This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
File:                     vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft (raw, json)
Hash identifier:          ebT56rkK1wNdjqYTU9exLVnSLaSItpVePa2jk288EF8=
Subject key identifier:   A1:BF:F6:B6:53:59:C4:72:B2:92:3F:E2:CC:58:31:0C:CA:F5:AD:3F
Authority key identifier: BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D
Certificate issuer:       /CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
Certificate serial:       019C427DA62B3079888D5D408BE7994D59D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
Manifest number:          029B
Signing time:             Mon 09 Feb 2026 13:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:56 +0000
Files and hashes:         1: vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl (hash: Hnp4NnQXPrUFeXw6CKZDbVzdZ6jZnRmpa1Lk4X/JJEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:a6:2b:30:79:88:8d:5d:40:8b:e7:99:4d:59:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2b7d9aaecc9396caa8abdffdae0c78291d5a4d
        Validity
            Not Before: Feb  9 13:00:56 2026 GMT
            Not After : Feb 10 13:00:56 2026 GMT
        Subject: CN=a1bff6b65359c472b2923fe2cc58310ccaf5ad3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:16:58:b8:03:27:4b:df:ef:ff:f7:d6:40:
                    d9:75:58:7c:a7:0e:47:e4:c9:50:54:24:21:9e:05:
                    a9:92:4a:a1:b6:f6:8f:cc:5d:ca:fd:c8:12:6b:6e:
                    a0:e6:bd:29:6c:07:33:36:cd:40:2a:36:c4:de:77:
                    43:4e:2a:99:9c:17:85:c6:53:81:df:df:bc:42:42:
                    2d:05:3c:51:a1:1f:84:65:0d:45:97:30:5a:64:8e:
                    4b:87:4e:a6:ca:9b:6d:18:2e:39:a9:ec:b1:9e:d8:
                    62:46:35:ec:ad:ce:ac:69:4e:93:ee:85:37:2a:61:
                    ad:db:e7:85:ca:a6:e4:d6:26:57:e3:06:3b:e0:2e:
                    78:45:bb:89:a0:55:8c:52:a9:62:ed:d9:90:0a:99:
                    b3:1f:c7:59:a1:93:7b:57:17:ba:ef:24:dd:f0:c6:
                    fc:6a:16:76:11:03:d2:ec:82:7f:e7:fc:8f:37:a6:
                    92:cf:63:78:9c:50:5d:9f:fa:76:5b:b1:a2:36:66:
                    b6:7d:77:dc:3b:35:0b:e4:fd:ec:ab:a2:2c:cf:59:
                    1d:1c:28:35:92:5c:91:2f:2c:da:cd:67:4f:83:8e:
                    e9:15:37:3b:d4:e3:7e:6d:b0:90:bb:06:0a:98:01:
                    e4:d6:39:79:4f:3d:9d:38:b5:8f:5b:64:1b:a2:eb:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:F6:B6:53:59:C4:72:B2:92:3F:E2:CC:58:31:0C:CA:F5:AD:3F
            X509v3 Authority Key Identifier:
                keyid:BE:2B:7D:9A:AE:CC:93:96:CA:A8:AB:DF:FD:AE:0C:78:29:1D:5A:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vit9mq7Mk5bKqKvf_a4MeCkdWk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8278e-3bf8-4960-b4ad-68de6a0fea84/1/vit9mq7Mk5bKqKvf_a4MeCkdWk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:09:fe:3f:cc:da:ef:15:33:c5:72:a7:c1:c9:d2:4a:49:
         3b:23:b5:cd:8a:b0:af:2f:b1:8a:ef:c8:85:2d:d1:1d:ea:9e:
         f7:28:86:83:b4:b5:7f:73:87:06:8c:53:75:7c:17:be:a5:04:
         2b:40:36:8b:82:c9:d4:7a:43:63:d2:f0:71:e4:3a:c6:63:ac:
         71:16:d1:ab:5b:86:83:fb:cf:64:40:83:05:23:a7:5d:b5:f5:
         1c:00:60:a2:80:89:35:97:2f:70:cd:70:7d:9b:89:c3:f6:9b:
         02:bb:64:b5:a0:3e:b4:c9:39:5c:eb:8a:6c:75:31:d2:ed:f8:
         2d:13:52:ee:83:43:b2:f2:ed:75:a8:6c:80:64:58:9c:2c:2b:
         27:8a:7a:ec:62:89:8b:f5:c5:13:26:6b:5e:ec:6b:05:f9:55:
         17:4b:cb:a7:3e:ff:ed:6b:75:d4:1e:f0:2e:c9:18:6b:0b:dc:
         62:80:36:12:b8:94:41:c5:59:fe:6e:88:45:91:77:a5:e0:da:
         09:90:05:ed:a7:df:41:6d:f2:9d:af:37:4c:77:cd:01:18:3f:
         07:73:81:1f:79:63:81:ee:97:e7:8d:70:3b:d8:70:be:91:d7:
         39:50:8b:b6:62:da:96:ea:10:a7:52:6b:f2:32:e1:c6:cd:70:
         8b:bb:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:39 2026 by rpki-client