This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File:                     vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier:          X5dyh9y5iWWSgAE9c7M2aaFyBI2S2Ne+uMnKUnptlIo=
Subject key identifier:   42:AA:0C:E9:6C:A7:59:47:C3:AF:6E:B2:E6:4C:F2:CD:18:67:C8:57
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer:       /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial:       019C427D8D3602F8E144B34993427756F456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number:          120A
Signing time:             Mon 09 Feb 2026 13:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:50 +0000
Files and hashes:         1: mk9FoHtrLbDMqhyHTcDKHNuv37k.roa (hash: +ODYm11fXrZNctf9Tic/a7meV/r5t53Msv62thVJdV4=)
                          2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: Odo2uF3pK2a8aLPLxgGBFy2niQ6RIf6HPPnROsnVPV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:8d:36:02:f8:e1:44:b3:49:93:42:77:56:f4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
        Validity
            Not Before: Feb  9 13:00:50 2026 GMT
            Not After : Feb 10 13:00:50 2026 GMT
        Subject: CN=42aa0ce96ca75947c3af6eb2e64cf2cd1867c857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:65:fd:33:a4:cb:e8:60:e3:22:49:78:52:
                    47:04:e7:71:fd:10:29:91:8c:2f:1a:79:08:66:a7:
                    6e:9d:23:80:de:1e:ba:4f:5b:e8:dd:cf:32:6d:24:
                    80:ee:85:33:83:04:17:63:dc:ce:88:53:49:d3:61:
                    70:57:7f:7a:c8:14:de:38:46:a9:44:99:7a:a8:b7:
                    73:72:26:02:41:cb:4c:4b:8a:18:9a:46:31:ee:47:
                    ed:22:82:58:43:5d:42:c7:e7:e3:07:6e:a3:f6:97:
                    47:17:5f:04:bf:32:21:d1:6d:b3:74:92:9c:89:44:
                    24:09:41:46:c7:5b:6f:a8:51:e9:73:25:17:64:4b:
                    87:23:48:7c:78:ba:60:f0:8b:2c:ea:aa:0d:79:4d:
                    b0:67:1c:dd:3a:21:3d:b6:88:d2:7a:c4:5d:64:a6:
                    54:52:d9:f6:fd:1e:d6:8a:cf:2b:62:db:24:83:37:
                    68:e8:d5:66:00:df:29:ec:51:61:08:31:be:7c:de:
                    b1:82:db:70:cf:e0:b1:fb:30:f8:9a:07:97:9f:63:
                    85:82:c3:ae:a6:e4:78:3b:7f:45:42:37:80:26:b3:
                    9b:4c:69:77:f6:04:fe:db:2d:f2:9e:cd:be:2b:65:
                    ab:7f:a5:fb:00:7a:9e:7f:1e:6a:d7:39:de:c8:37:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AA:0C:E9:6C:A7:59:47:C3:AF:6E:B2:E6:4C:F2:CD:18:67:C8:57
            X509v3 Authority Key Identifier:
                keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2b:e4:c0:e7:fb:e4:31:c4:c4:c4:b6:b3:c5:c3:1d:2c:c4:
         fd:54:76:e8:c8:6e:6f:ca:66:ed:39:30:c1:44:44:6d:25:6b:
         30:94:96:97:05:7f:28:da:0d:9a:21:d6:98:f4:eb:ac:89:76:
         a5:f2:a0:1f:74:da:bf:54:41:7a:b4:56:6c:a1:41:8f:b0:8f:
         24:fc:db:7d:83:d8:d5:0a:3c:43:9a:51:e7:1b:55:c9:29:3b:
         ca:d7:1c:b2:54:c9:44:f2:ae:7f:43:66:d8:04:a2:23:39:b1:
         f4:d8:dc:2f:d7:eb:4e:34:36:ff:24:ab:1e:6f:e0:e4:76:46:
         1f:f6:d2:96:10:c7:81:bb:cb:ff:9f:3a:99:4d:28:89:17:d3:
         dc:e8:97:7a:4c:48:c2:29:73:47:61:5c:fb:99:92:db:ea:ed:
         1f:7c:5f:11:ff:08:2f:5e:ff:b9:45:1a:2c:4b:6f:ce:48:fc:
         ae:5b:fc:cf:82:aa:6c:3a:ea:6e:25:b5:38:85:a6:fc:95:06:
         6c:30:e3:8a:34:0b:b6:63:ac:a9:41:3a:93:bd:f0:bd:76:94:
         ae:8c:19:0e:c6:3b:22:32:14:13:fb:1c:66:96:d5:07:a1:4c:
         b3:a2:4c:9d:3c:ed:79:2b:67:28:71:db:d7:e1:e1:18:69:f2:
         b4:4d:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:40 2026 by rpki-client