This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
File:                     VoF64vtRPl4A1hv9MpOuTve_Im4.mft (raw, json)
Hash identifier:          Lt+pfLqn4w4tyN2W+hZ12DFO2ZE4+bY+1oGZCBfpg0g=
Subject key identifier:   DB:45:23:C1:F2:18:2F:C1:0A:71:58:20:27:A2:18:5A:89:E1:F4:30
Authority key identifier: 56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E
Certificate issuer:       /CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
Certificate serial:       019C43FE1DACEA8C3CB0B1ADCAEC7549A11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
Manifest number:          021D
Signing time:             Mon 09 Feb 2026 20:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:52 +0000
Files and hashes:         1: VoF64vtRPl4A1hv9MpOuTve_Im4.crl (hash: Qc/KjExqLWJhicyfo5GcwdppVTDa81zMtTJ/CvtfJtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:1d:ac:ea:8c:3c:b0:b1:ad:ca:ec:75:49:a1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
        Validity
            Not Before: Feb  9 20:00:52 2026 GMT
            Not After : Feb 10 20:00:52 2026 GMT
        Subject: CN=db4523c1f2182fc10a71582027a2185a89e1f430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:3f:01:ed:b5:b2:4e:4d:7f:6f:a2:04:22:
                    58:89:24:87:20:91:19:2a:cb:ae:c1:db:b7:11:78:
                    7b:59:b6:91:dd:e2:bc:6a:af:84:e6:2d:dc:cf:59:
                    b0:2b:89:2b:da:cb:1f:6c:e6:74:82:0d:b1:7a:40:
                    5e:67:c3:2c:b8:b8:e0:2e:66:fb:63:a6:fb:01:2c:
                    03:8d:7e:04:5f:09:b7:2a:26:90:91:b4:d1:8d:f8:
                    0d:81:85:bd:a8:9d:0e:c2:1b:b5:3d:dc:21:7b:53:
                    05:70:2e:1b:42:27:f8:5d:4a:65:50:97:03:d3:ec:
                    2e:06:b5:3e:9f:b1:56:62:c8:31:09:0c:1e:eb:d0:
                    cf:b9:f0:95:ff:78:3e:62:f9:66:c9:48:1a:80:32:
                    a8:eb:fe:30:8a:f7:fb:25:87:78:3a:14:ba:0a:a2:
                    43:c8:93:74:fb:22:c7:0f:a1:cd:9f:77:e9:21:54:
                    e1:70:de:d9:96:35:9a:b5:ae:ee:e9:8d:7c:a1:07:
                    a9:a6:d2:de:21:28:dc:ef:fc:ef:e6:59:7e:98:63:
                    c2:04:bd:2e:b4:cb:bf:4f:34:b7:9b:9f:96:09:cc:
                    2c:b2:86:f3:1f:33:a3:83:da:c3:16:a1:22:e0:7d:
                    a1:ec:3c:55:54:a4:0b:dc:2a:29:dc:47:9e:0e:bf:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:23:C1:F2:18:2F:C1:0A:71:58:20:27:A2:18:5A:89:E1:F4:30
            X509v3 Authority Key Identifier:
                keyid:56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c6:a6:d2:9c:fb:75:a3:a6:35:d0:4d:d6:c4:64:5f:70:97:
         23:53:7d:a5:b4:f3:fd:3f:9c:21:d4:51:d3:81:68:0e:e9:58:
         b9:35:d3:43:34:82:2d:c0:74:bd:f2:f1:f5:cd:71:4c:b5:45:
         c8:7a:88:6b:d8:44:e0:72:a8:e3:84:5f:62:7b:07:38:3a:c3:
         3b:bb:b2:9a:76:43:67:e9:de:99:79:c6:fa:22:18:58:59:51:
         b0:10:01:4e:21:ae:b2:8a:b2:be:47:a7:01:3e:a6:d3:3b:11:
         7f:ff:30:89:5a:f3:36:ad:10:0b:53:62:b6:d1:ea:44:90:4b:
         bc:a9:ed:75:f3:3f:a3:ef:9f:9e:d3:25:d0:39:ff:74:b4:0b:
         4d:32:f3:83:88:73:00:1b:fc:93:82:04:87:59:c1:f1:77:18:
         ad:96:6e:61:ea:0e:5a:86:7a:6f:89:b0:e3:45:17:92:7d:93:
         65:fe:1d:21:86:ae:d1:33:af:e7:ed:a5:30:0e:12:3b:88:2a:
         67:40:45:4f:b3:c9:19:eb:8f:ec:9a:c4:40:bb:fe:6d:e2:5c:
         da:93:f9:19:e6:da:a1:82:ac:27:33:f8:6d:e2:2c:79:4b:5b:
         fb:75:01:22:f7:aa:a9:84:72:20:18:19:4d:0d:da:97:ee:64:
         66:df:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:08 2026 by rpki-client