This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File:                     vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier:          tpwJpc2lUD1XVNWZFNbc4Pb7NBMINVKJyZq51dCgqkc=
Subject key identifier:   94:56:92:4A:1E:29:89:E7:1D:08:60:CB:B9:57:88:D1:5C:65:83:B0
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer:       /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial:       019C457F1A9F92A48E654D77CD8DC5E2FFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number:          0C4B
Signing time:             Tue 10 Feb 2026 03:01:23 +0000
Manifest this update:     Tue 10 Feb 2026 03:01:23 +0000
Manifest next update:     Wed 11 Feb 2026 03:01:23 +0000
Files and hashes:         1: bmMSflL-eMQuMBI3gu6949ZANPM.roa (hash: IDrbZuLc/19ByTc6qymrXkkUxTTGRdkMTB5oi5VuL5U=)
                          2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: ft7EiABUHe1ikiyrbWIIzLMmLo4YGxzfjFNzhIWSYno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:7f:1a:9f:92:a4:8e:65:4d:77:cd:8d:c5:e2:ff:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
        Validity
            Not Before: Feb 10 03:01:23 2026 GMT
            Not After : Feb 11 03:01:23 2026 GMT
        Subject: CN=9456924a1e2989e71d0860cbb95788d15c6583b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:06:8f:25:82:3a:a8:30:f7:3a:56:9c:37:
                    05:5b:55:0a:15:e7:8b:d0:dc:f5:b5:47:38:be:0b:
                    33:42:03:af:5e:21:08:53:75:06:73:31:e5:c8:3a:
                    77:f4:0c:bf:b5:7a:6b:15:1e:30:46:91:7e:81:d1:
                    c2:55:9d:91:3d:6e:d8:06:5a:03:3b:35:e3:cc:56:
                    bf:21:1a:bc:81:79:36:97:e0:20:90:a7:0f:53:fc:
                    5d:2f:c4:03:75:f3:aa:69:24:66:c1:8c:8c:a0:03:
                    01:17:be:f8:3a:75:c4:40:5c:b4:fc:5a:55:5a:51:
                    83:49:9f:bb:11:af:ae:d4:ca:51:5c:df:e6:ac:44:
                    ed:59:47:6e:2c:74:bb:5a:48:41:4c:70:69:cc:e8:
                    89:bf:6f:92:9b:50:af:93:95:93:3c:6a:b3:bd:27:
                    2a:e2:bb:d6:00:00:9d:1c:f9:d0:7b:84:ef:50:5f:
                    6f:44:85:6d:b5:ab:cf:01:42:d0:fb:e2:2b:c1:50:
                    01:e2:a1:e7:18:f1:3c:e0:75:7e:20:81:33:63:31:
                    24:e1:2a:c8:b4:a4:02:39:ac:c6:81:ca:d0:27:bc:
                    44:87:d8:96:58:2f:37:6e:f3:b2:02:1e:8f:5d:17:
                    3b:d6:f8:de:ad:27:49:77:cb:19:3e:18:36:e4:db:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:56:92:4A:1E:29:89:E7:1D:08:60:CB:B9:57:88:D1:5C:65:83:B0
            X509v3 Authority Key Identifier:
                keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:21:5e:0c:08:91:78:58:21:4f:60:a9:bc:2b:0d:e3:e5:
         f5:fc:8d:23:e9:02:aa:06:c9:d7:1e:d3:2d:f1:93:0f:5f:be:
         34:07:3a:a3:25:4b:92:ff:fb:89:62:fc:68:37:d1:37:38:f4:
         eb:98:a6:3b:c3:30:9e:b7:07:e3:67:d3:0c:a7:51:a8:1e:79:
         11:18:60:34:b9:bf:d4:29:1c:95:c4:28:08:80:d0:90:b2:b3:
         1a:b3:e6:12:25:c2:b9:9f:d5:5f:92:aa:84:f6:22:9f:1f:ea:
         aa:ee:3d:14:59:95:d0:af:77:b4:0b:2e:2e:76:21:41:69:16:
         a2:b5:4d:97:b1:83:91:cf:35:d7:33:cf:e3:93:02:4a:7d:21:
         f7:90:09:74:1f:d3:f8:dd:28:cd:57:ae:02:2c:48:7c:68:e0:
         a9:d0:31:3b:d7:7d:2f:1f:27:2d:66:2f:d1:a7:60:af:a8:3f:
         ef:b7:e9:37:69:e4:85:0d:63:4f:ba:90:0a:41:af:1a:82:22:
         ee:8e:3a:c1:25:b2:a8:d5:0a:07:4f:3d:93:e8:40:a3:8a:2f:
         52:dd:91:35:55:cb:5b:49:88:7a:dd:b9:fa:77:14:79:09:7c:
         8c:61:dd:18:f9:bc:cf:59:d4:27:0a:97:0f:3c:d2:0b:63:07:
         59:96:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:44:23 2026 by rpki-client