This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File:                     VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier:          5wiJQGEYbGveezqU2TaDE4IlFqTKkgkWfKwBqTWRMnk=
Subject key identifier:   53:5E:CD:AD:02:77:BF:AC:49:BF:52:B2:3A:4B:BF:D2:85:04:E9:0E
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer:       /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial:       019C427D552F52667448EB8E97EBC52C707B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number:          0651
Signing time:             Mon 09 Feb 2026 13:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:35 +0000
Files and hashes:         1: Eu41_P7LziP7tbN3y79d5Zld-yA.roa (hash: AfrnyrK9VXdcG7fWfl7gD7MMFiGqvdrIsV969hWJlbc=)
                          2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: II89wFw5dWXH4PmamK9dpSmy9m3LUIbsn51pB1qhcKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:55:2f:52:66:74:48:eb:8e:97:eb:c5:2c:70:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
        Validity
            Not Before: Feb  9 13:00:35 2026 GMT
            Not After : Feb 10 13:00:35 2026 GMT
        Subject: CN=535ecdad0277bfac49bf52b23a4bbfd28504e90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:55:b8:12:da:94:5d:13:7f:b4:ad:f8:86:
                    9a:90:91:cc:16:de:63:f7:31:a4:93:4f:dd:a5:39:
                    fb:1b:d0:17:2e:f6:01:a4:6f:ef:ec:d5:be:1b:6f:
                    7c:67:79:46:c7:94:ba:19:fa:39:2f:fd:f6:7e:d6:
                    80:da:e6:f3:e6:54:a5:fa:06:94:ad:f0:8c:6d:9f:
                    2c:7b:97:8c:94:e6:e5:64:1d:f6:6d:a7:1a:bb:d3:
                    12:f5:16:7a:40:2d:af:d1:a2:1b:eb:c3:4b:b9:a0:
                    da:67:b2:98:40:d0:bc:a4:4f:5a:69:07:27:27:f9:
                    e5:39:a8:30:ec:96:65:be:5a:b7:1e:00:88:af:41:
                    a2:ad:52:9a:8f:bf:a0:cb:38:ef:a0:d8:b3:30:29:
                    05:c3:42:e1:9d:bf:d7:28:43:10:a1:4a:67:55:c0:
                    8d:8f:6b:b4:56:e9:14:7d:63:31:95:23:43:e8:be:
                    e9:5c:1a:68:a1:03:77:98:8e:ea:a1:8c:2b:63:26:
                    04:e0:54:21:e5:31:71:24:2c:0e:5f:73:09:b2:b9:
                    c6:62:ff:d1:33:5a:ae:00:c4:52:cf:4d:ae:85:08:
                    7b:ed:4d:09:6e:4f:06:2d:9b:9a:f3:d1:85:04:24:
                    ed:15:24:9e:f9:6b:2a:7f:fb:d0:5a:67:d2:7a:42:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5E:CD:AD:02:77:BF:AC:49:BF:52:B2:3A:4B:BF:D2:85:04:E9:0E
            X509v3 Authority Key Identifier:
                keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:56:3a:2a:6f:5e:10:0d:13:e8:34:96:0d:a0:e9:54:9a:
         c1:a8:dd:14:7c:4e:ca:53:41:47:6e:f8:64:94:c8:ad:9f:c6:
         86:da:bf:74:40:6e:ca:68:56:6e:b7:c6:8b:fb:60:4d:c7:49:
         3f:9d:86:78:4c:02:0b:3b:8b:cb:65:95:27:ce:c7:ad:d5:59:
         ed:dd:f3:9d:f7:00:0c:45:ba:5f:49:08:7f:28:01:d1:62:1e:
         db:7d:bf:08:c4:01:06:78:b0:a0:c9:79:0e:81:00:ee:bf:93:
         d8:73:96:47:6e:af:1f:5b:6a:4e:cf:c4:93:32:28:70:c2:86:
         ae:dd:c1:0d:be:ed:76:5a:c9:77:6f:9f:6d:ee:09:85:b8:bd:
         d9:28:47:6c:af:3d:4d:23:8d:83:4f:ae:ae:fd:5f:1f:f9:db:
         02:6e:74:10:fb:61:19:95:9a:93:22:dc:11:a1:ea:fe:2c:b2:
         9b:c5:cd:d7:92:7e:8e:e5:d9:c7:52:77:25:16:50:8a:3a:1c:
         0b:4e:3d:a5:aa:a6:09:0e:cd:cb:e0:a0:20:4c:7f:a4:b5:62:
         e2:95:69:e6:27:44:76:67:e6:61:5a:60:48:e8:7b:f2:86:af:
         06:65:64:21:b4:4d:d2:c6:b7:72:4d:5b:32:8e:66:f2:43:de:
         c5:3b:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:25 2026 by rpki-client