This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File:                     vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier:          1TinlcxRc54nz+4ZQCCjTz4td+uxmbL0i1QZ8WC6lms=
Subject key identifier:   0C:59:46:14:40:C4:FC:58:A7:65:6E:7C:E2:14:95:5B:73:ED:86:9C
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer:       /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial:       019C427D1F1523A9D35DD7AFA2A90D01F82A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 13:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:21 +0000
Files and hashes:         1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
                          2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
                          3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: /6xsOrSbOE/l0IBUGXJv5d/W2Zld5gVbnrwMMeQVQmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:1f:15:23:a9:d3:5d:d7:af:a2:a9:0d:01:f8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
        Validity
            Not Before: Feb  9 13:00:21 2026 GMT
            Not After : Feb 10 13:00:21 2026 GMT
        Subject: CN=0c59461440c4fc58a7656e7ce214955b73ed869c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:4a:cd:19:c0:da:31:1c:a4:2f:59:58:0f:
                    2f:f5:bc:b9:35:30:58:4c:a7:a4:29:02:06:3d:30:
                    f9:35:5f:cf:58:e7:b6:9c:97:58:1e:13:85:5e:49:
                    f0:b5:0a:30:b0:75:ce:cd:ce:f4:90:c1:7b:49:32:
                    ab:c4:1d:62:e1:c0:5a:1c:e7:4a:3a:eb:0d:45:cd:
                    f4:84:e4:f2:38:5b:bf:9d:43:24:14:8d:7d:60:c0:
                    53:c8:77:63:52:b7:5a:88:a9:ec:3f:21:fc:ec:22:
                    7f:72:d8:1d:0d:c0:c7:be:d0:2e:ab:32:24:1a:47:
                    f7:4a:73:43:5a:10:c7:11:42:de:e7:83:cc:ec:82:
                    a7:b1:98:2d:b1:2a:f0:74:c3:d2:37:17:4d:26:91:
                    cb:20:09:dd:80:fc:e6:ab:d7:c5:9e:94:ef:fd:6f:
                    dc:a8:86:a9:26:26:10:ff:2a:9f:8e:6f:84:74:ec:
                    b0:c9:1e:f4:e7:73:0d:40:00:8a:3f:49:31:71:d3:
                    11:f2:27:13:78:56:b1:35:ec:d7:4d:6c:68:d6:fa:
                    94:95:db:be:a7:2b:91:07:43:cc:96:ad:4e:68:78:
                    19:9a:76:71:95:6e:84:d7:62:c0:1c:1c:12:10:1c:
                    36:62:0d:0e:c1:7f:54:19:1e:10:f2:42:99:f1:34:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:46:14:40:C4:FC:58:A7:65:6E:7C:E2:14:95:5B:73:ED:86:9C
            X509v3 Authority Key Identifier:
                keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:56:3c:3a:ba:52:e1:0e:a4:2c:82:e6:46:4c:e2:8c:1d:
         ec:4b:37:82:19:f4:07:5b:8c:d9:e9:7c:1b:dc:03:8a:68:a1:
         09:9f:24:fc:45:5a:5c:1e:60:eb:ab:94:04:52:cd:ea:a4:19:
         85:82:c8:08:cb:8a:08:24:83:25:7e:ea:c3:ad:27:5a:49:c8:
         40:25:ff:e5:76:3f:18:9f:ee:cd:73:34:81:36:d0:68:c1:18:
         fd:be:ac:ab:41:41:05:9d:d6:c1:28:42:b9:39:51:5e:8d:d7:
         f9:64:3f:ef:72:b8:87:c5:4e:d4:9f:6b:fc:ed:39:40:6e:f6:
         d4:ca:fb:63:97:1d:c4:a9:20:dd:a1:33:5d:97:ed:4f:64:24:
         6d:3f:55:85:9b:ee:07:61:0c:ce:7f:85:45:78:b7:11:8f:62:
         b6:e7:4b:5a:a0:b8:89:df:12:fa:14:96:d1:37:45:be:8c:0f:
         e0:8d:ff:ce:81:15:08:50:88:1e:0b:47:28:88:20:c6:c0:09:
         b8:ed:ee:cd:48:05:1d:9b:a9:59:f1:e3:fa:4b:18:91:a8:a8:
         3e:7b:93:6a:10:ed:f7:42:6e:fa:07:37:6f:b5:bc:87:7c:d8:
         47:b4:35:bc:16:a7:4b:55:51:8c:bb:9a:b7:c8:c1:51:63:5f:
         c5:12:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:48 2026 by rpki-client