This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File:                     vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier:          Zk6k3jnss2jfaexSFJGhDlDBNoX8ltwavKbB9kd1y/Y=
Subject key identifier:   2F:C6:6F:43:82:1E:CC:72:7A:B4:4D:FC:78:4B:DF:36:19:09:B5:5F
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer:       /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial:       019C4246BF18B92EB8E01E635E00488F6B3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number:          0635
Signing time:             Mon 09 Feb 2026 12:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:58 +0000
Files and hashes:         1: PIxJAOWfVeBmU76JbXSAooErb1U.roa (hash: T08H7sWyCft7hkyKVMhTHqrQKcUGSoqeo9MGAcS4sOs=)
                          2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: 4GkhTKO2T4t7XahJ/ih1+4UQTVSjoMVnblvdgxr+1c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:bf:18:b9:2e:b8:e0:1e:63:5e:00:48:8f:6b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
        Validity
            Not Before: Feb  9 12:00:58 2026 GMT
            Not After : Feb 10 12:00:58 2026 GMT
        Subject: CN=2fc66f43821ecc727ab44dfc784bdf361909b55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:02:09:63:61:e2:6b:26:5e:97:c4:96:8f:
                    12:c6:cc:f0:06:6c:6b:1e:4a:43:82:09:70:13:2f:
                    74:6f:f0:3c:1a:c9:dd:2b:b9:1e:f2:1e:8f:8d:19:
                    1e:c5:4f:26:68:49:7d:6c:3f:2d:a4:b7:3b:dc:71:
                    1f:68:11:86:da:87:f7:23:67:b3:e1:ca:2a:f0:87:
                    f3:19:cf:f4:d1:94:8d:2b:91:dc:91:09:0c:eb:d5:
                    b6:bb:ca:2f:20:ce:82:45:0c:21:c3:cd:cd:4d:a3:
                    4e:9c:77:7a:f8:85:91:a6:09:72:97:4d:f8:f8:81:
                    39:bf:80:5c:c9:d6:3e:b1:e4:76:60:df:f2:0e:dc:
                    ea:9c:d0:bb:d1:b5:5f:09:bd:fb:d9:2a:a5:89:ae:
                    7f:6d:fa:42:a2:27:35:bb:aa:dd:fe:92:56:03:c5:
                    67:e8:99:1a:d8:9d:bd:b5:69:01:e3:58:b9:9c:75:
                    e3:f5:5e:07:76:d5:77:3c:de:49:b9:dc:4e:ee:dc:
                    c0:c4:5b:7b:4b:3a:14:4a:09:5c:63:bc:01:fe:df:
                    35:c2:93:88:ec:a7:99:b6:53:80:07:f5:0f:2d:57:
                    3d:97:ec:89:f7:98:db:2d:23:d3:6c:cc:2c:12:f1:
                    b5:50:de:c4:df:22:5b:74:4d:cb:b2:59:bc:3a:51:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C6:6F:43:82:1E:CC:72:7A:B4:4D:FC:78:4B:DF:36:19:09:B5:5F
            X509v3 Authority Key Identifier:
                keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ee:fd:fa:81:b3:7d:b1:85:c9:45:07:63:f7:4f:df:58:71:
         2e:c6:e8:34:d4:d1:10:97:95:ae:a2:fb:80:d3:de:07:23:32:
         73:89:cd:5a:15:8b:04:a2:ea:1d:dd:1e:01:ed:d7:86:5b:0d:
         3a:ee:33:81:a6:3f:2f:c1:0b:8b:a1:16:9b:32:39:e3:0e:f5:
         3e:6e:21:10:9f:9b:70:d9:13:64:d7:d2:5b:7b:15:50:1f:58:
         55:73:e2:99:76:33:5d:1b:b6:89:59:cc:be:61:af:ab:d7:fe:
         91:72:ca:3a:24:6b:4f:63:51:34:fe:dc:6a:27:ad:5c:cb:13:
         36:9b:05:30:b8:2d:68:18:27:e8:0c:61:6a:fe:60:14:2e:f3:
         1d:ed:11:dc:0d:91:89:3f:f3:91:7d:02:a8:ac:c9:01:90:66:
         af:de:dc:f8:36:07:ca:91:f7:06:d3:db:5e:d1:70:cd:36:e0:
         ba:6b:b8:2e:9f:41:d1:9a:2b:16:48:19:f3:00:ea:ae:ea:92:
         d4:98:a0:9e:ab:fd:eb:36:f7:90:b1:56:3e:1d:c5:b1:50:c1:
         76:8c:f2:b6:ec:ca:6a:52:6d:17:9b:21:76:73:cf:4e:49:f9:
         56:a3:dc:89:ff:dd:00:f2:13:dc:0b:f7:b7:5f:02:8b:11:b9:
         8b:5a:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:23 2026 by rpki-client