This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File:                     vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier:          ydzUnKgSXmoZQqJM2vMmdhRPGR5pcUTeQPJG6Hfc+wU=
Subject key identifier:   A7:87:1B:C3:87:FA:89:E2:30:70:F6:1D:82:21:2C:9F:A8:DF:7B:AB
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer:       /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial:       019C4358C97A210C8730F8B77E89CE6D746E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number:          05FA
Signing time:             Mon 09 Feb 2026 17:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:18 +0000
Files and hashes:         1: jshUcB9xo_4UjMSMpv_Atyyty9w.roa (hash: An++hrgldtP3cS4PiEwsT48K4V8iq3LI6SDvvL0nHOE=)
                          2: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: w7f+2q6qREFeFbXTkwfGgegk5cdhYL1ANtZpsnLOdMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:c9:7a:21:0c:87:30:f8:b7:7e:89:ce:6d:74:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
        Validity
            Not Before: Feb  9 17:00:18 2026 GMT
            Not After : Feb 10 17:00:18 2026 GMT
        Subject: CN=a7871bc387fa89e23070f61d82212c9fa8df7bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:99:68:be:89:fb:54:a2:46:b2:a7:c9:9f:
                    91:25:a1:b5:ac:7e:2d:80:f2:f0:51:8c:74:0a:d7:
                    d0:cb:c0:ed:11:48:61:9d:e3:7b:6b:51:9a:b6:fe:
                    73:16:40:b7:62:5f:bf:b6:0a:39:92:b5:da:d4:e9:
                    d6:e9:18:c7:d4:d8:ba:ff:2a:08:a5:d2:da:4f:cc:
                    6b:f4:7e:06:27:bd:c4:ea:56:df:a8:c4:89:e1:39:
                    7d:72:5d:55:45:a2:bc:d9:06:e8:f9:08:89:09:3a:
                    d3:5f:b6:31:ae:50:23:76:a6:ad:1b:12:61:f7:cc:
                    fe:8f:ef:dc:7f:92:cc:71:b3:03:ab:00:13:45:b3:
                    22:42:be:45:c8:e1:3a:d6:3a:44:79:69:be:a8:eb:
                    00:ef:6c:94:92:b8:86:2d:0d:69:64:42:44:19:38:
                    e2:9e:c4:ce:5d:07:58:1f:95:90:22:91:d2:cb:9a:
                    69:03:ed:84:46:ad:9e:97:03:07:ba:27:d4:16:c5:
                    c9:a1:ac:46:52:56:5e:51:23:f9:bb:0f:0a:ce:03:
                    af:e1:ce:a6:7b:7d:ca:aa:9a:50:5e:17:2c:8d:d0:
                    7d:30:65:2f:42:e9:ed:e1:39:c6:a1:b3:44:8b:a5:
                    9c:47:36:01:d2:71:b4:f5:63:83:69:de:cf:40:b4:
                    c3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:87:1B:C3:87:FA:89:E2:30:70:F6:1D:82:21:2C:9F:A8:DF:7B:AB
            X509v3 Authority Key Identifier:
                keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:54:4a:f9:0c:af:bb:58:3b:f0:a7:2a:9f:c5:42:a6:c0:23:
         ba:67:5d:07:46:42:b3:1e:13:78:14:af:79:31:fb:b0:68:60:
         00:36:43:85:ae:61:a7:10:e5:95:5e:3d:6b:0f:c8:87:98:6c:
         35:11:6b:10:2a:97:d0:0d:63:00:79:d0:6f:ce:d9:82:ba:c2:
         8e:a7:39:60:6d:69:ab:e5:8f:74:7d:27:69:69:8f:b9:3d:4c:
         f7:56:bf:a9:0c:93:15:2c:e4:16:17:16:54:1d:1f:05:78:d0:
         b2:60:17:4c:e3:e4:01:95:46:b9:3f:07:81:3a:a2:16:f1:2a:
         e1:83:1b:39:cc:fa:e9:4b:ec:4d:49:0b:8a:fe:79:59:32:ff:
         7c:5f:20:fe:b7:e6:a4:6a:a5:ad:08:75:3d:9a:a0:8f:11:82:
         7c:9e:ec:94:29:e7:93:1e:cb:d8:04:ce:83:ff:53:80:60:f9:
         6a:19:6a:b8:ca:c8:55:e2:a6:57:70:47:95:60:28:ac:5b:4d:
         82:c3:64:2d:e3:37:ba:98:f9:b5:45:3c:b9:96:7c:52:9a:36:
         f3:a3:6e:db:4d:a4:a2:7d:16:43:3f:74:8d:7d:cd:2d:89:d6:
         90:ff:ae:44:70:65:37:a6:c8:b4:da:55:8b:10:28:a4:f4:a5:
         4c:b7:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:05 2026 by rpki-client