This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File:                     VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier:          cNwBDvyneacuyCKJELmsu5ytjKhgRmnzQE0PmMlzg2M=
Subject key identifier:   AA:99:82:2F:00:76:A6:C8:C2:7F:FD:EC:64:D5:51:2C:06:99:1A:BF
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer:       /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial:       019C4246B0BE1612584262320D4EC840DD32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number:          0391
Signing time:             Mon 09 Feb 2026 12:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:54 +0000
Files and hashes:         1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: Pm87BssLF2isVabqW12fh+eIXjJ7SmCT36QGwTE2K1U=)
                          2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:b0:be:16:12:58:42:62:32:0d:4e:c8:40:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
        Validity
            Not Before: Feb  9 12:00:54 2026 GMT
            Not After : Feb 10 12:00:54 2026 GMT
        Subject: CN=aa99822f0076a6c8c27ffdec64d5512c06991abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:70:d8:ff:0d:e3:72:32:8f:a9:cf:ec:cb:
                    2d:f5:84:e7:49:5b:d9:28:0f:09:b8:14:be:b2:79:
                    3f:bb:b1:bd:b8:cf:07:08:8d:1f:18:1f:e1:1e:34:
                    58:ac:cf:d2:c2:67:27:2b:ab:9c:40:6f:70:85:22:
                    7b:8f:c8:d9:0a:ae:86:35:9b:57:54:ed:ac:3d:84:
                    81:6d:bc:ff:bf:49:63:36:e5:05:6f:2b:0c:6b:52:
                    0c:75:0a:6e:70:89:10:60:de:a9:fc:14:66:1f:63:
                    0d:82:1b:ee:33:45:74:f7:ae:d6:c5:39:04:36:54:
                    71:bf:c8:db:47:cb:7a:54:37:8b:88:d7:81:a3:ae:
                    57:7d:92:95:83:9f:11:7e:e7:9c:13:f7:c6:1d:c9:
                    25:42:4b:ef:90:b1:11:a8:4e:17:8d:d7:ad:08:dd:
                    44:5a:d8:1c:f5:f5:52:ff:f4:ee:c5:98:b9:9f:5e:
                    3f:b1:e3:79:ba:ea:3b:d0:27:8a:1f:c5:12:fe:ed:
                    01:51:d9:89:24:78:6d:1d:bf:6b:d4:f1:19:30:0e:
                    b3:5d:de:1b:34:d5:5a:9e:0c:4d:48:77:2d:99:4f:
                    15:c0:2b:c1:e4:ef:18:a6:53:52:63:60:da:a9:c6:
                    ae:18:4e:74:d2:b6:af:a3:bc:6d:93:2d:7a:e7:5f:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:99:82:2F:00:76:A6:C8:C2:7F:FD:EC:64:D5:51:2C:06:99:1A:BF
            X509v3 Authority Key Identifier:
                keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:bf:fb:a5:e8:24:89:1f:ed:ba:a4:1f:5b:17:d7:bb:25:03:
         a4:75:e8:d5:4a:bf:d4:5a:26:8a:27:8d:72:56:1a:1f:2a:b1:
         69:f9:1a:d4:cd:c6:7b:7e:59:dc:80:f1:1b:01:1d:cc:75:a0:
         91:46:b5:08:e1:95:a6:67:81:53:bb:dc:d7:3a:a8:92:76:9d:
         41:48:ca:fd:ab:06:40:9f:66:d4:22:aa:0e:fd:37:96:bc:07:
         37:16:54:67:cc:2d:fb:09:57:b7:2c:cc:5a:88:01:64:c2:7b:
         56:d7:b5:39:6b:85:0e:f0:28:cb:6f:66:a6:46:58:7a:77:b3:
         35:5b:15:09:3d:c1:d6:2a:00:3e:7e:ee:08:a0:8d:9b:94:f0:
         a2:1c:9f:c3:e9:20:b5:43:71:5d:04:bf:c3:1c:f8:be:ef:e8:
         56:6b:8b:51:a5:be:ae:99:2b:1d:a8:41:c6:cf:94:d7:e1:e9:
         ef:92:de:fe:3d:65:39:91:bb:54:7c:39:25:e5:62:72:ad:24:
         69:56:6a:bf:58:e9:c7:10:91:5a:97:ef:48:0d:17:4c:30:11:
         b5:b0:1d:07:14:1b:2b:b1:9e:5b:01:29:cb:a7:fd:e5:58:37:
         aa:45:e3:3c:4e:20:12:32:fd:d0:4f:98:9e:9a:9f:08:ad:c9:
         a8:d2:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:17 2026 by rpki-client