This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
File:                     vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json)
Hash identifier:          OOjS/K89+U3rR2xzQd3BKqVkTWM2sTwHh5AIonx+WfA=
Subject key identifier:   23:B7:42:B1:AD:B8:0F:89:62:C3:2A:AF:FD:37:76:2E:0C:6C:BB:66
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Certificate issuer:       /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial:       019C416AE941603240038123FD80AA8C0270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
Manifest number:          151F
Signing time:             Mon 09 Feb 2026 08:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:51 +0000
Files and hashes:         1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=)
                          2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=)
                          3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=)
                          4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=)
                          5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=)
                          6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=)
                          7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=)
                          8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=)
                          9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: +jNi/HT7w7glkstFRY86+WZshpyOtHbisPpzBFHtkiE=)
                          10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=)
                          11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:e9:41:60:32:40:03:81:23:fd:80:aa:8c:02:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
        Validity
            Not Before: Feb  9 08:00:51 2026 GMT
            Not After : Feb 10 08:00:51 2026 GMT
        Subject: CN=23b742b1adb80f8962c32aaffd37762e0c6cbb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:5d:3d:55:e6:7b:a9:ee:ea:a3:a7:01:3b:
                    52:b2:e0:f4:94:fd:f9:00:2b:30:fa:a5:1f:c7:97:
                    e8:c6:e6:c9:07:00:91:1b:45:4b:51:1d:2e:87:22:
                    e5:11:9e:92:24:11:b5:e2:72:9e:4e:b4:fb:81:2e:
                    c3:ea:19:8e:61:2c:92:d0:33:71:3a:f6:4d:56:18:
                    f1:34:7a:da:1f:af:72:fc:8b:9e:57:47:9d:c1:12:
                    2f:23:80:0a:18:08:9f:07:c1:b3:73:ba:52:ad:74:
                    76:82:55:2a:da:dc:32:c7:c5:c4:19:9a:f9:2d:36:
                    6e:86:61:a8:19:64:b5:a6:78:2e:47:87:be:63:9d:
                    38:db:45:bf:10:20:f6:5b:cf:45:e0:04:79:a1:04:
                    ae:c2:4a:15:d5:9e:77:d0:5d:8d:12:0a:7b:14:27:
                    f4:c7:ed:f8:1d:c1:b1:17:0f:cc:c8:ca:5a:c8:a2:
                    eb:da:34:8a:bd:9c:57:02:20:89:d4:6a:2f:78:fa:
                    44:86:fb:09:77:13:bb:e5:69:35:73:ff:2e:44:06:
                    1d:3b:58:88:03:96:10:db:d0:e2:58:af:8e:8f:4e:
                    88:6b:6a:b0:ec:9b:1a:a8:71:b0:0d:d9:ef:42:2f:
                    5b:df:74:f4:c3:ac:83:58:01:01:da:4a:bb:31:60:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B7:42:B1:AD:B8:0F:89:62:C3:2A:AF:FD:37:76:2E:0C:6C:BB:66
            X509v3 Authority Key Identifier:
                keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:39:d2:06:f3:17:43:dd:43:0e:bb:75:ab:7e:ff:23:45:38:
         7d:6d:00:db:97:04:df:f4:0e:ae:aa:f5:f0:ba:15:20:11:db:
         b1:59:03:af:87:5f:92:24:cb:2e:cb:d5:6a:47:c8:d9:1d:1a:
         e9:18:37:a6:b3:e2:61:5a:9a:6a:bf:76:f1:af:05:fe:c6:47:
         95:ed:7f:6c:56:5d:c0:aa:a8:42:ce:86:3c:81:4b:74:5f:24:
         be:a9:c1:9f:91:5b:33:64:8b:de:81:59:cd:92:47:65:3f:39:
         e5:f2:46:2a:91:96:25:81:ca:73:8b:d9:ee:78:ce:6c:c0:91:
         25:fa:44:dd:3c:4d:7c:8f:da:99:c2:61:df:af:0b:25:9e:08:
         e0:ae:65:cc:51:e7:be:17:4f:68:08:ce:1f:fe:7b:2c:28:7f:
         52:0a:b9:46:78:12:f8:55:ba:63:ae:a2:e0:d1:a6:e1:1c:af:
         6c:f3:b8:d2:d0:43:60:41:9e:43:98:cb:51:8a:08:8e:f0:49:
         01:77:ec:c3:b1:c4:31:f3:d5:b1:4d:f6:d9:59:fe:43:7b:e3:
         7c:36:42:50:75:b0:90:09:d8:8e:4a:0f:dc:6e:26:eb:96:d7:
         5a:04:36:37:fe:db:d1:4f:81:8d:42:c4:93:c1:ba:82:10:4f:
         6b:90:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:36 2026 by rpki-client