This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File:                     vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier:          6l4Y6pa+BWFr77XHF9R/qvo5FayxKPBYqZn4I01CBeg=
Subject key identifier:   F6:23:87:BF:9A:92:0E:55:75:87:6C:20:E9:EA:7D:0C:9E:7F:2D:89
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer:       /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial:       019C4390221E184E58B6C3492CAAF028132A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 18:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:45 +0000
Files and hashes:         1: MJsBtMXDsOv4TTZ2efs5vOnxahY.roa (hash: jJGmnHuAyaWahhHhka2WAv2IAmrJwIOdndtEnTBheHs=)
                          2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: LRQqrtjv6hU10+4PQKGahzb22tih3UtSqjB5qqpNGJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:22:1e:18:4e:58:b6:c3:49:2c:aa:f0:28:13:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
        Validity
            Not Before: Feb  9 18:00:45 2026 GMT
            Not After : Feb 10 18:00:45 2026 GMT
        Subject: CN=f62387bf9a920e5575876c20e9ea7d0c9e7f2d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:01:dd:93:4d:3a:34:d1:2e:49:7c:23:64:
                    2b:ff:4a:2e:84:e3:59:9a:f8:29:c0:18:5f:0b:0c:
                    12:4c:43:e3:f7:ab:2c:92:ac:bb:98:b8:ea:8c:af:
                    2f:e4:68:eb:5b:8a:28:27:10:33:8b:c6:41:65:f5:
                    2e:0d:5b:7f:bc:a8:fa:70:a0:03:4f:1c:41:2a:45:
                    5c:87:a9:7c:46:ac:32:4f:df:71:91:a8:53:1a:36:
                    54:71:81:cc:9c:6b:72:63:89:58:db:79:ab:15:ec:
                    8a:ce:bb:ce:79:e9:b9:65:57:d9:8a:86:e9:c5:7f:
                    6f:b8:87:de:bd:6d:87:3f:6c:7f:76:d5:8a:a7:60:
                    7a:53:d3:71:8f:1b:a1:a9:4e:64:db:ef:54:6f:af:
                    51:60:90:c9:9f:fb:d2:54:7a:48:3a:0c:4d:e4:1d:
                    97:b3:8f:89:ea:1a:19:87:c5:35:62:ed:db:bf:2f:
                    b9:2c:82:d3:0e:d9:cc:f5:6d:95:34:87:1c:11:84:
                    ba:6e:59:33:19:b3:3e:69:16:7a:f5:c6:3b:d8:04:
                    0b:ce:b7:a3:90:ca:6d:f9:b2:a8:1e:cb:26:d0:02:
                    52:54:bd:ec:d5:92:27:3b:b7:63:fa:c8:01:c6:df:
                    e9:54:1c:5b:97:92:9c:0e:01:45:a0:bb:f7:c6:90:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:23:87:BF:9A:92:0E:55:75:87:6C:20:E9:EA:7D:0C:9E:7F:2D:89
            X509v3 Authority Key Identifier:
                keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:1e:2a:50:bc:b8:f8:56:81:fc:f0:3f:79:31:cf:e7:85:
         fb:90:e0:0a:7a:cb:2a:8e:53:0a:92:f7:cc:0d:a4:61:65:08:
         01:65:e6:9c:83:15:e8:ec:35:a5:21:c6:9d:db:db:d3:ae:94:
         10:f4:8a:e2:52:1a:b9:73:6e:02:1e:b5:65:27:f0:55:09:c9:
         38:ee:e9:15:5e:4b:80:6c:54:23:eb:37:8e:cc:e9:ab:52:11:
         9e:64:58:5a:da:ee:90:70:f7:14:64:41:5e:c6:10:6a:ec:85:
         f8:ff:55:39:39:1a:8d:8f:a5:38:84:b7:94:fb:86:42:de:14:
         87:98:44:2d:34:12:49:d1:9c:62:05:7b:7b:d2:d7:df:aa:77:
         06:48:9b:3e:7f:c8:c0:90:15:55:27:f6:20:2b:8d:ca:26:23:
         f3:1b:4d:0a:88:1a:89:64:1b:ab:ba:f5:ba:49:b2:71:75:c6:
         70:0c:b4:b1:e4:d2:42:de:97:e9:b1:2c:cd:4c:f4:73:10:76:
         40:18:50:0c:bb:5d:1a:07:57:56:ea:23:26:87:93:58:2c:99:
         ad:97:94:1b:1f:68:12:23:97:51:44:75:09:a1:3a:f7:a8:a2:
         1d:55:4c:57:39:37:cd:67:a9:c3:44:2a:f7:ac:1e:ce:24:3e:
         18:40:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:58 2026 by rpki-client