This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File:                     VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier:          MPZaV/OahFT8cgbjFtLxOc6cJm3gU5sGVkkSeFg9RxM=
Subject key identifier:   15:3A:B5:AD:67:96:5D:DE:AE:7D:36:49:5B:31:07:01:96:78:DA:0A
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer:       /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial:       019C41A15D98E5DDDA0978A3BA29DACAD2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number:          0555
Signing time:             Mon 09 Feb 2026 09:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:20 +0000
Files and hashes:         1: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: 3vCIFGPhh5PjNR3tICw8mSFnX7y7OzSix4r97LjAO40=)
                          2: Wjs_phSFXCf5P7VyIC49aTpiAXE.roa (hash: lvpNQeyfYNhi6y1BNKSvPAqUckUzrotwMitNw+e8iYU=)
                          3: Xk5XLLpJTJ0en8K-haNjI8W7sqA.roa (hash: dyeK7boJ0LjO1L8yQnVoytvIo19PRNiRm/STwxfeu9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:5d:98:e5:dd:da:09:78:a3:ba:29:da:ca:d2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
        Validity
            Not Before: Feb  9 09:00:20 2026 GMT
            Not After : Feb 10 09:00:20 2026 GMT
        Subject: CN=153ab5ad67965ddeae7d36495b3107019678da0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:b3:94:c9:db:10:3d:89:9b:e7:a1:13:48:
                    e8:47:67:41:c4:da:9f:4c:4e:d4:60:5d:08:dd:c1:
                    05:69:67:3f:a6:f8:cc:c9:e2:b7:8e:56:68:25:01:
                    7d:80:bb:b6:6c:2c:9d:55:3e:a3:05:b2:9b:82:e2:
                    0c:15:b0:98:db:f6:ba:f3:0d:2b:c6:e8:94:72:a8:
                    76:a4:e4:f8:32:94:aa:7e:09:31:a4:cf:9f:07:c3:
                    3b:b9:34:02:61:a4:8c:be:ac:7d:91:0c:e3:e0:da:
                    75:a4:97:cc:bf:06:09:d0:df:97:a9:c9:d8:95:1e:
                    0b:59:27:ac:ee:f7:e3:bf:a8:01:34:1d:f5:fc:06:
                    be:97:c7:56:cb:2e:13:e2:6a:c6:b1:01:95:47:f5:
                    e4:68:4c:b0:83:e9:e1:56:fe:3a:7d:f4:98:54:50:
                    0e:09:b8:5e:dc:8d:52:18:68:51:ff:b6:ce:89:e4:
                    da:79:ca:66:ff:59:14:37:2b:e7:9c:28:ac:35:3b:
                    d3:9e:d3:00:b8:7b:bc:3a:91:7a:55:6e:0c:e3:14:
                    68:ed:a8:df:2f:91:92:b2:a8:03:f5:f9:a1:25:06:
                    0d:0d:64:27:b0:d1:46:19:7f:bf:1b:09:1d:1d:f2:
                    54:99:f2:83:a8:a2:f2:13:a7:9b:7b:d5:8d:22:e7:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3A:B5:AD:67:96:5D:DE:AE:7D:36:49:5B:31:07:01:96:78:DA:0A
            X509v3 Authority Key Identifier:
                keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:dc:3f:9f:ec:54:4a:3e:6e:f9:52:c4:c7:9f:d8:08:37:63:
         62:37:a2:b1:4e:e4:70:51:30:57:a3:b5:81:1f:27:85:9c:32:
         97:10:1d:93:f5:74:50:d5:b9:b6:cf:5d:6b:71:b6:d1:a7:27:
         4d:9a:ee:67:59:d7:5a:54:97:54:3e:22:17:6d:78:3e:60:35:
         35:78:ef:4f:24:b1:8a:76:37:d8:79:39:33:fe:d4:7d:c9:d2:
         cb:31:02:d4:13:56:fe:85:ae:e6:a1:01:fd:f7:7c:6f:5e:c0:
         1c:87:8d:af:19:fc:12:00:c1:b8:bc:20:1b:c5:e8:c3:14:64:
         cc:59:ce:6f:dc:c1:cb:bd:aa:92:79:cd:47:62:0f:63:cc:b6:
         89:e1:02:85:9a:e0:62:92:dd:b9:e3:9d:9e:a2:2f:63:48:0a:
         7e:ca:44:9c:8e:49:ac:a1:8f:a3:42:84:21:48:84:ba:be:91:
         df:4a:82:fc:67:e9:ac:45:ef:dc:7b:59:7b:59:fa:9c:f4:62:
         23:5f:ab:6b:fd:2b:80:1f:21:3b:1f:07:60:03:1b:ce:75:81:
         2d:63:8d:87:b2:5c:f3:5c:09:52:d1:47:be:ea:0b:6e:75:66:
         a9:75:fc:83:41:76:c4:30:0e:84:69:7d:c1:72:d0:b8:1b:40:
         cb:07:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:17 2026 by rpki-client