This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File:                     VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier:          klwhU1GG1eYfKkWuuGoyw2rBChIjDx2Tda9SFKbx2CE=
Subject key identifier:   6B:DD:39:A4:62:AB:DC:CE:ED:48:FD:57:EB:54:7B:D4:63:DF:D8:B2
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer:       /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial:       019C41A1D6594ABF6162FC422EF3FD6B3975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 09:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:51 +0000
Files and hashes:         1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: ifCq//YbieTy5RuBSX6On7mSLLAnguUUCrGV7996Bdo=)
                          2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:d6:59:4a:bf:61:62:fc:42:2e:f3:fd:6b:39:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
        Validity
            Not Before: Feb  9 09:00:51 2026 GMT
            Not After : Feb 10 09:00:51 2026 GMT
        Subject: CN=6bdd39a462abdcceed48fd57eb547bd463dfd8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:7c:15:0f:00:ba:76:91:8c:50:da:70:28:
                    66:d5:b4:2f:5b:18:5e:79:54:c7:3c:f7:90:f6:05:
                    24:f3:3b:ad:2d:c4:13:fb:31:72:d4:86:56:59:a3:
                    37:70:9c:7f:e8:5a:2c:87:79:ac:92:3c:79:21:f6:
                    45:26:c5:64:44:e6:da:ba:b8:ed:ae:c8:96:86:b4:
                    2e:e3:cc:0b:b0:5c:f0:86:5b:73:68:cb:25:40:6e:
                    ac:b6:37:92:c7:3a:23:ba:2a:89:bb:20:05:e3:ed:
                    dd:07:87:00:01:8b:f8:2c:3b:03:40:bb:c1:39:42:
                    2c:77:0f:20:8d:18:52:9f:80:f3:a6:6d:13:95:ed:
                    da:ad:00:64:67:46:c5:e2:96:6b:3e:28:b8:f2:5a:
                    a4:d5:97:16:2d:ec:42:5f:40:3f:b2:9f:a2:1e:64:
                    51:11:39:cf:a6:72:38:f0:e7:8f:43:8e:f7:e7:b7:
                    e2:38:95:5b:c9:38:98:ed:a8:b8:05:50:61:56:cb:
                    7b:ef:46:35:83:0b:5f:8a:3f:98:79:38:1b:a7:56:
                    5a:b7:46:cd:10:18:39:e8:ae:ba:36:5b:8c:38:65:
                    bd:73:e9:cd:ec:55:d7:ef:38:c4:8f:08:57:7f:62:
                    bc:37:78:4e:f8:8e:4f:ff:62:dd:31:ad:a1:b6:a5:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DD:39:A4:62:AB:DC:CE:ED:48:FD:57:EB:54:7B:D4:63:DF:D8:B2
            X509v3 Authority Key Identifier:
                keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:17:d7:79:da:73:02:8a:4c:22:b9:07:1b:f1:fa:1d:da:4c:
         00:2b:a4:90:6e:a6:2f:02:c1:1e:6f:ff:44:e1:de:30:a4:12:
         c6:94:07:be:c7:90:3b:fb:71:96:f5:11:56:99:e4:f0:87:92:
         70:96:07:aa:2b:2f:e7:92:a3:22:d2:a2:e8:e2:96:39:45:6f:
         f5:ff:ee:31:85:71:29:21:67:84:b5:94:9c:61:93:61:a7:50:
         db:48:56:93:3a:01:11:cf:98:08:7e:0c:d2:68:35:33:ba:c0:
         12:32:bf:fb:f1:1c:cf:53:a9:d7:13:b0:a9:e1:3c:49:48:16:
         ab:2c:d4:5e:29:54:62:c8:45:b2:94:19:5f:68:d7:66:8f:79:
         b0:76:9f:ef:b4:10:bd:d3:0d:d1:b0:35:03:e0:ed:05:94:ed:
         4a:66:8b:a0:20:e0:ac:ef:0c:60:04:1d:9d:ae:70:75:02:52:
         73:d0:74:01:76:de:4a:5a:7c:ac:df:fb:9e:32:71:ff:33:e6:
         fd:2b:c0:be:68:7f:e7:7e:c9:19:9b:6c:73:91:4f:ef:6f:e9:
         ab:ea:e5:fb:22:de:d0:8d:a7:33:51:9f:8b:c9:f5:51:5a:b1:
         a7:48:67:1b:af:38:f2:9f:7c:e7:1e:52:f7:31:4b:5a:cf:2b:
         40:79:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:48 2026 by rpki-client