This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File:                     VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier:          2GWj6CwFOF8GPm0fZUCvjiKQODCZs2dbghngYAe40Fg=
Subject key identifier:   8D:6A:9E:CC:D5:90:17:06:6D:00:4E:7E:F6:5B:C1:59:1F:BA:58:DA
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer:       /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial:       019C4322149C9A8F015BD8D7FBE5699185D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number:          0B42
Signing time:             Mon 09 Feb 2026 16:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:32 +0000
Files and hashes:         1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: Sfv7DdtKAClE64PnhqkLnFryi1dkwUDe3kGYHkRFH+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:14:9c:9a:8f:01:5b:d8:d7:fb:e5:69:91:85:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
        Validity
            Not Before: Feb  9 16:00:32 2026 GMT
            Not After : Feb 10 16:00:32 2026 GMT
        Subject: CN=8d6a9eccd59017066d004e7ef65bc1591fba58da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:ad:01:41:57:ce:c0:47:33:38:94:e5:05:
                    c1:a7:bf:e5:c2:c0:9d:08:ff:f6:6d:7d:b1:5a:30:
                    00:9c:3b:00:1e:22:d1:ab:c7:06:3d:74:9c:54:03:
                    fb:a0:e6:a5:7f:dc:a3:c7:df:00:ab:ef:7c:49:9c:
                    9c:6b:5c:36:f9:39:1d:2a:4e:4e:68:83:14:27:79:
                    c7:85:98:34:11:43:61:ab:16:1d:75:c5:68:e6:6e:
                    67:a7:fd:96:2f:b6:89:f1:54:4f:ca:7c:ce:0c:43:
                    3d:59:7d:74:33:e1:a6:82:b6:b4:a2:91:f3:09:88:
                    35:9a:3e:8a:83:7e:9d:2a:26:f0:f5:40:23:46:c9:
                    5c:da:a3:34:e0:a9:00:d3:bf:6e:cf:3a:31:56:f2:
                    fc:b6:12:e3:3e:77:9d:d3:1c:b7:9f:6d:f8:ab:f5:
                    b7:e8:c3:03:a4:2b:72:60:62:a4:28:c4:fd:1a:45:
                    54:d6:3d:8d:40:9d:32:c9:b4:42:0a:f0:b5:09:a1:
                    f2:fa:f1:66:28:10:97:da:a2:94:fa:e8:92:9c:aa:
                    be:ca:db:77:e7:91:c9:c9:b3:61:22:4a:6c:71:4d:
                    99:cf:8a:90:b8:f9:2b:98:8c:6c:a6:ad:14:41:21:
                    0a:57:6d:4b:17:87:cd:88:44:bb:d2:a1:46:a0:f6:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:9E:CC:D5:90:17:06:6D:00:4E:7E:F6:5B:C1:59:1F:BA:58:DA
            X509v3 Authority Key Identifier:
                keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:02:c7:88:39:ab:78:2d:d8:53:25:cd:c7:63:14:a4:ea:03:
         12:88:be:fd:4a:53:39:e0:22:93:9e:67:e4:7f:c5:d3:0a:2e:
         fe:95:78:41:a6:4f:c6:25:35:6d:5c:55:e7:9b:51:6e:16:01:
         84:25:84:8d:34:77:2a:ca:03:c2:0b:a9:c5:b1:a7:05:35:35:
         a0:10:38:1b:24:b3:b7:f5:60:f5:37:4b:ae:71:bc:55:51:c1:
         d7:fb:7b:1c:1e:35:8c:69:cc:3d:1d:e6:0f:14:03:55:9a:39:
         78:98:48:47:d6:fb:93:d5:de:cf:67:b9:48:5e:eb:fe:70:d1:
         62:82:76:51:41:e9:ff:6c:41:35:4a:20:c6:03:9d:8c:7b:67:
         9e:a9:b4:02:07:4b:d1:b2:17:b0:80:ed:26:2a:8f:ba:5e:fa:
         dc:69:4c:d8:7e:43:f7:1d:7d:21:b3:c1:d7:3a:cd:c7:f8:79:
         47:0d:b7:4d:ee:d2:25:9e:34:b9:cb:09:52:d9:b4:e9:8a:b8:
         8b:5a:cd:bf:15:c3:8a:5e:6b:91:0e:58:4c:aa:3b:27:1e:5f:
         50:ba:9a:50:6f:cb:85:09:25:12:37:26:26:b4:73:cd:2d:e7:
         38:a2:21:0b:07:1c:bc:12:51:dd:08:fb:43:17:bb:3b:d1:41:
         e5:e7:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:23 2026 by rpki-client