This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          UWQJuxDEZ5neWzXd2I/7fKwgj/bKWgvCbVut7/Jpo98=
Subject key identifier:   8D:C0:7E:8A:47:09:41:07:97:E2:3A:18:03:DE:85:9E:25:EA:F4:CF
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       019C44349C6A109544288451763C7B60E5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0BAF
Signing time:             Mon 09 Feb 2026 21:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:24 +0000
Files and hashes:         1: 40PEkc-tm16gXqeqAbwomk4v-Yk.roa (hash: kAK1M/TYnJhlmuxrKwwSccKl4wPc1ihYIyT7lVRZWKM=)
                          2: FeRSaI58Ev-Ln_omefqDS1wpOcE.roa (hash: VtwF2AwRtjXtkXBam50V21xolPQHIDHrw5e0KXt9pQE=)
                          3: _rHEyFhBMkve8XY-2u_0M5SvUEY.roa (hash: 3MBR6pVJ71rnlILr1LVMBWKjPMEZiQ66W90KvCwSbpo=)
                          4: uAaaAwkHh37Yh7QiaeM24N_2cQ8.roa (hash: YODqMDn+FW1RXiU9YTO7+/jhAjNogHVA29ZzT3M5hD8=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: k+HZn15YqSrR+HDdGNfJfc0r22UCdtv2N7ufALgaHt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:9c:6a:10:95:44:28:84:51:76:3c:7b:60:e5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Feb  9 21:00:24 2026 GMT
            Not After : Feb 10 21:00:24 2026 GMT
        Subject: CN=8dc07e8a4709410797e23a1803de859e25eaf4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:db:8a:65:65:50:01:5c:f5:e7:c4:a5:60:72:
                    ba:56:f4:d2:42:2d:83:d3:fe:0d:f9:9f:d9:13:ac:
                    eb:f1:eb:02:5d:a6:56:76:11:5c:f3:09:01:7c:22:
                    fb:92:33:62:4c:b1:dd:17:83:6c:b9:24:57:94:62:
                    ab:b9:c4:ad:36:54:01:a2:66:41:ba:45:ff:bb:de:
                    91:e0:63:d0:f4:5d:b6:67:a1:c3:d4:cb:e0:a6:44:
                    bb:88:3c:ba:18:c6:37:5d:03:25:30:19:1e:4f:3a:
                    13:18:6d:b9:82:a0:b8:e8:89:09:3a:df:cc:29:5f:
                    51:1c:19:ca:bf:31:f4:da:20:9a:1e:1a:27:d8:73:
                    8e:92:3c:33:c4:a4:68:6a:67:49:8d:e1:42:35:d3:
                    db:ff:bc:a4:05:bd:13:6b:ab:81:d1:70:cb:be:be:
                    6d:d5:fa:ff:41:34:67:52:99:46:19:f6:b5:5b:9c:
                    91:8b:b2:c8:4b:42:05:b0:29:87:7b:33:ba:1b:72:
                    3b:9d:93:f0:5e:40:56:a3:e1:ab:a2:a0:ac:19:70:
                    e9:e5:59:bb:4b:cb:32:e4:50:1e:bb:96:d2:46:af:
                    9c:35:68:d8:af:a4:a4:77:ea:70:92:4d:0c:4e:98:
                    b5:b4:8b:49:77:96:71:82:2f:d1:b5:34:2a:20:b9:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C0:7E:8A:47:09:41:07:97:E2:3A:18:03:DE:85:9E:25:EA:F4:CF
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:a9:a8:36:4b:cc:af:0c:23:e1:f0:51:04:88:47:c7:ab:
         bd:4d:62:13:84:d1:70:0b:9f:95:1d:fb:b2:97:43:5b:9d:69:
         4d:09:b4:62:19:cb:59:3e:ed:62:09:42:c2:ff:65:b5:8d:d1:
         82:8e:7c:ce:bb:27:7a:a1:cf:07:37:d7:41:59:51:d6:db:c6:
         2d:2d:0e:13:66:f6:5b:a0:39:a4:14:f0:29:20:c1:4c:54:7e:
         bb:1a:e5:24:b3:ce:0e:a4:c7:a8:ae:52:29:21:b4:19:d7:25:
         3f:9f:56:5b:e8:4c:c2:70:58:58:9a:5e:16:aa:99:65:21:1d:
         a8:96:30:d2:ea:54:39:34:c6:3c:85:a4:0d:50:5f:21:9c:45:
         d1:f4:1e:1e:56:97:bb:39:d2:fe:a9:b1:ec:86:e4:fc:3d:12:
         4a:bd:9b:53:7f:0b:e4:92:c9:af:35:69:20:cd:59:60:94:48:
         fd:41:e5:d1:a3:f7:a7:0e:da:dd:07:fc:c1:f8:39:21:cf:ef:
         bf:e9:7b:5f:d0:20:d8:80:13:53:48:e4:03:b0:d6:5e:c8:29:
         b0:32:6f:f3:c6:df:91:ba:ec:eb:55:d0:45:e4:eb:9a:11:05:
         00:e4:7d:59:67:06:07:19:68:8e:14:af:9e:f1:10:9a:90:e0:
         1e:00:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:37 2026 by rpki-client