This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File:                     vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier:          1h6AlxW2r1qKCm2/xlis7wKSrpt20NpdG5QLRQWwZpU=
Subject key identifier:   4D:24:01:93:E2:0A:6F:56:3F:31:22:F1:6F:12:0E:84:39:87:3A:F7
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer:       /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial:       019C427DD1B46EB2ADDE4A0AB2B07F66D6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number:          11E4
Signing time:             Mon 09 Feb 2026 13:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:07 +0000
Files and hashes:         1: R1X-0N_qCuCvnv8CkB9Z_OSw2o4.roa (hash: D3kS568Iv2wmPNkEcgVaGHK64PzLTmFGbe9n3gWj/eM=)
                          2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: UM3WzXk3GC4p2wGsdyQncJg9AcA3frRvW2xeswYwFzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:d1:b4:6e:b2:ad:de:4a:0a:b2:b0:7f:66:d6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
        Validity
            Not Before: Feb  9 13:01:07 2026 GMT
            Not After : Feb 10 13:01:07 2026 GMT
        Subject: CN=4d240193e20a6f563f3122f16f120e8439873af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:78:f2:4a:9a:d3:78:68:95:d6:c2:8c:d2:
                    65:ca:97:44:11:bb:3a:e0:a3:91:0d:fe:df:97:ac:
                    1b:1b:10:18:cb:8d:ac:be:60:ea:ae:84:ae:7d:3f:
                    a8:e5:42:a5:d4:a0:08:f1:7f:b6:08:08:01:47:8c:
                    93:7e:83:85:f6:9b:f4:ff:da:37:b7:f0:ca:2c:ba:
                    13:1d:fe:1b:10:af:3c:7b:7a:45:87:fa:04:99:11:
                    92:c7:c2:0d:2d:25:f8:bf:b9:95:26:ad:e6:e7:f3:
                    88:42:a9:84:a5:2f:5e:5e:23:19:c5:6d:c1:bb:6d:
                    34:60:16:b1:ba:6c:8a:87:98:03:83:f7:36:c1:82:
                    48:25:4c:d4:57:a4:52:44:2c:91:3e:d4:4c:e7:86:
                    f1:70:9f:9b:a3:41:b2:d9:1f:d6:bc:cd:98:f4:4f:
                    aa:4c:5d:3d:8e:4d:e3:d4:3a:e3:42:41:b9:af:ca:
                    c7:13:67:94:f3:17:58:5a:92:3d:42:bc:32:c1:99:
                    1b:be:96:79:f2:6c:ef:7d:14:71:d8:0e:ba:3f:fa:
                    b3:55:a0:0d:77:33:b4:e9:bb:85:9d:7c:9b:bd:4e:
                    d4:74:f1:fa:09:44:ca:72:29:80:a1:40:84:ee:97:
                    67:a3:ce:ef:95:56:cf:02:d9:c6:3e:fc:bd:89:40:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:01:93:E2:0A:6F:56:3F:31:22:F1:6F:12:0E:84:39:87:3A:F7
            X509v3 Authority Key Identifier:
                keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:35:c0:34:d6:ae:c3:c9:78:39:fb:2e:de:9c:6d:da:d6:
         d1:0e:a6:8d:99:a5:a2:b2:8c:79:23:27:54:7e:e0:33:0b:44:
         93:47:4c:4e:ca:c8:bc:39:09:09:90:93:aa:bb:24:9c:d4:7b:
         56:5b:33:02:3c:e6:a3:5a:3b:8b:eb:ef:d8:55:6b:48:f7:3f:
         63:b4:55:b3:08:ad:06:44:e2:e2:58:63:de:36:63:64:1b:7b:
         ff:3f:b0:d4:9d:46:cc:a3:8b:31:09:1c:10:79:79:ce:a5:d8:
         6c:b5:37:36:1f:f1:39:4a:71:89:ee:f3:60:79:e4:f2:eb:9b:
         5a:34:af:c6:f5:07:7e:60:af:0c:5e:e9:6b:4c:27:9d:3f:7e:
         4f:ee:46:c6:2c:17:44:c5:5b:5e:ca:6f:5f:7c:b5:15:b3:c9:
         77:fa:3b:7e:cb:18:4e:e8:64:9d:28:eb:bc:1f:a7:b6:c8:0c:
         3b:51:69:03:31:ba:35:6c:e4:1a:bf:2d:50:cd:1d:8d:b9:47:
         79:a4:27:d0:9b:6f:d1:89:0d:e5:ee:d5:bb:1e:d7:c1:be:d6:
         54:ba:db:09:50:ff:be:1a:ab:10:83:dd:87:58:52:66:42:03:
         d2:76:c8:52:b2:03:a0:e5:bb:74:25:c3:36:f2:6d:8a:46:2d:
         d6:d5:54:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:58 2026 by rpki-client