This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
File:                     vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json)
Hash identifier:          XFTlkUsuiqAnWGmUlWJvyW7f5Sb4TonEpotmwmpxGIk=
Subject key identifier:   73:F9:BB:03:1B:07:EC:5C:56:36:0F:FF:26:C4:C1:CA:1C:DF:2A:10
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Certificate issuer:       /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial:       019C420F685DBD732D80F5DD0F198445258E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
Manifest number:          06F3
Signing time:             Mon 09 Feb 2026 11:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:31 +0000
Files and hashes:         1: 5trZT8H8b8qEyleVSfGYnOWywrY.roa (hash: eOu11Ek0FyJBzZ2HRO2uveVNcG5F2I/J6cQ5U17P66g=)
                          2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: woy5bwO4K+maidpQEfrIz+L+08DDavCyoepExwZj5uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:68:5d:bd:73:2d:80:f5:dd:0f:19:84:45:25:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
        Validity
            Not Before: Feb  9 11:00:31 2026 GMT
            Not After : Feb 10 11:00:31 2026 GMT
        Subject: CN=73f9bb031b07ec5c56360fff26c4c1ca1cdf2a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:43:c1:61:53:f8:b0:2b:a0:21:af:78:8d:
                    cb:de:8d:e2:c8:33:36:2a:32:2f:f3:73:b1:e1:b7:
                    69:29:60:d9:00:0c:4a:2a:16:fb:ef:20:65:45:a9:
                    56:cf:74:90:5b:e6:5d:53:8e:c8:4d:9c:c8:77:cd:
                    73:a5:24:65:84:07:37:fe:52:29:f5:ae:04:2b:dd:
                    56:65:d0:c7:70:75:b2:c1:e6:c4:ba:fa:75:a8:29:
                    ca:46:b7:6d:95:6e:f3:01:29:c6:15:54:90:6b:9e:
                    3c:1b:cd:5c:5b:bd:a5:36:fd:a3:3f:d2:5c:37:e8:
                    a2:60:c5:44:f0:e1:d1:61:cb:69:62:3b:a5:b1:af:
                    20:11:d0:ce:85:77:7c:6f:a6:8e:58:b2:1f:9d:87:
                    e0:9c:ee:97:dd:fa:c1:4d:f4:03:cf:36:30:34:00:
                    88:fb:d3:a5:71:f9:79:10:3a:ca:92:3d:80:db:9c:
                    c0:35:4f:82:91:be:9d:9c:3b:d3:47:30:90:6d:10:
                    ac:07:a0:3d:15:46:ff:c3:ea:66:33:f2:89:c7:8f:
                    ac:80:e5:6b:73:62:4d:a8:be:0b:17:8e:62:7a:99:
                    4b:3b:61:28:8f:42:16:bc:24:c6:98:a1:12:1d:58:
                    bb:79:d9:47:5a:95:57:1e:97:3e:60:6a:db:d4:70:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F9:BB:03:1B:07:EC:5C:56:36:0F:FF:26:C4:C1:CA:1C:DF:2A:10
            X509v3 Authority Key Identifier:
                keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ce:94:9b:bc:c3:7e:1e:16:1d:83:10:33:7c:b7:22:7c:92:
         da:c8:ff:63:28:c2:c4:91:55:af:16:b5:f1:4f:6a:1e:8b:93:
         2c:f7:d7:4b:0f:9e:bb:07:64:10:2e:1e:8f:00:8f:93:91:05:
         d1:bc:5c:10:f6:67:fc:9e:04:4b:1f:fc:16:ee:5c:3c:ef:78:
         c9:1c:3e:a2:27:9e:4b:7c:05:fe:53:52:3b:71:2e:07:08:49:
         c9:34:ce:a1:5f:3f:2d:61:34:d3:ee:ff:1e:33:cf:81:bd:ba:
         a6:8d:57:80:77:bc:0e:6c:21:75:53:61:08:70:3f:50:1b:a0:
         eb:15:e2:8f:82:f1:33:d5:55:d1:09:9e:3c:f9:29:d9:88:3d:
         88:45:e9:7f:69:e5:b6:42:06:ff:64:e4:57:01:e4:78:34:63:
         3e:75:11:b0:11:81:8b:95:a3:33:77:03:18:a7:db:d0:6a:23:
         29:5d:87:d9:71:b2:25:65:c2:4c:68:c9:6c:2c:bb:45:cf:f6:
         d9:7a:c8:e1:cb:f8:d4:31:08:0f:4f:60:37:09:57:a0:85:4f:
         0f:77:66:a5:e0:df:33:e4:00:cf:74:16:db:67:e2:d7:01:75:
         2f:61:47:b6:00:dd:a9:e8:d4:65:02:41:88:4d:85:44:ce:d2:
         08:de:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:54 2026 by rpki-client