This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File:                     VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier:          YvQRmSI5vLolIb390yk1wANGWiH1A4F7FAUcnB9rDV8=
Subject key identifier:   47:D2:7C:F4:42:D8:09:53:07:28:67:AA:D4:55:B2:81:50:96:14:90
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer:       /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial:       019C42EB2747B2EA1F3A0902F2263623F429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number:          0517
Signing time:             Mon 09 Feb 2026 15:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:33 +0000
Files and hashes:         1: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: C8yNJxiFuKSsahzEaM5uk9SIGQiGSRfxrstZ5k1yhBI=)
                          2: nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa (hash: NleUca8CC+8N3vwArPhRJ2zlLJElpiDe/ATFPORPOnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:27:47:b2:ea:1f:3a:09:02:f2:26:36:23:f4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
        Validity
            Not Before: Feb  9 15:00:33 2026 GMT
            Not After : Feb 10 15:00:33 2026 GMT
        Subject: CN=47d27cf442d80953072867aad455b28150961490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:97:d1:1b:ca:b5:65:4c:6a:f8:2b:01:18:
                    c3:f4:91:11:7b:f1:22:32:97:64:d0:b8:53:c5:64:
                    16:c6:5b:21:5d:30:8e:3c:13:82:cb:c9:41:8a:8f:
                    fc:dd:09:40:e5:96:42:c5:f9:7c:af:6a:0e:80:46:
                    e5:40:10:72:4d:bd:d1:e6:4d:f2:bf:c2:47:98:04:
                    d5:34:73:d1:b3:5a:87:51:13:db:5d:3f:20:0d:b2:
                    ae:95:6b:f4:42:5d:3f:a7:c3:98:29:cf:95:27:a8:
                    2b:17:ac:85:06:ac:8d:b2:f3:b5:fd:4a:cb:40:a7:
                    f8:92:26:22:db:44:ea:2f:62:41:67:f2:b1:d1:bb:
                    b3:90:38:19:78:3b:af:9a:9a:7a:21:e5:87:5b:17:
                    1d:71:2c:48:58:d2:6d:e8:4f:35:f2:5d:e5:51:de:
                    16:3f:74:1f:72:94:bd:98:df:09:75:29:09:e4:20:
                    81:80:ff:e6:84:56:dc:97:7b:d5:92:07:69:9c:33:
                    16:10:43:c5:94:81:8f:2e:27:c0:53:1a:c6:c3:71:
                    12:a4:c8:97:e5:11:77:df:11:7c:29:e6:1b:75:c4:
                    c4:a9:03:f6:74:0b:16:62:bb:56:bf:7a:10:a4:08:
                    be:89:8c:87:5f:bf:ff:f3:49:4b:97:8b:9b:86:14:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D2:7C:F4:42:D8:09:53:07:28:67:AA:D4:55:B2:81:50:96:14:90
            X509v3 Authority Key Identifier:
                keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:58:f0:f9:5a:b0:9c:57:79:3a:5d:b4:12:63:1b:6e:9f:3e:
         81:e9:dd:ff:f9:b4:6f:7f:48:eb:8d:2d:ed:c1:8c:0e:1a:45:
         05:c5:3f:22:0e:42:2e:bb:d3:c2:51:f7:06:53:63:c4:1b:df:
         b1:10:58:fd:dd:cb:b2:0d:8d:16:0d:f3:b0:e8:ab:10:a2:44:
         81:ff:de:83:8d:d2:1c:01:c8:f5:b9:f3:fe:4e:32:66:ae:7f:
         c7:fc:31:97:76:b3:fa:9e:4a:53:0a:fd:fb:10:91:b7:0a:ad:
         80:66:74:32:88:79:c3:8c:f5:d9:5d:8c:5b:33:86:9c:a3:19:
         c5:67:9d:8d:5a:50:cc:db:81:34:20:fb:5f:78:38:82:58:12:
         b8:f1:fc:e8:d3:04:a2:3e:b9:db:88:ac:7e:3e:fa:86:15:df:
         b8:0d:50:f3:06:81:0d:49:24:12:b3:a0:35:45:9b:0c:97:0c:
         73:c5:1f:55:55:68:55:c0:e7:99:a0:9b:f1:d2:63:21:5a:d7:
         ed:3e:47:34:f3:ab:ef:8c:cf:71:57:46:5c:ba:a9:77:e8:c4:
         3c:7f:d6:bf:3e:17:b7:58:b6:a0:69:f3:76:3c:e6:c6:3f:65:
         ec:10:8e:e5:52:45:f2:2a:db:0b:44:23:0e:aa:2d:d4:05:1c:
         d1:af:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:52 2026 by rpki-client