This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File:                     VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier:          b5CDKboOPnZctA9Z+NTT3toxJQhZilJYS1lrJCklPdw=
Subject key identifier:   52:1B:42:99:F0:7B:52:1E:21:75:13:53:B5:43:C7:9A:8B:42:3A:35
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer:       /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial:       019C42B457D52E9104B5852DE8F77E77236F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number:          113B
Signing time:             Mon 09 Feb 2026 14:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:41 +0000
Files and hashes:         1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
                          2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: 4ePf5HRWu+PgduYjo5sf661mfxG9wgDpnHWzyj3WCvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:57:d5:2e:91:04:b5:85:2d:e8:f7:7e:77:23:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
        Validity
            Not Before: Feb  9 14:00:41 2026 GMT
            Not After : Feb 10 14:00:41 2026 GMT
        Subject: CN=521b4299f07b521e21751353b543c79a8b423a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:29:25:b2:7d:47:9b:fb:88:7a:83:ef:07:
                    26:bc:78:2b:d4:9e:71:f3:26:58:1c:05:9b:62:f0:
                    e8:2a:ee:97:5b:f2:0d:8e:40:6b:70:57:ac:83:ad:
                    f6:0c:ba:d1:85:0f:91:49:e1:60:27:3b:78:9a:a4:
                    cf:14:0d:15:ef:e3:c5:04:58:92:6b:46:80:04:11:
                    26:bc:95:11:80:c9:eb:fa:76:40:11:f9:f8:48:7f:
                    13:e7:7d:e3:72:13:a7:26:c3:26:6b:9d:47:37:21:
                    07:1d:19:b1:ca:b6:a9:a7:68:0a:cc:68:fa:90:2f:
                    b3:05:24:ef:87:46:22:35:a3:c0:28:97:3e:ce:87:
                    1a:0a:fa:94:6d:88:1b:79:37:56:5c:83:87:ab:ed:
                    b5:22:7b:9b:5f:33:44:c4:38:00:75:7f:d3:74:69:
                    0b:48:94:9d:d9:37:ce:2a:c5:d4:0b:ce:f6:49:dd:
                    0c:48:b9:b0:a7:90:56:ab:ba:00:5a:5e:68:f1:24:
                    24:e2:bb:c0:c7:e2:80:f7:62:78:d4:03:27:5e:c8:
                    41:39:36:09:a4:e4:85:db:83:20:03:f7:d1:9a:0f:
                    ec:12:09:dd:86:92:6c:9c:dd:4c:81:b1:87:32:b0:
                    3f:17:ce:fc:27:bb:ac:59:4e:4e:09:d0:9d:47:64:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1B:42:99:F0:7B:52:1E:21:75:13:53:B5:43:C7:9A:8B:42:3A:35
            X509v3 Authority Key Identifier:
                keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:41:af:e5:8e:21:0c:6f:b4:1c:a2:ed:0e:bf:ac:5d:49:
         d9:1c:0b:fe:6e:46:ac:08:f1:5c:1a:30:b2:91:d4:ec:7f:ee:
         a5:cb:ae:75:eb:36:39:ff:6a:0a:37:70:24:3f:d2:50:76:a2:
         f1:58:32:60:83:3b:3a:14:0b:6b:ae:58:9e:4e:a2:d3:c8:2b:
         ab:02:b2:ca:90:94:ab:dd:53:b8:09:b6:8a:d2:1e:d4:c3:a3:
         8d:47:65:e7:4e:b0:1e:cb:6c:76:ea:a7:ec:e9:80:61:2f:db:
         bd:9a:82:8a:cb:a0:f9:05:b6:14:ea:96:05:68:5f:9a:04:8f:
         c0:9a:12:ad:97:93:8e:c2:b5:9a:39:bf:45:02:29:4d:3f:1d:
         30:fe:af:ba:b6:7f:d1:c3:f2:00:5b:2d:66:57:aa:c6:de:8a:
         ae:0e:2d:a2:da:41:e4:25:58:2c:2c:41:2d:10:b9:c4:4d:9e:
         b9:a2:d4:25:ad:d6:ea:e3:1d:56:f0:ec:38:f8:15:8c:74:ea:
         48:4e:a0:c8:33:6f:99:2a:a5:eb:b0:d0:52:9d:7d:6d:54:df:
         35:38:59:81:52:fb:ca:08:95:93:64:b4:17:80:b4:df:ee:12:
         69:2f:bc:ef:41:4b:81:c3:a3:6f:65:62:68:fa:0c:6f:b4:fa:
         c5:24:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:55 2026 by rpki-client