFmNjlkYmU3MDc2MGEzN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hOu3gyMzboZL689oxqlDtFCAzr0
kheVwdsJkiFusDv1fbjYeG5XQK8HvvKQcFAQINc5n9ku4FwTow3kDMqeGoinvxnB
1Q73QQAz/whwTvhRFNIvMDMn4foGxnQKLNcnZc4zjOsYRl97sU4wfje5iYPKaTy3
xD+lUXiMUQ0QGgRVtKI59ikFusrrj0foJzbklgYMwdvc2sbeMZiTvnXJqRdsM2ia
le6HF4PT80RFGFDfKHKokyQFC8oV9qjIVi5v3UQF8wz6k5NY62xJprJN1ywkQWK3
hXiFv/KF6TvyhjtitNjfG15yLszKWlVpuflgnWjYQ4BUmqJpeGxrfI/XhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOYWUpZNt20qBY9cfadvnB2CjelMB8GA1UdIwQY
MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt
Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1
LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2b0Le1P
/2HCJnonq4d7CqCHblqvnNQmuhLGYlTnkK/YjHwks5nYsC5oxW5nQ6IuaasHgtV9
azXhhoR5oSS+UzlfLQw0nEKzF+9jfuONN4IP7p6FEakjALM30oU9QPRUYVexWSrb
S7MvMfAeoI7jIw8Mj5DURazbC+TKXGPgxdRZa24dWhPzO9qB88BQzTnEkPTu4vve
TbNjBd2u2/uJTt19fgovcULCb8H7B4jkerHBfzF13R+AsJ1v0ybkLQxC22qLAT/C
nkeOz1TAgOhpkPEEnP//JDm+hqW6dCnYkRABPUEydAbJ+L63wXQ02RIhXpDJKxNI
zvdUThjKLgo7BQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:36 2026 by rpki-client