This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File:                     VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier:          AaJNmWcQE6ZiFuceeVFpIGnLN0vvmQO1Swz/Mw8DNig=
Subject key identifier:   C5:AE:C5:25:6E:BD:11:CD:1B:0F:CE:31:27:2A:B8:1A:AD:00:5E:D9
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       019C416A7CEDB5297C52F45B4C72E267D951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number:          0AF1
Signing time:             Mon 09 Feb 2026 08:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:23 +0000
Files and hashes:         1: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: ebB+4EAXSFw1/icnHT4SG0bne2WKpOQY32sLjLszI1M=)
                          2: dkSvsv3aojLPi3iHgFIjQm8NUN8.roa (hash: y7+RJdVH8M1szX7d8xaeEgPlUbojCLktpQXvmxHwroM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:7c:ed:b5:29:7c:52:f4:5b:4c:72:e2:67:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: Feb  9 08:00:23 2026 GMT
            Not After : Feb 10 08:00:23 2026 GMT
        Subject: CN=c5aec5256ebd11cd1b0fce31272ab81aad005ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:59:b5:fe:91:cd:79:38:a7:ec:dd:b1:2a:
                    ef:24:7e:65:6b:8a:90:dc:20:08:82:94:fb:34:db:
                    1b:be:ab:46:1e:46:f5:67:4e:66:d4:d8:0a:08:77:
                    21:ab:55:00:1a:9b:56:a7:e8:c8:91:76:e0:35:95:
                    32:6e:c0:42:a7:5a:c2:c7:16:0a:fa:c1:63:7d:d4:
                    37:3d:9b:fb:f8:94:cc:bc:d9:6f:71:0b:d7:e3:31:
                    82:7a:aa:06:79:69:d5:b2:f9:40:11:0c:f3:37:d8:
                    df:04:b5:1f:cf:28:87:99:ba:f1:68:e8:37:cc:8a:
                    a7:73:9f:52:12:bb:82:b2:98:e6:63:3e:98:a1:f4:
                    1a:17:cc:b1:9e:51:c8:fa:2c:3e:b2:5b:77:84:4d:
                    91:d6:84:90:13:28:4a:21:b8:2e:3c:2f:b8:e8:3f:
                    37:27:8b:a3:0f:8f:36:9b:d2:fa:48:31:0b:15:4e:
                    d7:ba:d1:1e:07:d4:48:1d:06:0e:a2:53:04:43:25:
                    90:03:2f:b2:61:91:3f:17:a3:5e:ce:52:e9:6a:4d:
                    12:f0:60:19:e1:64:d9:8f:7a:aa:0a:0c:d1:64:02:
                    06:c8:bd:44:ce:5e:ea:01:54:c3:a0:fa:c8:9d:38:
                    14:13:17:31:38:f2:56:08:b5:aa:09:67:36:20:6f:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AE:C5:25:6E:BD:11:CD:1B:0F:CE:31:27:2A:B8:1A:AD:00:5E:D9
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:09:f7:11:57:a8:ea:57:8e:11:c5:38:f1:f8:da:19:78:03:
         d9:3f:9e:64:82:f2:69:6a:cc:48:3e:47:6b:cc:08:3e:bf:2b:
         18:85:3a:c8:01:5b:1a:35:c8:5c:b4:25:c0:62:b8:b0:c0:4e:
         f8:40:1e:60:81:66:4a:74:10:2e:00:17:f7:95:8c:31:1a:0c:
         69:a7:c3:ee:ba:98:56:77:db:4c:6b:f4:96:cc:31:43:e8:e7:
         aa:6f:18:a4:a5:c8:0a:85:69:57:10:ce:91:83:4a:6d:eb:5a:
         33:ec:41:34:d7:6e:1b:87:cf:34:33:7d:15:88:cc:7e:84:2c:
         62:7e:61:cc:b2:62:8d:30:bb:85:5e:aa:22:06:d7:55:ff:c5:
         81:cc:c5:e7:16:6b:a7:5f:4b:26:61:54:b4:2f:7d:a5:0d:da:
         2d:73:04:a1:2c:1c:12:9b:fc:f7:f3:30:90:1a:02:26:2d:96:
         ea:a2:a5:3f:4b:77:e1:c1:e2:ba:b5:39:11:d5:3e:b3:d8:2d:
         32:ff:42:db:11:0e:4c:48:4b:94:79:77:7f:6b:08:2c:da:7a:
         e8:b1:29:5f:8e:44:02:53:71:2a:a1:82:d1:20:a0:ca:1f:c4:
         39:ec:32:1c:83:48:46:c4:e5:ca:6f:3f:48:5f:2d:b3:3c:79:
         60:ea:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:52 2026 by rpki-client