This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
File:                     vdAX3W18v-gmYVTBrkNMTPi2ilc.mft (raw, json)
Hash identifier:          Enox8fwRLcn16yWDeqbk6NGsvp2IsAiGiZ3r6cuFjsc=
Subject key identifier:   26:4F:C3:EF:7C:FF:80:A2:94:16:5D:66:73:38:98:A2:C6:F1:58:D2
Authority key identifier: BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57
Certificate issuer:       /CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
Certificate serial:       019C420F79EC93CE2CF378DB1574BE430694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
Manifest number:          F7
Signing time:             Mon 09 Feb 2026 11:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:36 +0000
Files and hashes:         1: rAid6SWBifBeRfH_M1UAs5DcdRw.roa (hash: FzoFH/XQPycD4zEWka8Y3TTeasXdHpRVco1PTcTkVs4=)
                          2: vdAX3W18v-gmYVTBrkNMTPi2ilc.crl (hash: kyqWAQ/8jzbDHWfHR38EaGaBvANK/FQtsDX8gZ/6jiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:79:ec:93:ce:2c:f3:78:db:15:74:be:43:06:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd017dd6d7cbfe8266154c1ae434c4cf8b68a57
        Validity
            Not Before: Feb  9 11:00:36 2026 GMT
            Not After : Feb 10 11:00:36 2026 GMT
        Subject: CN=264fc3ef7cff80a294165d66733898a2c6f158d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:fb:ad:e6:1c:8f:86:ed:6f:cd:81:e4:a0:
                    82:e3:c5:7d:4c:6a:0d:4d:32:75:be:6f:4c:88:f4:
                    cd:7a:b9:c2:4e:34:de:d7:c0:49:02:ea:fd:f9:e1:
                    19:57:39:5f:ba:4b:44:26:62:d3:c5:b0:d5:d2:12:
                    19:ee:c3:be:00:2e:de:f0:fd:71:f0:23:fc:91:87:
                    b9:66:80:8d:c5:95:fd:79:79:d5:f2:6f:3f:21:b5:
                    34:8c:b1:c8:16:df:d6:21:0c:36:27:61:ef:d6:42:
                    b0:4c:71:b8:04:3d:f8:d1:dd:22:d4:fb:6a:a2:11:
                    05:1b:26:c1:c4:fb:0e:9d:90:8b:cd:fe:ea:86:15:
                    9f:74:02:32:43:fa:f1:7e:8d:4c:7f:2e:63:cf:40:
                    c7:34:f2:f8:e2:00:46:63:63:1e:e7:a1:cd:58:d3:
                    ce:cd:93:59:5b:29:f2:59:53:cd:c3:82:26:02:d6:
                    02:28:d1:fc:df:a3:58:b4:d7:e9:1d:69:79:fb:60:
                    76:e2:af:5b:26:30:48:f4:ac:09:6b:2f:1b:44:06:
                    d1:e6:57:e9:e3:1c:c1:73:f1:3e:63:0b:ba:c8:98:
                    73:03:cd:34:48:d7:fc:af:7c:35:0b:95:a3:72:3c:
                    ba:5d:9b:18:ff:0d:7a:f2:aa:48:88:0f:3f:c2:91:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:C3:EF:7C:FF:80:A2:94:16:5D:66:73:38:98:A2:C6:F1:58:D2
            X509v3 Authority Key Identifier:
