This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
File:                     VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json)
Hash identifier:          F9CJR4fim7DWhj/fuQaeNDS1jkTq78oTZKWB9iTwUHk=
Subject key identifier:   36:79:DF:DA:FB:8A:61:2B:29:A5:5B:6D:66:78:4D:2D:02:2F:9A:B7
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Certificate issuer:       /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial:       019C4322001059D4C9B220136C39EC93AE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
Manifest number:          0749
Signing time:             Mon 09 Feb 2026 16:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:27 +0000
Files and hashes:         1: 6BRNGEc-yI-LaV9wXNJpVpORCRo.roa (hash: xpVt+t681dM8x0OZBMnJR9/9LbsCdO2uDFKH45Cg9B4=)
                          2: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: +ezsBT1IguhvppHzhzHzG9AOSN9TifTC6BznBKEtvqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:00:10:59:d4:c9:b2:20:13:6c:39:ec:93:ae:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
        Validity
            Not Before: Feb  9 16:00:27 2026 GMT
            Not After : Feb 10 16:00:27 2026 GMT
        Subject: CN=3679dfdafb8a612b29a55b6d66784d2d022f9ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:b8:f3:6c:bb:8c:c1:4b:1e:fb:e3:14:19:
                    0c:20:de:09:15:d6:81:6f:4a:5c:df:bd:ec:c0:ec:
                    88:55:90:d3:90:82:6a:38:10:7f:06:4f:4b:30:76:
                    b8:1b:95:44:93:f0:c5:02:b7:02:76:f7:d3:22:c4:
                    a1:af:02:40:e8:6d:69:35:20:a3:09:4e:2c:37:5d:
                    c8:2f:e3:b1:62:ff:57:cb:db:bb:8a:f8:36:83:9a:
                    1a:0f:12:27:ae:9a:ac:c8:77:25:04:94:0c:08:a6:
                    ed:ab:3e:f2:68:2a:1a:06:67:1f:c1:da:80:b8:8b:
                    dd:c1:72:06:38:95:3b:fe:e2:56:3d:9d:7e:4f:0a:
                    2d:18:4f:d6:cd:1d:40:09:27:e5:72:b4:9b:c3:39:
                    e9:70:d2:c2:fb:9b:1b:f9:d3:cc:81:43:0d:29:81:
                    2c:9b:19:53:ac:b8:ba:ef:8e:fd:1e:e9:d9:e0:46:
                    72:b8:26:8d:4b:78:6d:34:75:42:d8:10:69:ab:76:
                    b0:e6:4a:de:c6:67:02:d3:f3:94:07:29:15:51:36:
                    3a:2e:ef:06:27:e4:1d:a9:4a:49:57:7d:20:be:f2:
                    7a:d1:b0:cc:09:24:62:a0:8b:d0:79:ca:42:c9:ff:
                    2e:1b:4a:78:0e:92:7c:c9:fb:f9:f9:5d:89:b0:f7:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:79:DF:DA:FB:8A:61:2B:29:A5:5B:6D:66:78:4D:2D:02:2F:9A:B7
            X509v3 Authority Key Identifier:
                keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:b4:71:db:6f:56:08:e6:91:ee:84:1d:db:0b:8a:a2:ab:
         6d:fe:a8:d3:70:9b:cd:c5:0b:dc:ab:44:80:e8:e9:66:3a:f4:
         ef:c2:ba:b8:bb:a9:ec:97:3f:37:08:a4:99:b8:c4:0f:3d:bc:
         9a:bd:1a:1e:15:26:06:91:0c:08:ad:2a:63:24:b3:72:17:7c:
         6d:c2:e3:ce:4c:09:93:36:99:3d:fa:3d:77:f9:aa:c1:a4:03:
         9c:57:27:bf:21:0d:82:e6:c3:18:11:21:7d:3f:b7:a4:2a:11:
         15:0e:fa:4c:c3:8a:5a:15:d0:b2:a9:f9:aa:61:5a:2c:da:7c:
         93:dc:89:a8:10:f6:a0:a3:3e:54:09:4c:22:da:15:83:bd:ef:
         2e:bf:0e:15:4f:0d:40:b9:ab:3a:94:20:52:19:8a:7f:cf:ae:
         d6:34:27:7c:97:eb:8f:e3:1b:d0:6e:bf:d9:4a:51:5e:9d:e8:
         5c:51:b1:5a:67:98:41:0b:a3:88:55:1e:a7:65:4e:70:bd:bd:
         60:1e:01:f6:b6:57:0d:2f:ce:67:ec:ec:fc:c0:07:80:f6:44:
         a6:3a:f4:37:23:1e:fc:91:bf:4e:53:43:88:72:30:33:0b:62:
         90:3b:b4:d6:24:29:15:51:67:f7:f0:01:32:da:2f:fe:57:d6:
         34:ca:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:57 2026 by rpki-client