This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          CacTRyODq27Yw9h9+DU8LieyhGlhKoXgezHPYHBk5qE=
Subject key identifier:   42:3A:FD:F1:D8:AA:52:B1:61:D3:B8:3F:DE:24:3C:AA:89:88:78:1B
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       019C43FDDD04E173C4FE7D904BBE0441DAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          05EC
Signing time:             Mon 09 Feb 2026 20:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:36 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: 4/+wf1O0W+opUpQeZJav8HhOabZuSsSHBbI1hnQ3fP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:dd:04:e1:73:c4:fe:7d:90:4b:be:04:41:da:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Feb  9 20:00:36 2026 GMT
            Not After : Feb 10 20:00:36 2026 GMT
        Subject: CN=423afdf1d8aa52b161d3b83fde243caa8988781b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:80:a5:00:70:39:a3:a9:8f:92:fd:5f:fd:
                    12:89:bf:d5:d0:fa:49:01:09:e5:38:59:f4:86:8c:
                    a4:98:0c:3f:bf:d7:78:94:e6:71:b6:24:37:ab:e9:
                    8f:f9:b0:39:fb:45:2b:7e:65:09:d4:85:c1:df:07:
                    01:0c:f2:a0:60:77:6e:81:9f:d3:03:73:42:5e:9f:
                    dd:1f:b5:54:56:ec:07:9d:a1:11:bc:50:ff:23:2b:
                    0d:81:fa:f9:e8:31:ac:70:b9:00:0f:95:53:3c:13:
                    60:2d:84:c8:df:32:79:61:54:38:92:a2:b5:48:b4:
                    8f:7a:7e:f7:cc:fa:25:d5:ce:21:2e:d5:c4:08:2c:
                    95:56:b6:1c:20:ec:d7:63:14:7f:3a:01:67:7c:ea:
                    f0:c1:2e:93:71:4c:50:9a:b9:f7:a6:4a:c1:06:8e:
                    ca:09:ea:c8:91:a3:6f:00:43:fd:7d:1e:b8:2a:32:
                    0c:7c:c9:e9:87:fd:cc:67:43:aa:c6:63:e4:76:3b:
                    a7:a8:7f:e4:7e:4d:97:7a:ea:c0:58:ac:4d:0a:98:
                    77:44:de:1e:33:a7:fc:7a:10:95:34:9a:8f:1b:72:
                    ad:86:4c:74:45:53:7f:3f:ad:1b:36:f0:65:ed:b6:
                    2d:ed:6a:8f:34:f7:9c:fc:e7:cb:32:a8:02:67:e1:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3A:FD:F1:D8:AA:52:B1:61:D3:B8:3F:DE:24:3C:AA:89:88:78:1B
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:28:5f:e1:48:e2:63:8f:c4:41:ef:4a:7e:c6:25:c6:3f:27:
         de:ea:a9:11:57:72:d5:a6:f1:db:47:bc:fc:7c:e6:b2:64:e9:
         fe:73:15:92:32:1b:4e:fc:98:7f:b0:3c:e0:c1:97:99:dc:5c:
         63:50:08:0a:d9:3c:30:0e:df:ea:86:4d:c3:ad:19:37:b2:b3:
         78:d3:3a:94:bb:6c:da:7a:26:4c:b2:c5:ab:40:4b:e8:df:67:
         00:ef:03:71:54:c8:63:de:67:85:c7:55:40:2a:1d:d3:6a:73:
         cc:ba:cb:ef:df:16:2c:58:6c:df:94:13:0d:a7:c6:2f:14:c6:
         1a:aa:5e:62:34:02:c8:4d:70:f8:87:a5:6e:fa:7d:92:db:bf:
         0d:78:f5:58:61:14:81:e1:54:7a:27:b3:83:8a:cd:cc:6f:6a:
         10:09:dc:93:11:7e:8e:ce:35:d0:ec:8b:f0:cb:72:b9:07:ee:
         de:e7:0b:a8:98:79:2a:24:b6:a4:c1:57:78:c0:48:73:a1:e0:
         d8:f8:8c:46:e6:f1:57:aa:a4:fc:09:6c:37:2e:1c:3a:ad:b9:
         32:45:dc:84:85:c1:41:2c:a5:00:3b:2b:0a:82:0e:c7:9e:f8:
         c9:fb:dc:8c:5c:90:23:16:85:8d:8a:94:d4:20:2d:1e:c5:67:
         e0:39:86:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:05 2026 by rpki-client