This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File:                     vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier:          w2DIa/ljhV8EIX2XlQAsyrh412p5rXoThEd0DoHUebA=
Subject key identifier:   2D:1E:31:48:C4:FC:FC:4F:BD:A0:66:F4:25:63:FC:E2:9F:9A:58:42
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer:       /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial:       019C435965B3FB9368929642380F0BAF3C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 17:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:57 +0000
Files and hashes:         1: UIEwD2VfFc8CUBWRPi8avZckaik.roa (hash: 8TxOkmSlxviUZm8/elB/UjCoqFq67VcYcIo+38oGuL4=)
                          2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: m6PSYhdinYG9/Rbn69WOFK4BcpD/IP8jNOFpIwnw+dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:65:b3:fb:93:68:92:96:42:38:0f:0b:af:3c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
        Validity
            Not Before: Feb  9 17:00:57 2026 GMT
            Not After : Feb 10 17:00:57 2026 GMT
        Subject: CN=2d1e3148c4fcfc4fbda066f42563fce29f9a5842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:56:24:86:97:27:52:b3:b4:4e:62:74:f1:
                    63:44:25:cd:77:4b:f4:8a:e0:60:6a:d2:a4:a9:e1:
                    e3:9c:87:da:77:76:c0:83:5a:fb:23:3e:f8:ca:20:
                    0d:61:cc:17:76:b6:1a:e2:99:df:d0:7d:51:80:9b:
                    ff:2f:73:cd:c9:09:76:d1:1f:cf:2d:9e:08:ef:43:
                    fc:6c:3f:47:04:91:75:7e:e1:ec:df:5f:60:d0:08:
                    f1:29:75:1e:18:7e:82:3f:c5:5f:e8:5b:06:49:a7:
                    64:39:3c:a9:55:ba:ae:dd:25:20:fa:db:0b:5e:55:
                    a7:73:3b:5b:44:0e:fb:fe:0d:b3:c9:ee:84:b5:2f:
                    4a:97:3b:94:22:5a:27:26:b5:fd:fe:04:7c:c8:8d:
                    f8:10:57:f9:52:8e:39:32:e3:fa:ee:e1:fc:c6:4d:
                    e3:ea:a0:a2:c6:8e:8c:82:87:53:f2:d6:12:ce:77:
                    c4:0d:76:ef:34:ec:d6:04:f1:91:7c:db:9d:11:6b:
                    47:cd:4a:67:49:bf:2f:7d:02:f1:4c:d9:ff:30:5d:
                    d9:62:76:19:eb:e5:31:83:d2:81:33:08:0a:59:a5:
                    9b:e7:ed:c6:68:73:f7:25:06:a6:4f:e8:5c:2b:e0:
                    83:80:74:ef:bb:b3:1a:f2:dd:ed:f1:4b:4e:c2:71:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1E:31:48:C4:FC:FC:4F:BD:A0:66:F4:25:63:FC:E2:9F:9A:58:42
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:35:58:5c:93:21:c7:14:1f:01:de:5f:a4:1e:b6:56:d2:
         f1:a6:02:d5:32:c2:e1:f4:39:4d:37:9c:d7:ab:9e:4c:8f:c9:
         a7:00:5f:d5:a6:41:90:2b:30:d7:75:ea:d9:1f:88:c7:7e:4c:
         1a:c3:8d:21:69:c5:97:76:b7:12:56:43:5e:6b:14:79:c9:4c:
         b2:0e:38:6b:74:d5:c9:91:c0:8e:5d:27:8c:71:d2:5a:ea:15:
         f1:a9:e8:1a:a9:ff:cc:74:5b:f9:94:87:e0:6d:0d:c4:1c:df:
         b4:ee:d8:a7:60:59:1b:7f:0a:fc:5d:99:ac:cc:ea:c6:1e:76:
         cf:47:95:e8:0b:60:32:b4:12:f9:1b:30:64:61:34:97:bf:20:
         99:bf:a2:b6:06:8e:89:e0:fa:26:d7:be:f8:48:98:e0:4d:e3:
         e9:ff:71:87:ac:72:a6:bf:19:a7:2a:1d:da:b9:5e:8e:c6:e6:
         5f:4e:03:16:d2:47:97:2b:c4:2c:43:43:ef:cf:e2:bb:59:78:
         5a:75:e7:fb:0b:33:c3:50:02:ec:79:cd:e8:7b:9b:23:46:7c:
         cc:98:c2:40:65:25:28:35:81:e9:4b:13:ae:49:99:53:70:26:
         9a:3e:ae:29:04:86:86:c8:f3:d2:c6:5f:00:34:5f:14:51:04:
         56:7d:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:33 2026 by rpki-client