This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File:                     vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier:          40Stke7kLFC3OKbmh9NF7xqM5lRY2jAW6Jo8PC+mOgg=
Subject key identifier:   7D:59:22:1B:73:42:63:7A:F4:2A:F5:17:6F:97:86:E9:C4:19:3C:90
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       019C432285664E1EECC2D47BA1CC73C3D9E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number:          040B
Signing time:             Mon 09 Feb 2026 16:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:01 +0000
Files and hashes:         1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: 1MiV8h4hAPaZGfim3kTNw8KbtyFXQWsrE0msQwH8F5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:85:66:4e:1e:ec:c2:d4:7b:a1:cc:73:c3:d9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Feb  9 16:01:01 2026 GMT
            Not After : Feb 10 16:01:01 2026 GMT
        Subject: CN=7d59221b7342637af42af5176f9786e9c4193c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:6c:b3:3a:d9:ed:fd:04:55:6f:f7:6d:c5:
                    71:a5:47:dd:6e:af:63:f8:23:c3:6a:b7:6f:ee:44:
                    5b:7e:a5:9e:2a:6b:0a:c3:49:aa:e4:19:e7:eb:69:
                    c6:2f:ba:f0:b1:be:b1:63:ef:ed:8f:fd:82:46:a4:
                    1b:71:2a:ad:31:d8:ee:4b:68:07:b9:0a:df:9d:d1:
                    da:cb:b1:59:a2:42:98:63:03:ba:c3:ae:f1:06:59:
                    0e:47:91:07:46:0d:57:39:2d:9f:a2:e1:14:5c:22:
                    c8:c6:ed:0a:db:0a:cb:b2:8a:63:ef:b6:4d:16:11:
                    9e:83:57:ba:1d:a1:78:6a:19:c2:27:f8:54:27:4f:
                    38:57:94:be:a8:67:61:9d:56:ca:65:f9:7a:64:c5:
                    8c:e6:9a:2a:dd:ca:28:ff:d5:56:bc:1f:f4:7b:27:
                    b9:c7:24:3b:32:0c:27:6c:ab:4a:1c:29:3f:30:3e:
                    a2:d9:9f:79:de:ae:e5:47:e8:ce:5d:40:61:4b:14:
                    4a:01:dd:48:ec:4d:cb:65:4a:07:88:6e:7f:c8:7e:
                    01:53:21:41:c1:e5:51:ce:e6:dc:e4:86:93:6c:4e:
                    07:7f:45:25:f8:4c:f9:f1:e8:55:f3:92:73:88:ad:
                    db:cf:fe:31:5c:12:15:0f:76:81:6b:f3:80:c7:ae:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:59:22:1B:73:42:63:7A:F4:2A:F5:17:6F:97:86:E9:C4:19:3C:90
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:2b:82:79:3a:90:9c:73:0e:c2:8d:0d:e1:22:cc:eb:81:
         70:ab:99:cd:92:f0:ba:df:48:d1:8e:4b:dd:4e:df:4b:53:dd:
         9f:02:bf:79:b2:5d:00:82:b4:0e:79:09:c4:0e:20:3e:25:06:
         ac:61:4c:58:d5:ac:da:a1:2a:24:29:06:1f:63:6e:2e:01:4a:
         3b:cf:ba:cc:04:85:15:d2:ab:0b:fd:cd:09:91:d9:23:cc:6c:
         19:8b:29:b2:05:41:bb:71:31:7e:fe:7e:d0:93:39:42:89:68:
         2c:93:b7:b1:1a:c3:17:ba:15:56:f2:5d:bd:43:5d:87:99:24:
         8a:01:f5:20:aa:06:9e:fa:d4:62:38:62:47:2c:9a:e3:14:37:
         8c:a9:08:1a:90:74:1a:6e:7a:91:66:79:9f:a6:d5:2c:a2:74:
         32:b2:b7:23:23:e8:87:33:21:40:c8:ec:c9:ec:86:8f:88:30:
         18:af:29:81:db:78:99:fb:18:a8:07:be:3d:02:b1:da:ac:f0:
         fb:97:dd:84:9e:b9:de:c7:e1:89:f5:cd:9c:c6:f8:01:17:2f:
         39:79:06:af:de:5c:be:58:12:06:55:45:c6:76:84:e4:63:db:
         de:b2:fc:0e:e9:70:6f:52:7e:26:ac:5b:9a:48:f1:f0:c3:80:
         6f:d6:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:39 2026 by rpki-client