This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File:                     vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier:          zfNIlws0F4ulpT3N+lN4ohBAu+8o9Bhy42OL3jVHyAw=
Subject key identifier:   ED:46:B6:6E:46:A1:D7:68:FF:38:E4:40:18:50:DD:91:2D:C2:27:5A
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer:       /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial:       019C4358BEF74198E3E7BEF780509233F891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number:          0E02
Signing time:             Mon 09 Feb 2026 17:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:15 +0000
Files and hashes:         1: hGGn56Yo_VSmgrsGFDnJfZjli00.roa (hash: IdVlpuGxDlB7X5s4S8Mv8+g/EUJ+VGMrKs3BCA2moLY=)
                          2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: jXzaEak1nx3CBVCY//+fuxMv4fY7V4QsPoKS9hhRfs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:be:f7:41:98:e3:e7:be:f7:80:50:92:33:f8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
        Validity
            Not Before: Feb  9 17:00:15 2026 GMT
            Not After : Feb 10 17:00:15 2026 GMT
        Subject: CN=ed46b66e46a1d768ff38e4401850dd912dc2275a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:12:c7:47:29:6e:aa:f3:0b:ed:8b:ef:e1:
                    1c:c7:93:62:a1:c6:14:d7:d8:8b:8e:2e:96:e7:55:
                    e6:1a:40:5f:6d:05:8f:fa:aa:3c:cb:91:e0:ec:29:
                    c6:b4:39:38:5b:f9:ee:02:46:7e:10:22:d2:3f:18:
                    63:ce:ab:c2:11:a9:e3:8b:cf:40:80:bb:02:72:7b:
                    6f:40:a9:50:d2:26:d6:0a:a4:c2:b8:22:4b:03:c8:
                    d0:49:f3:76:d4:ce:3a:61:74:a2:68:c2:e1:75:12:
                    9e:58:7f:de:e9:2d:a1:db:a4:ef:a7:ad:de:cc:22:
                    cc:12:30:b6:55:0f:9a:86:fe:10:bb:8e:23:54:f6:
                    eb:ff:13:9b:06:74:af:b0:b3:3f:b5:2b:dc:b3:6d:
                    0d:39:ed:07:f2:d5:81:37:9d:26:b6:cc:7c:a9:30:
                    76:a6:c7:c7:ba:f4:f7:b6:90:76:b1:0d:0e:40:e0:
                    b7:1c:1f:87:f5:a4:01:67:73:6a:9b:9c:71:6e:8c:
                    48:6b:38:70:cc:53:cd:6a:71:62:cb:7e:d5:01:ce:
                    19:4a:04:1c:2b:76:fd:38:e0:e8:0a:89:2a:5a:f9:
                    e2:90:f4:b7:c8:8d:3b:d9:8a:2d:8f:b7:71:6f:31:
                    48:a6:4a:a5:80:21:58:d9:d9:22:6a:84:f8:db:57:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:B6:6E:46:A1:D7:68:FF:38:E4:40:18:50:DD:91:2D:C2:27:5A
            X509v3 Authority Key Identifier:
                keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:19:de:61:bd:67:a7:31:ea:bc:72:f2:76:2e:69:1d:82:
         3d:74:0f:d1:86:db:34:8d:9a:24:4f:e0:b0:f6:42:80:64:0c:
         db:48:3c:bf:42:fb:e3:a6:28:06:1d:b0:54:df:25:95:2d:8a:
         9c:9b:fd:b8:03:97:f5:42:84:c3:2a:2f:18:3b:b6:8d:8b:7f:
         83:04:0c:57:8f:6e:b8:ac:2e:dd:c6:ea:a5:0f:28:ae:5e:35:
         10:57:04:d0:1d:63:22:ba:9d:15:a0:96:69:e8:6c:34:27:f6:
         8d:47:e7:40:c9:74:85:64:2d:25:e7:d0:dc:8d:2b:df:68:2c:
         b0:87:27:0b:a7:fe:da:ef:06:48:29:fd:4a:01:ab:c5:73:14:
         9c:e2:45:6b:df:86:b2:7d:80:9e:78:91:5d:97:68:3e:59:aa:
         a5:0b:58:b4:76:f1:0f:c1:8d:1f:c0:86:24:8f:3d:ca:df:a3:
         f8:ec:ae:b9:97:04:11:b7:c3:ea:a4:3a:88:60:8b:17:c8:c2:
         b3:93:ce:e0:ab:bf:a8:e8:ac:77:17:21:6b:aa:84:20:b5:d8:
         63:2a:b6:cb:bc:64:c7:35:6d:4b:fc:1e:b0:20:a8:14:54:4b:
         85:9c:00:20:97:be:b1:ee:b9:2d:7b:2a:35:0f:fd:cc:92:53:
         95:c1:c7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:39:32 2026 by rpki-client