This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File:                     vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier:          Yk4khnx4GMUTYLIfClUM9qwCShHvEsOj8pOih5O2gy4=
Subject key identifier:   AF:0E:6F:0C:16:AA:83:52:9B:41:F0:1E:02:6B:25:BB:CD:8F:33:8F
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer:       /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial:       019C43FDFF47D11FB7528E92BF712025C841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number:          1096
Signing time:             Mon 09 Feb 2026 20:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:45 +0000
Files and hashes:         1: o6IB38C6xSOkxGBGXTts02Icg5E.roa (hash: 3kcNqmgdeYSwqNssdu/7Mxp1Q+Ah6H4caa+MFD2yuJ0=)
                          2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: 7TI3TTew8u7U7HvBKailKBnb7jdqZWWLlSPtgTAf/ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:ff:47:d1:1f:b7:52:8e:92:bf:71:20:25:c8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
        Validity
            Not Before: Feb  9 20:00:45 2026 GMT
            Not After : Feb 10 20:00:45 2026 GMT
        Subject: CN=af0e6f0c16aa83529b41f01e026b25bbcd8f338f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:50:e6:be:2d:0e:28:78:5d:c9:73:6b:20:
                    84:70:04:3d:5c:5f:20:b5:3a:6f:98:90:a9:e8:3f:
                    01:a8:f5:dd:a8:06:71:4b:43:7a:f5:e3:eb:5e:ef:
                    20:5e:60:4d:31:e2:ca:31:05:af:bc:54:27:d2:37:
                    fb:ec:5a:1f:59:02:24:03:cf:c0:2f:f5:47:02:11:
                    ab:d2:06:25:2c:a1:a0:f3:7f:01:1d:d8:6c:67:d8:
                    b4:41:45:ef:5d:a7:6d:d8:c4:c5:ec:a1:42:3b:3d:
                    a7:e5:3c:7f:f7:0a:bf:74:da:0c:54:2c:ad:4a:c0:
                    b9:7b:24:02:ae:77:50:bd:9b:38:70:e5:0b:e0:df:
                    ad:b0:07:77:a6:fd:fc:02:39:e6:22:c4:22:de:c7:
                    b6:d8:93:83:9b:69:c1:be:ee:22:ab:70:12:4a:08:
                    49:47:6e:16:07:25:91:2b:2b:be:61:1a:81:39:c8:
                    b1:88:f6:d2:20:45:ce:a6:8a:e2:d9:0b:20:93:e1:
                    0c:72:62:32:e5:0b:e3:08:19:51:41:44:17:d7:90:
                    61:1e:77:b1:79:6d:b1:1f:fd:f2:67:5c:96:1d:f1:
                    b5:eb:e3:f5:41:d9:08:cf:1f:62:b9:72:14:bb:75:
                    6b:dc:91:ce:1d:25:b4:78:84:e7:d9:5f:8f:5d:b2:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0E:6F:0C:16:AA:83:52:9B:41:F0:1E:02:6B:25:BB:CD:8F:33:8F
            X509v3 Authority Key Identifier:
                keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:84:9d:14:f7:4b:99:8a:ad:fb:28:56:27:1e:5c:4a:14:57:
         9a:a4:51:63:23:10:c6:b1:9f:ba:3c:9a:23:38:28:ee:99:27:
         a3:4c:9c:4b:ed:a7:07:1e:1d:79:16:45:83:37:65:1a:0c:8d:
         ca:2b:8b:8b:8d:94:02:6c:1e:d2:d1:2b:91:6f:72:34:72:b7:
         24:08:2b:a8:4a:65:ae:93:d2:ad:92:4c:d4:fb:78:e6:bb:ee:
         0f:07:b9:70:fb:e7:86:69:95:5c:6c:cd:be:0c:74:65:f3:63:
         22:fa:a1:c1:1d:bf:5e:eb:24:03:51:5f:66:d5:6f:1e:23:4f:
         7a:6d:5e:1c:23:20:69:28:4d:98:54:94:c0:12:e9:15:a2:7a:
         ba:ba:cd:65:03:92:ea:27:8a:4e:97:87:1f:8d:91:2c:61:52:
         3f:bb:70:75:e1:e2:53:7b:09:cd:0e:d2:24:92:e5:50:6a:55:
         0e:5a:50:d0:e0:0a:d9:ea:d4:e6:c9:8b:4f:2b:b7:53:22:32:
         92:19:0b:bc:78:77:ec:10:88:77:00:89:b1:c5:70:2c:2e:25:
         f6:de:37:39:5b:b5:b2:ec:d8:ef:70:00:f3:90:1a:b7:67:39:
         57:22:2a:51:8a:74:a1:f5:29:d3:23:6c:1d:e2:5d:72:0e:fa:
         10:6e:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:27 2026 by rpki-client