                keyid:BD:D0:17:DD:6D:7C:BF:E8:26:61:54:C1:AE:43:4C:4C:F8:B6:8A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdAX3W18v-gmYVTBrkNMTPi2ilc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/be7ba0-107c-42b6-84e5-336238ab6dba/1/vdAX3W18v-gmYVTBrkNMTPi2ilc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a0:34:f1:bc:a5:74:ef:6c:2e:7e:4c:af:c7:7f:bf:77:69:
         97:12:f8:53:aa:f2:69:98:be:02:c3:63:f9:02:db:36:f2:18:
         5e:d9:cb:cd:89:ae:d9:21:f6:b7:85:86:09:95:a3:14:28:62:
         93:06:83:70:e7:d3:64:29:2c:08:73:ae:b8:32:98:7f:29:72:
         40:ed:f4:75:3a:32:69:3d:06:c3:4d:32:4b:72:50:6d:ec:fa:
         bc:e0:50:31:c6:1f:51:55:18:b7:97:35:16:54:7e:21:20:b3:
         d8:86:8c:21:fb:9a:11:01:a9:17:47:ae:b4:1f:5b:1e:5d:a6:
         85:94:07:bf:34:16:3e:be:d3:09:71:bf:40:54:82:1d:79:71:
         02:d7:91:76:46:47:ff:5f:45:90:52:b1:c0:c5:ee:f5:74:6a:
         24:7c:a5:c1:5e:cd:a1:c7:68:63:8a:15:8e:f6:d2:7f:1f:73:
         77:e6:17:be:9e:15:a7:9b:f5:d5:89:46:81:f5:5f:a8:69:90:
         63:35:21:23:a5:fb:e2:63:e9:65:0f:bc:02:18:c5:dc:a1:33:
         d3:9c:36:cb:67:fb:3c:14:68:28:c7:9f:dd:18:c6:f4:85:1a:
         d6:dd:8b:84:f8:09:90:1e:81:f6:03:26:74:fc:7d:f9:2e:04:
         f8:7b:74:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD3nsk84s83jbFXS+QwaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDAxN2RkNmQ3Y2JmZTgyNjYxNTRjMWFlNDM0YzRjZjhi
NjhhNTcwHhcNMjYwMjA5MTEwMDM2WhcNMjYwMjEwMTEwMDM2WjAzMTEwLwYDVQQD
EygyNjRmYzNlZjdjZmY4MGEyOTQxNjVkNjY3MzM4OThhMmM2ZjE1OGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxT7reYcj4btb82B5KCC48V9TGoN
TTJ1vm9MiPTNernCTjTe18BJAur9+eEZVzlfuktEJmLTxbDV0hIZ7sO+AC7e8P1x
8CP8kYe5ZoCNxZX9eXnV8m8/IbU0jLHIFt/WIQw2J2Hv1kKwTHG4BD340d0i1Ptq
ohEFGybBxPsOnZCLzf7qhhWfdAIyQ/rxfo1Mfy5jz0DHNPL44gBGY2Me56HNWNPO
zZNZWynyWVPNw4ImAtYCKNH836NYtNfpHWl5+2B24q9bJjBI9KwJay8bRAbR5lfp
4xzBc/E+Ywu6yJhzA800SNf8r3w1C5Wjcjy6XZsY/w168qpIiA8/wpHomQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZPw+98/4CilBZdZnM4mKLG8VjSMB8GA1UdIwQY
MBaAFL3QF91tfL/oJmFUwa5DTEz4topXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUt
MzM2MjM4YWI2ZGJhLzEvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZTdiYTAtMTA3Yy00MmI2LTg0ZTUtMzM2MjM4YWI2ZGJh
LzEvdmRBWDNXMTh2LWdtWVZUQnJrTk1UUGkyaWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaA08byl
dO9sLn5Mr8d/v3dplxL4U6ryaZi+AsNj+QLbNvIYXtnLzYmu2SH2t4WGCZWjFChi
kwaDcOfTZCksCHOuuDKYfylyQO30dToyaT0Gw00yS3JQbez6vOBQMcYfUVUYt5c1
FlR+ISCz2IaMIfuaEQGpF0eutB9bHl2mhZQHvzQWPr7TCXG/QFSCHXlxAteRdkZH
/19FkFKxwMXu9XRqJHylwV7NocdoY4oVjvbSfx9zd+YXvp4Vp5v11YlGgfVfqGmQ
YzUhI6X74mPpZQ+8AhjF3KEz05w2y2f7PBRoKMef3RjG9IUa1t2LhPgJkB6B9gMm
dPx9+S4E+Ht0pg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:56 2026 by rpki-client