This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File:                     vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier:          SMb1n9wvSngdtkX2VqxrKp89c2Se4czrW6CHUlZD68o=
Subject key identifier:   FA:89:3D:4F:07:6C:7B:A8:27:08:7F:D1:9F:1B:46:B3:B9:B1:40:2B
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer:       /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial:       019C4547C02F0627B309C9C970DB6EF68368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number:          17A2
Signing time:             Tue 10 Feb 2026 02:00:55 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:55 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:55 +0000
Files and hashes:         1: 5DvFWn8hN7piazN1T8HIXkNFc8w.roa (hash: XsihtnWpKZygkLBke+BN9JF5neJLF/Mp9MsWC2DKCb8=)
                          2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: dS4OdQ5HzFRer5CimE4kN/Ax19EPo8eRpTrK94Zps6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:c0:2f:06:27:b3:09:c9:c9:70:db:6e:f6:83:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
        Validity
            Not Before: Feb 10 02:00:55 2026 GMT
            Not After : Feb 11 02:00:55 2026 GMT
        Subject: CN=fa893d4f076c7ba827087fd19f1b46b3b9b1402b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:d0:f4:9e:51:0a:d9:65:42:81:b8:23:4d:
                    38:0d:d4:ce:e1:36:22:bc:77:ec:a1:51:e8:73:fa:
                    e8:51:ae:1b:37:18:5b:78:b8:88:43:bc:a0:ef:e6:
                    c8:85:d7:59:2a:86:5c:8d:55:66:69:8c:5b:a3:b1:
                    f0:78:ad:03:aa:b4:39:52:3c:e6:68:e5:35:95:12:
                    8b:97:57:79:f7:21:6a:a9:39:10:20:b2:2d:36:d8:
                    e2:22:60:26:0e:e7:6c:90:22:ea:ae:72:13:44:b5:
                    07:98:c8:6b:9e:34:9a:3d:11:4f:d2:b4:67:70:65:
                    4d:21:c4:99:93:c8:5e:0c:7a:d4:42:8d:e4:7b:d5:
                    10:e3:e3:76:23:69:e3:e9:9f:c6:f3:09:15:6a:6e:
                    c4:6a:11:21:0c:68:06:3e:fa:ad:6a:12:82:0a:ca:
                    ab:e5:cc:97:87:13:07:1b:16:17:22:b0:18:e8:84:
                    e5:24:ef:9a:15:5b:0d:e0:d6:a3:c0:43:3e:d9:1a:
                    51:d6:00:90:28:f9:69:1a:67:99:e1:81:46:9f:a5:
                    1d:12:54:77:49:6d:b9:2e:bd:45:7d:bf:21:42:36:
                    f7:85:be:85:83:2d:88:5f:cf:ed:2d:ab:4a:bf:8e:
                    23:1e:58:9b:64:71:37:8f:e5:2d:ff:f0:65:e2:4c:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:89:3D:4F:07:6C:7B:A8:27:08:7F:D1:9F:1B:46:B3:B9:B1:40:2B
            X509v3 Authority Key Identifier:
                keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:25:b7:03:38:5c:12:86:39:9f:c4:9f:88:ab:05:0e:b6:
         1c:b1:e3:c0:63:62:a9:cf:7c:4a:17:18:e5:66:0b:cf:1f:4e:
         1a:01:aa:3f:c1:7f:7c:dc:8a:99:e1:0e:00:24:d3:0b:76:7e:
         31:35:d9:95:ec:f9:68:d0:4b:27:62:c9:1a:2b:1b:62:9b:96:
         ee:47:63:0b:da:48:74:a7:e4:1c:82:76:30:7f:33:b9:f2:f9:
         2e:90:be:57:35:86:18:0d:1b:b4:b8:a5:16:e0:b8:0d:94:51:
         51:4e:6c:4c:1c:2a:63:ee:2d:b0:f0:17:61:84:f1:54:17:3d:
         65:b5:3e:4d:f4:b5:40:d2:36:3f:a3:17:1c:9a:58:11:2e:6e:
         f9:ee:b2:87:24:00:38:87:c2:4d:fa:26:34:16:04:75:02:28:
         98:68:9e:f2:1c:7a:a2:8a:35:80:8b:6f:c7:d3:35:50:aa:38:
         61:25:93:62:4d:ef:9d:0c:e5:de:a8:33:dc:aa:56:95:be:5b:
         49:17:00:1d:b9:24:5d:97:ef:7f:d3:0a:b8:14:f2:6b:6c:7e:
         00:82:e0:7d:82:aa:eb:02:8c:ae:5a:10:71:1b:25:34:58:97:
         14:7f:fd:36:cf:b2:88:32:28:39:48:78:5f:19:a6:77:67:40:
         aa:c1:77:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxFR8AvBiezCcnJcNtu9oNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjhjMWRhZDkxYTQxMDFjNzE1M2MwZjZkMDE1NjIzOGFk
NzQ2YmIwHhcNMjYwMjEwMDIwMDU1WhcNMjYwMjExMDIwMDU1WjAzMTEwLwYDVQQD
EyhmYTg5M2Q0ZjA3NmM3YmE4MjcwODdmZDE5ZjFiNDZiM2I5YjE0MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HHQ9J5RCtllQoG4I004DdTO4TYi
vHfsoVHoc/roUa4bNxhbeLiIQ7yg7+bIhddZKoZcjVVmaYxbo7HweK0DqrQ5Ujzm
aOU1lRKLl1d59yFqqTkQILItNtjiImAmDudskCLqrnITRLUHmMhrnjSaPRFP0rRn
cGVNIcSZk8heDHrUQo3ke9UQ4+N2I2nj6Z/G8wkVam7EahEhDGgGPvqtahKCCsqr
5cyXhxMHGxYXIrAY6ITlJO+aFVsN4NajwEM+2RpR1gCQKPlpGmeZ4YFGn6UdElR3
SW25Lr1Ffb8hQjb3hb6Fgy2IX8/tLatKv44jHlibZHE3j+Ut//Bl4kysxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqJPU8HbHuoJwh/0Z8bRrO5sUArMB8GA1UdIwQY
MBaAFL1owdrZGkEBxxU8D20BViOK10a7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2Qt
MTM2OWNlZjdhNGNhLzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2QtMTM2OWNlZjdhNGNh
LzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcsltwM4
XBKGOZ/En4irBQ62HLHjwGNiqc98ShcY5WYLzx9OGgGqP8F/fNyKmeEOACTTC3Z+
MTXZlez5aNBLJ2LJGisbYpuW7kdjC9pIdKfkHIJ2MH8zufL5LpC+VzWGGA0btLil
FuC4DZRRUU5sTBwqY+4tsPAXYYTxVBc9ZbU+TfS1QNI2P6MXHJpYES5u+e6yhyQA
OIfCTfomNBYEdQIomGie8hx6ooo1gItvx9M1UKo4YSWTYk3vnQzl3qgz3KpWlb5b
SRcAHbkkXZfvf9MKuBTya2x+AILgfYKq6wKMrloQcRslNFiXFH/9Ns+yiDIoOUh4
Xxmmd2dAqsF3Hg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:25 2026 by rpki-client