This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File:                     VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier:          x/LBQs2BGvFHdFl36hYaEzf1G1NLWjTGD3zr9r+ZKL8=
Subject key identifier:   31:46:EB:94:C6:80:9D:26:8B:E4:50:44:DF:8F:CF:44:4E:3B:50:21
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer:       /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial:       019C427D87C5008622664464577F7C2BDE5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number:          0551
Signing time:             Mon 09 Feb 2026 13:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:48 +0000
Files and hashes:         1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: gt8BtSts/2uLm0/y3RZHlI1W4PLx6COZBr8Z1Dddaf0=)
                          2: r8T9kW8X8GtCFTRxWjnqQQkGt18.roa (hash: h3aumMGf0ToESbOzhSKHlEo8BiRIXKiUebFOoBpkJJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:87:c5:00:86:22:66:44:64:57:7f:7c:2b:de:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
        Validity
            Not Before: Feb  9 13:00:48 2026 GMT
            Not After : Feb 10 13:00:48 2026 GMT
        Subject: CN=3146eb94c6809d268be45044df8fcf444e3b5021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:66:c7:a3:3a:dc:dd:6f:1a:89:08:88:71:
                    b2:68:5f:bc:bc:50:04:a9:f4:fa:1a:80:3d:03:99:
                    90:c3:5b:c3:fa:34:39:c8:cf:32:51:81:a0:a2:84:
                    0f:d3:9d:df:04:d4:b1:95:28:c0:16:59:76:e0:f3:
                    35:2b:7c:db:91:13:55:64:ce:14:e6:9a:05:b4:27:
                    f9:cf:77:45:c2:f5:e7:4b:bc:3a:1b:50:63:ed:e7:
                    98:cd:eb:a7:38:eb:44:e6:6e:1b:62:82:0c:1a:e9:
                    8f:ab:b7:ed:98:88:75:71:bc:46:b9:07:e8:f9:68:
                    dd:f0:b1:09:1b:c9:c8:b1:36:20:7d:f5:15:db:e2:
                    42:c7:c2:1b:7c:dd:6f:98:46:7f:fd:c4:90:4b:0c:
                    c5:65:73:c7:46:fa:4c:e6:8f:94:1b:e8:f7:f0:eb:
                    92:8c:20:a9:a5:5c:06:8a:eb:f2:a9:e8:06:bb:26:
                    ae:6f:80:61:f6:53:05:a0:c3:aa:a1:cc:b1:4b:75:
                    eb:04:93:a1:5e:97:bc:c0:49:07:34:b1:bb:3e:88:
                    30:96:65:a4:04:50:36:0d:8b:21:e5:9b:fc:2b:08:
                    19:13:88:97:53:e1:59:fc:81:d1:aa:fb:15:d0:af:
                    33:b8:cd:40:f0:dc:fa:85:c7:39:7d:8b:c4:44:0d:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:46:EB:94:C6:80:9D:26:8B:E4:50:44:DF:8F:CF:44:4E:3B:50:21
            X509v3 Authority Key Identifier:
                keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:12:15:81:8f:0e:10:50:36:4d:15:f3:de:81:16:97:fc:09:
         3d:dd:1b:f8:24:39:6d:4a:96:64:19:c2:dc:43:e0:1e:92:87:
         4a:d9:cd:c8:7f:44:eb:b7:99:a3:7b:9e:76:86:a6:da:24:7e:
         78:8c:7a:6d:f7:09:a1:55:18:21:0f:86:56:05:d2:a1:5f:99:
         24:98:e3:42:6f:c7:a0:02:92:25:9c:81:d8:2f:69:b7:06:7f:
         10:94:37:82:3c:77:ed:8e:8c:7c:61:92:51:1e:35:30:ae:c1:
         bf:52:12:8e:c7:54:85:74:d3:87:1a:02:06:92:9a:1e:18:82:
         51:54:24:f2:f0:92:07:9e:55:68:f4:7c:eb:12:b2:a0:6d:c4:
         fe:a7:09:73:e7:57:e9:c1:ee:08:90:de:82:48:2e:a8:73:65:
         31:da:0f:0a:7d:12:66:f4:1a:18:1d:77:05:c3:2f:13:d5:71:
         3f:25:4a:2d:9d:19:6a:bc:7d:9e:07:df:b3:14:1d:ba:b7:e3:
         c4:6a:80:16:f3:99:9c:a1:30:14:81:bd:67:92:f8:b2:fd:0e:
         60:50:97:40:10:de:ec:14:ba:e5:5d:8d:64:e9:84:0f:30:43:
         71:74:d7:a9:c5:95:b7:7e:50:33:ea:d4:11:0a:f3:5e:ca:0e:
         39:83:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:32 2026 by rpki-client