This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          DRVCtfsFJlot59nPClhMJdrjPtxzEHe5gEPPb94o3pk=
Subject key identifier:   41:27:BC:D2:33:2B:A2:59:AF:12:62:AF:18:B6:98:63:71:81:1E:B9
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       019C43C6AB92482F60A3DB499E24661DC97A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          07AA
Signing time:             Mon 09 Feb 2026 19:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:19 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: bwgUJ0FD7A6rqlRjFNLHZOG6PKWsfso7+8o8/bXarz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:ab:92:48:2f:60:a3:db:49:9e:24:66:1d:c9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Feb  9 19:00:19 2026 GMT
            Not After : Feb 10 19:00:19 2026 GMT
        Subject: CN=4127bcd2332ba259af1262af18b6986371811eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:22:49:b7:ea:93:43:bc:30:2b:14:b2:e9:01:
                    b5:77:a2:44:de:1e:ff:96:eb:7e:62:98:c3:47:a3:
                    39:6c:85:e6:d9:89:97:dd:3d:a5:cc:24:99:b1:84:
                    72:a3:ac:48:f7:0b:08:89:2c:2e:7c:c2:12:a6:72:
                    84:06:75:bb:c6:a6:c5:32:f3:59:ba:51:c4:9d:c4:
                    3e:53:d5:b8:fb:d7:71:3d:73:84:dc:47:04:f1:f9:
                    74:17:2e:27:3b:c7:71:27:d0:d2:a0:18:b7:18:38:
                    20:80:3f:1f:d2:3f:72:78:0f:c7:6c:dd:51:27:69:
                    da:b8:ff:9f:79:74:2d:5a:5e:43:85:a9:27:c0:cc:
                    7d:35:ca:2f:fd:dc:f3:5d:11:d2:b6:2a:35:dc:46:
                    51:87:9f:00:95:a0:64:80:81:96:e8:67:1f:35:b6:
                    c9:05:c6:34:5f:f8:79:b4:c1:02:25:b0:62:7e:3f:
                    fe:63:c6:7d:68:d7:4c:bc:ad:b7:b1:cc:2d:56:e6:
                    be:77:20:fb:56:ab:9d:6b:cb:18:4f:d0:56:dc:68:
                    71:0a:57:38:c5:50:d2:4c:a4:92:57:cc:3d:0f:63:
                    13:5e:f8:d9:98:b9:f1:79:18:f5:2e:8d:a3:bd:30:
                    cd:d7:16:f7:ee:05:ca:77:c8:79:cd:62:df:93:8f:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:BC:D2:33:2B:A2:59:AF:12:62:AF:18:B6:98:63:71:81:1E:B9
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:52:d0:9d:b9:75:a0:42:21:20:9c:86:37:f3:b1:69:46:
         47:74:1b:a4:7c:25:f3:50:dd:c4:a8:23:6b:6e:bf:fd:94:8b:
         96:9e:86:f4:3f:e8:4e:76:c7:87:37:eb:fe:6b:2d:d9:0a:35:
         9f:e6:ad:9f:34:74:ea:93:31:df:49:e2:cc:ff:3c:02:85:ef:
         84:33:60:b1:d9:ac:f3:1d:49:a3:41:22:01:4b:92:27:18:ae:
         23:d9:af:60:8b:18:be:54:1f:63:18:e7:36:d0:81:89:73:d1:
         32:eb:0b:a2:19:ee:1d:41:64:79:d3:41:21:6a:6b:ce:b7:c5:
         a3:d0:94:24:12:22:33:15:aa:a6:00:37:c1:c5:dd:54:67:cb:
         f7:11:dd:58:00:85:91:d5:64:99:44:74:95:7e:21:45:0f:da:
         ab:a0:1b:6f:c7:28:8b:d0:61:54:0b:6f:03:32:60:8f:42:dc:
         13:a7:a8:f1:1e:02:b5:6a:e4:be:4d:e6:b6:71:78:12:b5:1e:
         3d:60:49:65:52:e4:ef:97:ad:29:a4:77:1f:56:50:d5:f1:53:
         f1:7c:6c:8b:85:c6:cb:19:47:bf:b6:27:8c:83:06:9b:eb:b0:
         9c:8c:31:b6:da:fd:4d:fb:63:08:a2:f2:ed:2d:83:41:c3:c4:
         c6:35:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:47 2026 by rpki-client