This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
File:                     vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json)
Hash identifier:          YyGAJVRaQc7Fc/IVwhtRQlSOSR2MhokXdxultcUzwxs=
Subject key identifier:   0D:8E:DB:94:1B:C2:EF:F1:E8:D2:E9:F1:FA:2B:F4:B7:E8:56:96:CC
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Certificate issuer:       /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial:       019C43C6E512192354ED4F0A0258AAF32F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
Manifest number:          0768
Signing time:             Mon 09 Feb 2026 19:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:34 +0000
Files and hashes:         1: EagfZf7uOA-EcxDU6NrLorRUTHg.roa (hash: ZzLwLxegYBjANU90XpuWKekpQSntlkwyY6ixkFnhEJs=)
                          2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: X7V9Bus2DCqW8mPqWxfcASTkbZxBgHTa+4yUGwZQvzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:e5:12:19:23:54:ed:4f:0a:02:58:aa:f3:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
        Validity
            Not Before: Feb  9 19:00:34 2026 GMT
            Not After : Feb 10 19:00:34 2026 GMT
        Subject: CN=0d8edb941bc2eff1e8d2e9f1fa2bf4b7e85696cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:cb:c8:be:3b:49:de:66:75:3c:72:74:64:
                    fb:3d:d4:fc:ee:eb:81:ae:f5:e9:cb:06:32:8a:88:
                    2e:a5:f4:88:3d:83:ed:09:df:b4:28:25:38:ac:26:
                    2c:60:4b:f3:00:55:e4:e1:77:62:7e:fa:13:11:7c:
                    ce:b9:d9:8a:42:41:b6:a0:97:46:7a:b1:03:c1:7f:
                    35:e8:91:0f:c8:8d:9d:09:14:93:7d:3c:61:ae:b5:
                    48:34:b2:92:6f:1e:33:64:9f:46:ac:bf:9d:c4:71:
                    05:5e:be:17:58:41:82:12:f9:9c:b1:53:44:07:db:
                    cc:be:16:5e:dd:1b:ff:e1:d6:03:65:ee:a0:bf:b3:
                    26:20:87:e5:0c:58:0a:cc:d6:c4:8e:85:2f:da:b5:
                    b7:8e:bc:cd:26:9f:d5:7f:f2:e1:31:c0:ae:7f:88:
                    1d:16:85:72:44:9e:e9:15:8f:03:be:0b:16:42:7a:
                    ec:89:d2:a5:f5:27:ad:27:2a:2d:74:fd:87:a4:c2:
                    8c:b1:54:64:89:13:3d:ec:0b:01:e7:28:9e:69:b9:
                    67:a1:ac:52:af:cb:77:81:e7:00:de:ab:65:34:17:
                    6d:81:e0:17:0f:ba:61:16:8d:75:2d:42:88:9c:25:
                    98:59:d6:e5:35:0b:d3:4c:f8:ee:10:01:ff:0b:c4:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8E:DB:94:1B:C2:EF:F1:E8:D2:E9:F1:FA:2B:F4:B7:E8:56:96:CC
            X509v3 Authority Key Identifier:
                keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:09:71:2c:db:2d:d4:8d:72:cb:bd:0e:97:f0:d1:05:9f:d1:
         25:52:95:0c:23:70:d5:7a:a3:78:2a:b7:ec:60:45:81:c7:90:
         ad:35:bc:c1:93:76:6b:69:68:ba:8f:eb:44:cd:80:b8:25:27:
         3d:3c:1e:14:ca:33:7d:16:1f:b7:6e:12:00:a7:93:d8:8a:f4:
         66:b6:b9:5e:6a:71:71:2b:4e:97:bc:56:dc:42:0d:bd:6c:76:
         6c:d5:19:91:91:f6:e6:24:ac:fa:d5:6c:0e:93:b5:f9:bb:27:
         d5:38:69:4c:dd:01:33:79:9d:31:ca:de:d0:d1:bc:df:1e:eb:
         49:39:e5:4f:ba:99:5a:8b:b8:33:58:1e:b4:c1:3d:89:59:6e:
         8f:1e:cc:84:08:8b:90:d1:8b:f8:23:e2:77:1a:d6:cb:5d:72:
         31:9b:c5:6a:04:da:e3:bf:05:1b:ab:a7:31:2e:3d:19:f8:e1:
         b7:a0:ab:74:69:46:a8:8c:17:ee:78:f8:df:50:b1:85:4c:3c:
         c4:5d:55:0f:65:5c:9f:b3:da:a7:f2:6c:56:1e:8f:10:dd:79:
         76:6a:78:80:f0:e5:c4:55:14:ce:4a:68:68:2a:28:1d:e2:54:
         f6:a7:61:e2:7a:2a:65:31:52:10:ee:06:53:ce:9d:a5:49:40:
         7f:47:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:54 2026 by rpki-client