This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File:                     vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier:          1rGQbYvUPsWB/pdKFqYpE51gc3yqZhE8SKoqDXosFX0=
Subject key identifier:   EE:74:37:F6:08:16:E6:2F:36:73:1D:AC:F6:8C:AD:D2:88:4D:F4:5C
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer:       /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial:       019C4322F8500F77C0BC16B9B375FFBB60F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number:          0795
Signing time:             Mon 09 Feb 2026 16:01:30 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:30 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:30 +0000
Files and hashes:         1: aENpbZFMMBWYCci1um8I0GEZSKc.roa (hash: bJqlLgnRm20xht7mBqwuocxi1HbSlACC3bpe5sLs4l4=)
                          2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: iP+F+LCyZX/vjSjhvj7d+LF3zuE7LmNcgLhuiDScy6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:f8:50:0f:77:c0:bc:16:b9:b3:75:ff:bb:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
        Validity
            Not Before: Feb  9 16:01:30 2026 GMT
            Not After : Feb 10 16:01:30 2026 GMT
        Subject: CN=ee7437f60816e62f36731dacf68cadd2884df45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:6d:5d:91:05:6b:6f:10:03:50:f2:76:e6:
                    39:f6:75:d2:3d:8e:f8:4c:90:a0:85:41:38:08:1f:
                    1f:9c:0e:2d:98:cc:1b:38:c2:73:7f:0a:8a:e4:6f:
                    74:dd:5a:11:4d:97:e3:7f:5d:52:d5:2b:43:31:02:
                    95:ef:5f:90:1c:4e:1b:11:b7:31:1f:73:24:bb:f6:
                    ff:c7:72:b7:56:73:d3:b3:42:80:b5:bf:3c:78:51:
                    4c:8e:c3:48:78:68:27:4d:52:f5:18:37:17:df:c5:
                    c4:8d:52:ac:88:22:30:5b:f1:fb:3b:b5:e9:bf:15:
                    70:3f:2a:bd:14:8e:a6:59:45:6e:ef:d1:75:5b:50:
                    1f:e3:f9:f5:ba:a3:82:9d:cf:b8:6b:2e:aa:8e:0c:
                    5e:4e:52:ca:78:95:d1:84:f3:93:72:ae:26:1c:48:
                    88:74:fe:bc:9a:3e:9b:76:aa:85:55:71:52:e2:51:
                    39:bf:ec:1c:da:45:b0:69:7a:78:43:c1:d0:19:3c:
                    a9:7d:75:23:a3:af:b7:25:1c:aa:35:00:62:38:b1:
                    e9:e0:08:79:de:19:8d:32:04:0a:c2:4e:69:2b:79:
                    91:73:73:a2:56:f7:7b:53:6b:0b:2a:38:9f:f5:9a:
                    90:c8:20:da:83:11:8a:48:46:b9:52:8a:73:28:9a:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:74:37:F6:08:16:E6:2F:36:73:1D:AC:F6:8C:AD:D2:88:4D:F4:5C
            X509v3 Authority Key Identifier:
                keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:f3:fd:6b:64:07:cf:41:e1:a3:4e:79:25:84:68:47:97:
         ae:77:fa:14:90:03:47:86:4c:b4:39:ac:c8:ec:a0:fb:ff:5d:
         4d:66:c6:f2:5c:d6:06:71:6d:d4:9f:9e:11:30:63:13:55:60:
         dd:15:2c:15:59:19:59:fc:b4:a8:fd:a5:b0:92:5c:78:86:d5:
         8e:66:59:3c:db:ec:2c:f0:49:00:73:95:38:7d:dd:7e:83:18:
         4e:c4:ea:7c:a6:9d:72:03:a1:d1:40:42:24:06:e6:d6:bd:6f:
         a8:3c:42:74:95:94:32:ad:1a:f4:16:2c:76:c3:7c:e1:2c:6f:
         65:85:c2:84:50:38:ad:6f:8a:18:00:c5:d7:04:55:b6:df:3e:
         51:66:d4:a6:c4:bb:a0:1a:76:7c:86:ca:51:ff:45:66:bc:38:
         82:63:51:1e:1a:0b:c4:49:d2:71:ac:e0:5d:b8:0e:e2:81:48:
         15:f3:d6:be:02:fe:54:74:4b:ea:a5:19:51:61:76:4b:f5:31:
         ec:94:ee:38:aa:aa:34:4c:9d:c7:c1:b0:f0:96:48:25:70:dd:
         09:ce:28:2b:c0:d5:10:4d:0c:5c:9c:16:ab:8c:cb:44:5e:a9:
         e3:5b:51:14:c2:f8:12:03:a2:cf:77:a9:d6:7e:25:4b:19:75:
         94:b2:33:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIvhQD3fAvBa5s3X/u2DwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjQ5NzA0N2YyMGQ2ZjcwOGQ3ZGI0MjU1N2I2OThmYmZi
M2Q4ZmIwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD
EyhlZTc0MzdmNjA4MTZlNjJmMzY3MzFkYWNmNjhjYWRkMjg4NGRmNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3BtXZEFa28QA1DyduY59nXSPY74
TJCghUE4CB8fnA4tmMwbOMJzfwqK5G903VoRTZfjf11S1StDMQKV71+QHE4bEbcx
H3Mku/b/x3K3VnPTs0KAtb88eFFMjsNIeGgnTVL1GDcX38XEjVKsiCIwW/H7O7Xp
vxVwPyq9FI6mWUVu79F1W1Af4/n1uqOCnc+4ay6qjgxeTlLKeJXRhPOTcq4mHEiI
dP68mj6bdqqFVXFS4lE5v+wc2kWwaXp4Q8HQGTypfXUjo6+3JRyqNQBiOLHp4Ah5
3hmNMgQKwk5pK3mRc3OiVvd7U2sLKjif9ZqQyCDagxGKSEa5UopzKJqO+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO50N/YIFuYvNnMdrPaMrdKITfRcMB8GA1UdIwQY
MBaAFL1klwR/INb3CNfbQlV7aY+/s9j7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUt
ODJhMTA3YzRhN2UyLzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81ODMzZjMtMjQyMS00MWIwLWJlMmUtODJhMTA3YzRhN2Uy
LzEvdldTWEJIOGcxdmNJMTl0Q1ZYdHBqNy16MlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI43z/Wtk
B89B4aNOeSWEaEeXrnf6FJADR4ZMtDmsyOyg+/9dTWbG8lzWBnFt1J+eETBjE1Vg
3RUsFVkZWfy0qP2lsJJceIbVjmZZPNvsLPBJAHOVOH3dfoMYTsTqfKadcgOh0UBC
JAbm1r1vqDxCdJWUMq0a9BYsdsN84SxvZYXChFA4rW+KGADF1wRVtt8+UWbUpsS7
oBp2fIbKUf9FZrw4gmNRHhoLxEnScazgXbgO4oFIFfPWvgL+VHRL6qUZUWF2S/Ux
7JTuOKqqNEydx8Gw8JZIJXDdCc4oK8DVEE0MXJwWq4zLRF6p41tRFML4EgOiz3ep
1n4lSxl1lLIzNA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:08 2026 by rpki-client