This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File:                     VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier:          kQn1WiY8/kc6GWXyOri1cPxPQuoOXCqOmc/I0I55Gf8=
Subject key identifier:   EC:50:2F:82:3D:30:B6:CD:6A:17:0B:35:5D:C5:9A:98:D2:C5:40:29
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer:       /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial:       019C41A1C5BC76A9E3B6930F66403A2BEB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number:          0DA5
Signing time:             Mon 09 Feb 2026 09:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:46 +0000
Files and hashes:         1: 6wW52SOqWXrfAlhosP3ynpLxyA0.roa (hash: FwT8E7oaMMyN8V9+/04Bhii7J8JtbQGmipn/OxYLQDA=)
                          2: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: ACRrC2Px8sYkGTGQcvhgl7blqkeagfhrCrMe5vkJ6c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:c5:bc:76:a9:e3:b6:93:0f:66:40:3a:2b:eb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
        Validity
            Not Before: Feb  9 09:00:46 2026 GMT
            Not After : Feb 10 09:00:46 2026 GMT
        Subject: CN=ec502f823d30b6cd6a170b355dc59a98d2c54029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:31:84:25:c2:c1:08:de:f4:a1:a9:9e:f3:
                    e2:77:f6:71:75:11:2d:80:13:e8:61:0b:3b:11:55:
                    4c:59:21:4b:c4:4a:a3:7c:10:e2:08:66:26:43:fe:
                    f1:49:c5:b3:00:d6:a2:f9:60:25:53:de:7a:1c:08:
                    d3:55:d9:c0:ca:87:d6:f8:cb:d8:b8:1f:1a:f8:0c:
                    ff:b8:41:1b:fd:f8:09:ce:2d:d1:46:49:6a:d9:ef:
                    09:16:d2:08:9a:14:35:ec:c3:56:3b:f4:c6:05:86:
                    64:bc:6b:f1:77:3d:7c:3f:1d:89:f7:cd:e2:8c:84:
                    be:02:bd:86:01:16:c1:a0:c7:c7:a3:8c:a6:cb:c5:
                    00:12:19:a4:0c:bd:bc:19:f1:2f:5f:dd:1c:c5:23:
                    a1:e5:a1:0a:e2:9a:83:75:1e:20:63:fa:ee:77:89:
                    4a:7f:de:a3:e5:8f:25:00:6f:49:73:6b:3e:16:bc:
                    58:1f:77:d5:0d:22:6e:9c:88:5a:b8:78:7c:1f:9c:
                    6b:55:17:cb:b0:3e:07:30:8a:41:71:c1:12:38:fe:
                    32:09:dd:fd:18:9b:c5:0b:1e:eb:69:35:3d:90:27:
                    df:54:ff:eb:db:70:4c:86:c6:1b:30:d2:a7:e9:ae:
                    1e:26:aa:21:52:7d:80:41:44:e6:52:8b:11:cd:e1:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:50:2F:82:3D:30:B6:CD:6A:17:0B:35:5D:C5:9A:98:D2:C5:40:29
            X509v3 Authority Key Identifier:
                keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:4f:d6:e0:f0:67:e4:83:f4:6a:06:30:8d:a1:ce:48:cb:
         79:43:f6:54:b9:0a:1c:09:66:62:2c:39:bf:e1:07:61:92:e7:
         1e:65:c0:b4:bf:6a:86:37:6c:63:46:8f:db:60:db:38:be:c1:
         29:8c:88:03:6a:c2:5d:6d:0a:a7:e0:48:7e:52:fa:49:90:39:
         5a:8a:cd:e0:96:ad:1a:45:3c:d4:23:6b:cd:68:46:b7:4d:ea:
         74:a6:00:ac:01:70:72:fc:53:58:80:e5:17:46:89:c3:c1:e8:
         a3:82:fe:5a:80:a4:61:cc:98:10:c0:cf:0f:ec:98:53:8e:61:
         01:9e:02:0c:4a:d3:fe:2e:b0:76:73:b8:98:5b:44:2e:9c:7b:
         9b:48:97:d4:0c:a6:99:dc:19:d6:c8:61:a9:55:a3:9f:58:ca:
         79:2a:45:b7:92:c3:21:7c:2f:e6:7b:c1:bb:c6:8c:46:bc:bb:
         ea:fd:9f:e2:59:6f:b5:60:7c:28:8d:81:af:f7:b2:28:8d:a1:
         64:07:cf:2f:0c:85:c5:38:f7:c9:cd:82:77:01:9a:d5:c0:c2:
         45:76:3e:89:f4:c0:92:97:55:92:fb:3b:61:c6:b4:97:fe:38:
         12:ff:20:e5:7c:23:48:bd:1f:dd:26:a3:eb:38:b3:05:7b:d0:
         9c:81:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:18 2026 by rpki-client